Extracting prog: 1h51m20.709774704s Minimizing prog: 23m46.708469285s Simplifying prog options: 0s Extracting C: 25.542289764s Simplifying C: 4m43.332096521s extracting reproducer from 49 programs testing a last program of every proc single: executing 14 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-ioctl$BTRFS_IOC_QGROUP_LIMIT-syz_open_procfs-socket$key-sendmsg$key-preadv-mmap detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x41000, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000000)={0x9, {0x0, 0x6, 0x1, 0x800, 0x9}}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/prev\x00') r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-socket$inet6_tcp-setsockopt$inet6_opts-mmap-sendmsg$nl_xfrm-socket$nl_xfrm-sendmsg$nl_xfrm-socket$inet-sendmsg$IPCTNL_MSG_CT_NEW-socket$nl_generic-syz_genetlink_get_family_id$ethtool-sendmsg$ETHTOOL_MSG_LINKMODES_SET-socket$inet6-bind$inet6-setsockopt$inet6_int-recvmmsg-ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL-socket$packet-setsockopt$packet_int-ioctl$sock_SIOCGIFINDEX-sendto$packet-socket$nl_xfrm-socket$can_raw-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_raw-sendmsg$ETHTOOL_MSG_DEBUG_SET-sendto$inet6-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp detailed listing: executing program 0: openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x12, 0x0, 0x0) mmap(&(0x7f0000ad9000/0x3000)=nil, 0x3000, 0x100000d, 0x110, r0, 0x45809000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xff}}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private1, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0xa0}}, 0x0) socket$inet(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414"], 0x84}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESHEX, @ANYRES8], 0x2c}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x4, 0x7, 0xf8, 0x3, 0x6, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0xf81e, 0x7, 0x9}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc141200004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r7}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000840)={0x3f4, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1b4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1b0, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdde}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\#^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '}!{+$:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\\\'&-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x76}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+@*@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x40, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x2e, 0x4, "0efb8377eaacd4be5c0ed2072361f9d11b9476a5b281905f5b6a46417ebf494ba7668363d6a8ffa106be"}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x170, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ':.\'-#%+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x101, 0x5, "192909c3a4545bdd01f278bc9785d86e8e52ef14fb4a7e891799be35af6219032934062e79588a50d344ee0141ee2e3e6b5cbf3a42d7a18ae718a54ac38dfc6eadebbe537a05119b25beee9958dc2a225719c42e55adf115761dad0892be4a3be9bf7fd52b9805608f41594bba9649493602650517b9a5414ba813432befb9755c932dd1365ed060f3c3dddaf1436c10965c67b19bb3845b48bf4499aa748bf742dc00fdc4c76ca9ec4fb3fa62198f28d84affde5476d1009b0656299428611ee2347167353363059a56bf6c435a77cfa1af3b0935eab9fa81f0c08326ee4a45c752ae222a90fc56623c916c0f79a7f9b091e42b3b60d26b21dee31cdd"}, @ETHTOOL_A_BITSET_VALUE={0xd, 0x4, "2119ed1555f5f8c7c6"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x4000840}, 0x40010) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-fspick-openat$cgroup_ro-fsconfig$FSCONFIG_SET_PATH-openat$cgroup_ro-signalfd-getsockopt$bt_l2cap_L2CAP_OPTIONS-move_mount-socketpair$unix-openat$ashmem-socket$inet6-setsockopt$inet6_IPV6_XFRM_POLICY-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_CPUID2-ioctl$KVM_SET_MSRS-socketpair$unix-sendmmsg$unix-sendmmsg$unix-close_range-syz_genetlink_get_family_id$mptcp-socket$nl_generic-openat$ashmem-openat$tun-ioctl$TUNSETIFF-ioctl$TUNGETDEVNETNS-accept4-epoll_ctl$EPOLL_CTL_ADD detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000240)='\x00', &(0x7f0000000280)='./file0\x00', r1) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='rdma.current\x00', 0x0, 0x0) r3 = signalfd(r0, &(0x7f00000001c0)={[0x3f2]}, 0x8) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0xc) move_mount(r1, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x122) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@remote, 0xb, 0x8, 0xfffc, 0x10, 0xa, 0x60, 0x80, 0x1}, {0x5, 0x9, 0xfffffffffffffffe, 0x100000000, 0xa89b, 0x0, 0x80000000000000, 0xfffffffffffffffe}, {0x400, 0x3, 0x0, 0x800}, 0x80000007, 0x0, 0x1, 0x0, 0x2}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0x2b}, 0x2, @in=@empty, 0xffefffff, 0x1, 0x3, 0xfd, 0xfffffffe, 0x0, 0xfffffffe}}, 0xe8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000010000"]) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000"]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000007dc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008001}}], 0x1, 0x4000) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$ashmem(0xffffffffffffff9c, 0x0, 0x40, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETDEVNETNS(r11, 0x54e3, 0x0) r12 = accept4(r2, &(0x7f0000000240)=@phonet, &(0x7f00000002c0)=0x80, 0x1800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r12, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-ioctl$BTRFS_IOC_QGROUP_LIMIT-syz_open_procfs-socket$key-sendmsg$key-preadv-mmap detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x41000, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000000)={0x9, {0x0, 0x6, 0x1, 0x800, 0x9}}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/prev\x00') r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-move_mount-mkdir-pipe2$9p-write$P9_RVERSION-dup-write$FUSE_BMAP-write$FUSE_DIRENTPLUS-mount$9p_fd-socket$inet_icmp_raw-ioctl$TIOCSTI-openat$uinput-capset-socket$nl_generic-syz_genetlink_get_family_id$tipc-sendmsg$TIPC_CMD_SET_LINK_PRI-openat$binderfs-syz_open_procfs-mount$9p_fd detailed listing: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="38010000fe0000", @ANYBLOB="7fdc98af24c46052db76afb5b62e1eef0738e7b7b0652ed6"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x2, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2501000000000000000741"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-socket$inet6_tcp-setsockopt$inet6_opts-mmap-sendmsg$nl_xfrm-socket$nl_xfrm-sendmsg$nl_xfrm-socket$inet-sendmsg$IPCTNL_MSG_CT_NEW-socket$nl_generic-syz_genetlink_get_family_id$ethtool-sendmsg$ETHTOOL_MSG_LINKMODES_SET-socket$inet6-bind$inet6-setsockopt$inet6_int-recvmmsg-ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL-socket$packet-setsockopt$packet_int-ioctl$sock_SIOCGIFINDEX-sendto$packet-socket$nl_xfrm-socket$can_raw-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_raw-sendmsg$ETHTOOL_MSG_DEBUG_SET-sendto$inet6-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp detailed listing: executing program 0: openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x12, 0x0, 0x0) mmap(&(0x7f0000ad9000/0x3000)=nil, 0x3000, 0x100000d, 0x110, r0, 0x45809000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xff}}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private1, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0xa0}}, 0x0) socket$inet(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414"], 0x84}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESHEX, @ANYRES8], 0x2c}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x4, 0x7, 0xf8, 0x3, 0x6, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0xf81e, 0x7, 0x9}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc141200004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r7}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000840)={0x3f4, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1b4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1b0, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdde}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\#^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '}!{+$:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\\\'&-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x76}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+@*@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x40, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x2e, 0x4, "0efb8377eaacd4be5c0ed2072361f9d11b9476a5b281905f5b6a46417ebf494ba7668363d6a8ffa106be"}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x170, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ':.\'-#%+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x101, 0x5, "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"}, @ETHTOOL_A_BITSET_VALUE={0xd, 0x4, "2119ed1555f5f8c7c6"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x4000840}, 0x40010) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-fspick-openat$cgroup_ro-fsconfig$FSCONFIG_SET_PATH-openat$cgroup_ro-signalfd-getsockopt$bt_l2cap_L2CAP_OPTIONS-move_mount-socketpair$unix-openat$ashmem-socket$inet6-setsockopt$inet6_IPV6_XFRM_POLICY-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_CPUID2-ioctl$KVM_SET_MSRS-socketpair$unix-sendmmsg$unix-sendmmsg$unix-close_range-syz_genetlink_get_family_id$mptcp-socket$nl_generic-openat$ashmem-openat$tun-ioctl$TUNSETIFF-ioctl$TUNGETDEVNETNS-accept4-epoll_ctl$EPOLL_CTL_ADD detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000240)='\x00', &(0x7f0000000280)='./file0\x00', r1) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='rdma.current\x00', 0x0, 0x0) r3 = signalfd(r0, &(0x7f00000001c0)={[0x3f2]}, 0x8) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0xc) move_mount(r1, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x122) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@remote, 0xb, 0x8, 0xfffc, 0x10, 0xa, 0x60, 0x80, 0x1}, {0x5, 0x9, 0xfffffffffffffffe, 0x100000000, 0xa89b, 0x0, 0x80000000000000, 0xfffffffffffffffe}, {0x400, 0x3, 0x0, 0x800}, 0x80000007, 0x0, 0x1, 0x0, 0x2}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0x2b}, 0x2, @in=@empty, 0xffefffff, 0x1, 0x3, 0xfd, 0xfffffffe, 0x0, 0xfffffffe}}, 0xe8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000010000"]) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000"]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000007dc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008001}}], 0x1, 0x4000) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$ashmem(0xffffffffffffff9c, 0x0, 0x40, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETDEVNETNS(r11, 0x54e3, 0x0) r12 = accept4(r2, &(0x7f0000000240)=@phonet, &(0x7f00000002c0)=0x80, 0x1800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r12, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-move_mount-mkdir-pipe2$9p-write$P9_RVERSION-dup-write$FUSE_BMAP-write$FUSE_DIRENTPLUS-mount$9p_fd-socket$inet_icmp_raw-ioctl$TIOCSTI-openat$uinput-capset-socket$nl_generic-syz_genetlink_get_family_id$tipc-sendmsg$TIPC_CMD_SET_LINK_PRI-openat$binderfs-syz_open_procfs-mount$9p_fd detailed listing: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="38010000fe0000", @ANYBLOB="7fdc98af24c46052db76afb5b62e1eef0738e7b7b0652ed6"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x2, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2501000000000000000741"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-mmap$binder-ioctl$BINDER_WRITE_READ-open_tree-move_mount-socket$inet_udplite-ioctl$KVM_CREATE_VCPU-getsockopt$sock_cred-setuid-stat-mount$9p_fd detailed listing: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000600)={@flat=@weak_binder={0x77622a85, 0x100a, 0x3, 0x300}, @flat=@binder={0x73622a85, 0x101, 0x100000000000001}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@posixacl}, {@cache_readahead}, {@dfltuid={'dfltuid', 0x3d, r3}}, {@posixacl}, {@loose}, {@cache_none}, {@access_user}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@uid_eq={'uid', 0x3d, r4}}, {@pcr={'pcr', 0x3d, 0x30}}]}}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-mmap$binder-ioctl$BINDER_WRITE_READ-open_tree-move_mount-socket$inet_udplite-ioctl$KVM_CREATE_VCPU-getsockopt$sock_cred-setuid-stat-mount$9p_fd detailed listing: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000600)={@flat=@weak_binder={0x77622a85, 0x100a, 0x3, 0x300}, @flat=@binder={0x73622a85, 0x101, 0x100000000000001}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@posixacl}, {@cache_readahead}, {@dfltuid={'dfltuid', 0x3d, r3}}, {@posixacl}, {@loose}, {@cache_none}, {@access_user}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@uid_eq={'uid', 0x3d, r4}}, {@pcr={'pcr', 0x3d, 0x30}}]}}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-openat$binderfs-open-socket$inet6-setsockopt$sock_linger-connect$inet6-sendmmsg$inet6-mount-syz_open_procfs-mount$9p_fd-preadv-write$UHID_INPUT detailed listing: executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) (async) open(0x0, 0x14927e, 0x0) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x1000009}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x11, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) (async) preadv(r0, &(0x7f0000000340), 0x0, 0x6, 0x6) (async) write$UHID_INPUT(r3, &(0x7f0000000700)={0x8, {"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", 0x1000}}, 0x1006) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-openat$binderfs-open-socket$inet6-setsockopt$sock_linger-connect$inet6-sendmmsg$inet6-mount-syz_open_procfs-mount$9p_fd-preadv-write$UHID_INPUT detailed listing: executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) (async) open(0x0, 0x14927e, 0x0) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x1000009}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x11, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) (async) preadv(r0, &(0x7f0000000340), 0x0, 0x6, 0x6) (async) write$UHID_INPUT(r3, &(0x7f0000000700)={0x8, {"69fb44ed69c01dc0413df96daf6c181c1471f0482be77c2328023e6ca1373c2a76e415da7b27897ac055e512fe31ed6b5515df24d3d1be41107860b24e3fa2781ba62a39ae4fb4d070885eef3c955c45f0b59affb78bae8a3c7040b74d48c4017e69d801aea4c4f865a2a40c8324d788c0cfe137f5d6cd92f22de4cf3862b187d9d1606f6fa29cf42a257279b4c3f4b2ca46b27d9157a5b557963176ea75bd501f43334e618a9fc02eb3c9ae88054d00bec58814d01bdae6a2e79e19d08bd4e4f68c4a76608c82d177c40734192451ceb15118fd41d76f93e6f373098360a9857fbd632d736a6026cf013d3f6e81f4430bb1ffca2e87349f803917eb1145ce5d3b04586b48932cfdf39445d6aea34c5405d6e87ed66560cff7950406f42fc384f253cecf3fcd5783465469f6521758e83fcd07b1b0340b69f61ef55f0c6f346df235e92076c29089ea416ea944ff8f3d3bab75d3468c079fba71acdfd7838b0d8445430e820ef0fb6e57a6557dfc4576f9e570008b0d966b18658cc1ad15bf97148b0e23bb9eaca6be4a9ac43730a78137dc5ea40ab83243115ba7ddef0cc42af340fd1e104a6a646e8ef93c1669bdc260afdfefccc82c01d511c6939b8e27528e47349714ab4b8faf31aa06e9c917102f84012b91509a25c22c77cad475eea7459553f15835fc4a06b6ec4442084f1533164651c3b8afebb84bc2261eb4321c5897a1910f36887f2f005f57694a40903a264e71dbe25ca95d69e0bc1cac963622887e42bbfaa4cfdbb7b7450eaa37862f0477103c29f3ba5782eb62afc7973d5093a31cecfc2b3e636b9e24359cb199b8ed95a7907649d30c7ff14e2b75a6f8388099df93634c48dcb4df5c4cf09fa07e758d6ff6fe3219fdadc4478cba27bc5b0ebfeb27158757c0fe788bf29a8115adf3afe2f479dfbc1f1efce803daa8c32762150df3bf89a3cb6f4be3724b52b4df8d3fb4a9bed5a6d4af464785db6a3b2b38b08d9391c091a37a1e49b77216e7226f7f296de13e3dbc9300e3699b51f1e28ff470cd2e45c44a35a52c8dc928b9eef713e448fdeb54e1382cd7ba00586e596664a7dc6278de9f82fa4b2c6bb4f1e1e0ab71ade91d2b66cd1a2fe33e2e371c859daefe5db4d46d649df9e06d7a48873b85bf1a2a8e8bc34ec03ba6b72fb6439231eb7b9c4fc2bb94c15ae3a40aa3ee4f5dd2a3209bab787a56af6a03f9ed9d1158de3bbc743c6852569ff277caaccf21fe6f44f43343dee0bad38b0f7492f34d44cd3c4d82796d66a4165ee5a2668963c06f20327e7e76b65d84fa2708734b961426a48503c9fe8dc841e89317e46e9d355c9afa5e4315784f2367fe59d6fa229cc2c299ba43fe7b04c343cb5163219c393c9a2afcd9f6303bcb5f77092a7331933ac71a88fc8757583814101c89cd4134ff2900725620f112953952f31cf9ec16232fb3615ae2da74434077c2b91e3856306f08634eef651595d953be43381678bf1cf978cc5c11d404f9fa4f5ebc1eb12efe99827600e52e726fcf15c0dedb2cdef516749542af920344f5cd63cc8ae4f4a32a88080e7ebbe00e15c0623a8fe06d092ca0caacd7d2c0faaa943414eb8333c09765d1a6490e724c88aeed344d64b96ae9c30efa9526c97ec396a4966b5e81f63007d9fc59c853def623f2f92d7fac6c4b71e1e914db9221acc0c160e13da59ced590f49efdcf4b68e8b5065087dc9bfe6433bf8f4d59b13079ed84b879192c1f5b3b7f1c3c3917d6b87ad72e08760512281bdd76ebb2d66e18db61e221388b3a6d6a81a843f5c12bdd344ebe34e27beb2a43ec66cd585e18b07d2aa39a0bfe2045a36092921fa1eaab3eef2cec6eac2309907c80eafcd07ef3be0b3b83fe5a15a3635605df53d9f4beb31eeb18f7f5d445dcdaba611bc3b988803b8f1c075dbe06a56cd6e864d039c6427c93132c0571c09288b09c9e74cc307a243e5018e5626570798c707b5fe28e2b0bab19a8191746bd3354342efe0c6d03628ba0d7ee4f875865dbbd1cd81ae7ada37c756d91e46f3c26ebeb3abf8e999114157ff23cd07f7e95b3fc445961b9a5dd2b9bf7861112ac262a08fce6c813a5a716477c2bef32a211cb2c860ab889992269055cedf436e201d95da227720d110103250a793d0a0f87434f3b6546e54d94c3348b80eb770d535e3c527ef2aa142e2213fe9221df6b9b6158f3d833a6201f446fb63599c4859b10eec65c5700ed48a2b0b6014be09903703d90f45111aae1247f207002a57be8cb9950a4ebcd4b97322b0b880cf9a7ebfbe3c4b0e2eb582efce15ef283d3a4d3042b1c7c4c65682602062a1c8bb6af98ea09ea23a0a0740b9bba51e87cff3b4196ccb01af4d869fcf6be0991b13eb6cb863b5b2bef587ae1155980294598db735efbe15c24e1146641bbcfa04a64f0140299ec2c1b94bd3a122c408506dd2a4c12dffbef02a4fae4955ec8010c7e2d00b7013db571a6e6fa8d61ee1ac810225b7427c4724412d2ffd84114cffe61d6b7ae6e9b8189a13cb3d90debdf305b28a0c4fc715621430b5ba8ad8e5a667c6bac412d77cb67b7b074a60ebffd06658eead8bb1a2442113ae8986d9bc580d54391c759f6ad04c1d80b5128c5d82967ce1fff3313ff0d2c739d026d0a6aed6d27242cc15a8c72101c09dc2496f6b240d60ea94431ed616005fbb908ef8f382734476513cd07177b44851260a24d261c232073d6ea59276ebbbf8f8a14779be0553110eaa6b4c9b7f74505eeb3ddd79e19713ca1ff04b47f93fa0d1ca73e3ffaf5b26bc3dc2b22776db7896dc14160dceda0a0a11eb85c95c8fb9a2b11b2fa8746a6bc9e3fee7d2db0a5fe4d77df57b9a18144e5ff3a228509729b55402d922075fe18910fdf59e1b64f7545e2f92f2a98b292d92e1a1b2ab55233db3acc4eaef0dcad1955e30fd72026f79033af6d029285b54e143fef0d5ed6bc122a9f3fa8774a176ec5c2bdeb3393ede55b800c72e72cff797168aa25d2eb306ba1f2d238ef015f2a985ae45ab146d19dede5d1eac075508f305d36963e4e1ddab6c8c62ddc47679d2c6583917f5a6b7f3e7953cdb255262b70240804c3e735c861ee3dcf1fa36e04cb3b6ad24fe02eb00a171d07c910da718f8272055f29701176b0d78f7a0564f152e1f00c9e90db6c0f2b11e4ce09ed884018809aad6fbda38a4cf81065c7aa9ac4cf68d09154b5fc039ea225c8dd737ca934b6e72aa76407ef291e0e8537bca001ee829d762ecc1b8e95c67da3d4fa09ed24c07e58080b44f62d6e1f4eab5c7ef549aed864c78e7450319978fb13bc990858980abbc575bf91301d8a134996e2f385e6c607ec38aa3ce2af5203fb71dbd109e580eb1bd4f2a549f1d32a858b8afb0b19e6e9abe92c3ad24dfad9b3fdd080c9adefa659e45fe844524d9701a2d84aa804e70ae44ccdc7bd2e4508b4f271c16e86ce7a17c80744cf4e976f89bf2cd874f5e000151ffb909b55fbdf1ed67203c867ee6f524d292ae784342bf5e2350e01a29e1f2b4e170828f1ad8e135996dec441f6085799baeb4752462c232dba9f5793c51fbfc06ff0b0691b30d9ae94f3fc2e248020eeca73af8ef766e9c82a2162ecae3c209617d5b6b7378fb1e9bba4c65e2687733b6359ce80bc200fa8c6251fac2e25d175cc86570a5bbfff5c6b2751df67d3fef290375ab8e02fa7a1ec87758648a0ba12fd9ee8f9cf0b582f862d261ae048934188c7df0325501c8c71bb3afbabc05051b7fbd4749a85bd6eb9951625cf391d7713e889814ed776cd43b38090ce169dfa280f5546f4d34c5fb70839b563bdc6f6676d0755a59f2013c8447f59ca5267fd1397414225c45ef32095829ac8cb4080b1fe72d444fd3e397eccf813193540e02b0f0cd244b98c7522823497e0dc2cf5f4dfce46cde4f5b0760c6255c14073d6d8343f1504ab525e9ddea76c67bc5588325e2e7f88ce9eee79c06ece6e04aed0e8e180a74818315b57bc93784bd7ac320cc8ad36313ce4b33cad94c2fcb762df4a8e6ba34ec61d97e8eeb5aa499de384f0197e6760236a8a212a902260cc89fb063ed97081cda3145b113e5ca0f014b1f216bcf77ef6c7f83164bfc3810f04bed01e9e4ca70a4a2679a67ba953a3dba547e559f3b345e23c53f343fe8a96b791d75571f27c52941fd5ac4b8b5c939c5d9b581cef6a3e6a3f534cff0fbd5fe661335a0c596991010be4d22a0034d6375aa26d99147cbb4fd9fe2baf697474b46cbb844c6dadf8fb0eca487ae7c97319a0d87f614a69566c54cfca972ba2c518facda1fe135f72e76781e49320dfd9087b1b9782d6748e5a7f2702c4876c8ccc5128dda41a4e97a500f232284d3db041d80bc075c4d33dfa7669595f21877715b33a25ba5ac454868b9200ff9adb54412dca91d0b1df71e3c82740727aca095e5375b07299a849c1ff8e1d48b4a291ab546ea5bdd0e76b95cd45ce0dec88c1862c97a8dde48730d083acf7c2d64b044a68189eaf5a7cb6a3104b895299df2519982baeefa5a3b2924d63b5c2bbc2899957c9321e6212240470974b22943c06a689fc8441ebfab26df05c7957df4850917f39026d31b9862d82b71fcdd5c09537ef4676d233aa3a19f97f04517e9291fbd84535058b4524c64ec24ae948fe677d41a03dc6562db5b6236cf9700ad969cb8067c50793a27f96bfbc013e5d8337d62c125ce9b89ac3718b14a9ad8d52ad0d7e4f9ba1e9078cd113ddea5541727ea07ce70892ca7e5fb31d08adf1300db47d0a83086c884fba04fc87f466c0eb5f2b196209a6e56d31c07196ceacda371f8190a1a4200b5847383bcfeceba6b951628435ff4d05f928c6ed79d93659b4250382f544ef0f217be41d3141cacf8dbdd384f68441fe108a5e9bfef1339c27b2ba19b1aa164fc91e4cb367f3d833784c749f96a2b2902fb5485f91d597c38440c898a0b98bc0e2b2baaf651c3ce8ee4d0f719dc74f143c03ac973922b91179ac3a8fd4a06a95798c767decb302dc055a23c32dc73781edd9349beb1dd635dc9ac50899cd1d209497e509605bf92d6acfdafeea642e6134b38b7b81e6017323ba927889ab715663ea9d6fb6b40321f20719c9029c095fe2028b9b5c48d22ec49c2f88ec58530c10eab472e7afc993f526bf4abc811bcc0b372196d12b253699f3da46b0e4d01b73c7a0e7846b5619670360aa6e55be7e92fd582a7df83a29670b396e54bbb41043f39f2046d90acdc0d9e83da8af9fb353a7f7761e20eca613deebae26d736116ff45275ec717bfda586163fca3443ce999b1dcad0b0a88ac51390e33544739a0bb5728e1dafc220950a7d50418eae02f1b346679727e287ed38b528003d11cbdaef13f8208bcc98469344663eb4461e481bd9da23bf6ec5659ea1fd053c2949b5e259dbe70da2124c8324c18ceba907e2f2884182c83b317dfc4f03f15795d7f75246429b5fbbc2086ba9e8ff6bdf2b807de40c740822a5b3eddf5f0e18174e74a8415dd63581d09631ddcfb6a2ae70b1c70e116c57aaa30dc0a7170fb414be4b91e6ed981f78b87e701feca39a9d7adef542b58121f8a8c66481b046104ec5fb74113614d339bca807782066f776327ff71097ce380908824dd47b361537ef7d68a48f7a84e1c7f54ef84da7cdcca3433075e944895bb31d2726b7d3fa3f9c05c1d6eda7cc5761ec37a7d6d2825a6cc2c2a2fc6754098655989d6295308dcf7ed5d077a961e77045c0cdbbac423b2256297b12f96427f45b00bcf60045041f3c84df31de0bf2d711ea3", 0x1000}}, 0x1006) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-capset-ioctl$KVM_CREATE_VM-openat$snapshot-ioctl$SNAPSHOT_ATOMIC_RESTORE-ioctl$KVM_SET_PIT2-socket-ioctl$KVM_CREATE_VM-sendmsg$inet-shutdown-ioctl$KVM_SET_MSRS-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-ioctl$KVM_RUN-setsockopt$packet_tx_ring-syz_usb_control_io$cdc_ecm-syz_usb_control_io$printer-syz_usb_control_io-mount$binderfs detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000001c0)={0x0, 0x5}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20801, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) r3 = socket(0x29, 0x4, 0x7d) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20004000) shutdown(0xffffffffffffffff, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000c80)={0x20, 0x0, 0x4, "f670e000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@flag='rw'}]}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-capset-ioctl$KVM_CREATE_VM-openat$snapshot-ioctl$SNAPSHOT_ATOMIC_RESTORE-ioctl$KVM_SET_PIT2-socket-ioctl$KVM_CREATE_VM-sendmsg$inet-shutdown-ioctl$KVM_SET_MSRS-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-ioctl$KVM_RUN-setsockopt$packet_tx_ring-syz_usb_control_io$cdc_ecm-syz_usb_control_io$printer-syz_usb_control_io-mount$binderfs detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000001c0)={0x0, 0x5}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20801, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) r3 = socket(0x29, 0x4, 0x7d) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20004000) shutdown(0xffffffffffffffff, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000c80)={0x20, 0x0, 0x4, "f670e000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@flag='rw'}]}) program did not crash single: failed to extract reproducer bisect: bisecting 49 programs with base timeout 6m0s testing program (duration=6m12s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 11, 30, 17, 7, 27, 27, 30, 21, 17, 30, 19, 12, 12, 24, 17, 30, 26, 29, 12, 12, 20, 21, 30, 9, 10, 21, 17, 25, 19, 11, 19, 30, 16, 7, 30, 30, 30, 12, 10, 30, 10, 25, 7, 19, 7, 30, 30, 7] detailed listing: executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000000)) executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f00007cf000/0x2000)=nil}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x4) iopl(0x3) process_mrelease(0xffffffffffffffff, 0x700000000000013) linkat(r2, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00', 0x400) executing program 3: r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) r2 = open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$nl_generic(0x10, 0x3, 0x10) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000100)=""/155, 0x9b) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x1c1341, 0x0) read(r4, 0x0, 0x0) sendfile(r4, r4, 0x0, 0x7ffff000) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x68f, 0x58) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000035}, 0x8000) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x8, 0x7800, 0x1, 0x9, {{0x1e, 0x4, 0x1, 0x31, 0x78, 0x67, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x23}, @empty, {[@cipso={0x86, 0x2b, 0x3, [{0x2, 0x2}, {0x2, 0xc, "b2bbf0e6cdb91dee909f"}, {0x0, 0xa, "55cc51cb69dd7c0d"}, {0x0, 0xd, "304c67870929ecbdceb034"}]}, @lsrr={0x83, 0x23, 0x37, [@multicast1, @multicast1, @remote, @broadcast, @loopback, @multicast1, @empty, @multicast2]}, @end, @timestamp_addr={0x44, 0x14, 0x64, 0x1, 0x0, [{@empty, 0x1}, {@multicast2, 0x6}]}]}}}}}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000100)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', @local, 0x5, 0x6, 0x0, 0x0, 0x3, 0x867000c0, r11}) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xd0, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_SOPASS={0x69, 0x3, "fa071610d47d3a4b190bbf6f88c33b4e1d3da39c3ba266916e01f4bfd728a94f7a4ed0308bfd47d9d7cd18d2f4ae8144e3934bfc38dbfc8e36d14028eb971fdc34563448276939881e30d2c7d7e777d222991d8a65af844ad40fa50570f783cf10eac191e8"}, @ETHTOOL_A_WOL_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20040044}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r5, 0xfffff000) executing program 3: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xa, 0xa, 0x9, 0x2, 0x0, 0x70bd2a, 0x25dfdbff}, 0x10}}, 0x48080) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001080)='/sys/power/sync_on_suspend', 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000002c80)={0xfffffffffffffd73}, 0x30) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f20e"]) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000a40)=ANY=[@ANYBLOB="00000200018068ca3407000000e67f39"]) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000000)) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x4, 0x1b, &(0x7f0000000200)=ANY=[], 0x0) ioctl$EVIOCRMFF(r4, 0x5509, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) select(0x40, &(0x7f00000000c0)={0xe, 0x3, 0x80000001, 0x0, 0x8, 0x3, 0x7fffffffffffffff, 0x9}, &(0x7f0000000140)={0xffffffffffffffff, 0x9, 0xffff, 0x2, 0x7, 0x9, 0x4}, &(0x7f0000000180)={0xfffffffffffffffd, 0x4, 0x59d72f2e, 0xfffffffffffffffa, 0x3, 0x24}, &(0x7f00000001c0)={0x77359400}) mremap(&(0x7f0000410000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@flat=@weak_handle={0x77682a85, 0x0, 0x1}, @flat=@binder={0x73622a85, 0xf}, @fda={0x66646185, 0x4, 0x0, 0x19}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x50, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000001c0)={0x0, 0x5}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20801, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) r3 = socket(0x29, 0x4, 0x7d) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20004000) shutdown(0xffffffffffffffff, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000c80)={0x20, 0x0, 0x4, "f670e000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@flag='rw'}]}) executing program 32: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000001c0)={0x0, 0x5}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20801, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) r3 = socket(0x29, 0x4, 0x7d) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20004000) shutdown(0xffffffffffffffff, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000c80)={0x20, 0x0, 0x4, "f670e000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@flag='rw'}]}) executing program 2: ioprio_set$pid(0x2, 0x0, 0x0) dup(0xffffffffffffffff) connect$pptp(0xffffffffffffffff, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x414040, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, 0x1c) sendto$inet6(r3, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22", 0x10, 0x8040, 0x0, 0x0) setuid(0xee00) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x4009, &(0x7f0000000540)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) llistxattr(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000002240)={&(0x7f0000001d00)={0xa, 0x4e24, 0x21f, @empty, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="1400000000000000290000003e00"], 0x18}, 0x4080) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r8, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x274, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans5gd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',k']) ioctl$ASHMEM_SET_SIZE(r8, 0x40087703, 0x840) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r9, 0x8983, &(0x7f0000000000)={0x6, 'xfrm0\x00', {0x1}, 0xff7f}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r9, 0x8982, &(0x7f00000023c0)={0x0, 'vlan1\x00', {0xffe}, 0x6}) sendto$packet(r1, &(0x7f0000000000)='g', 0x1, 0x2001, &(0x7f00000000c0)={0x11, 0xd, r2, 0x1, 0x0, 0x6, @remote}, 0x14) executing program 2: r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) capset(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x87) unlinkat(r1, &(0x7f0000000000)='./file0\x00', 0x200) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x1802, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup(r3) fsetxattr$security_selinux(r4, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r6 = inotify_init() ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000000c0)=0x400) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000180)=@req={0x1, 0x4, 0xfff, 0x2}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r7) sendmsg$NL80211_CMD_GET_REG(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r8, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2000c001}, 0x40080) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) executing program 2: prctl$PR_MCE_KILL(0x35, 0x1, 0x2) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f000065a000/0x4000)=nil, 0x4000, 0x2000000, 0x11, r0, 0x147a5000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="0700000000000000040000000200000001000000000000000d000000000000000e00000000000000070000000000000001000000ffff0000090000000300000001000000000000000200000005000000ff0f00000f000000000000000000000000004f000000000002000000050000000000000000000000ffffff7f780f00000000000000000000000000000000000000000000000000007f00000001000000000000000000000000000000ff0300007f0000000100000000000000000000000000000000000000030000005ef979880000000000000000070000000600000008000000e20000000000000000000000000000000000000002000000040000000100000000000000070000000d0000000000000000000000000000000000000000000000000000000200000005000000010000000000000000000000010400"/344]) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat$cgroup_ro(r3, &(0x7f00000002c0)='net_prio.prioidx\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=r6, @ANYBLOB="010028bd7000000000180001801400020076657468305f746f5f626f6e6400000024010380"], 0x150}}, 0x0) sendmsg$key(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020e0000100000000000000000000000030005000000000002000000ac1e000100000000000000000300060000000000020000000000000000000000000000000800"], 0x80}}, 0x4008844) mkdirat$cgroup(r3, &(0x7f0000000000)='syz0\x00', 0x1ff) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet6_int(r1, 0x29, 0x24, 0x0, &(0x7f00000000c0)) executing program 2: accept4$tipc(0xffffffffffffffff, &(0x7f0000000200)=@name, 0x0, 0x800) mkdir(0x0, 0x0) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) chown(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44b}}, {0xf, &(0x7f0000000200)=@string={0xf, 0x3, "d623da13c036704bd9e5088c9f"}}, {0x0, 0x0}]}) syz_usb_control_io$printer(r2, &(0x7f0000000600)={0x14, &(0x7f0000000480)={0x0, 0x3, 0x2, {0x2, 0x9f1129cefb0311ed}}, &(0x7f0000000580)={0x0, 0x3, 0x2d, @string={0x2d, 0x3, "c75e0fcedacba63789b6cc97a548ee687ff5187c73e6e22a999aacca3df3681f258fd1fe6fdaf9956157d2"}}}, &(0x7f0000000880)={0x34, &(0x7f0000000640)={0x40, 0x18, 0x37, "4e37e4d73e62fc23a62225c9ba956470caec04be113968f24da204719f7a6c31a2e812f565c15a9c7871f9675362c39705d7d6e1143499"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000740)={0x20, 0x0, 0x93, {0x91, "63b8da0560f1101ecb97911a7ee9843da1ebba206e520e89581e3668f69c1543fcdf1e2df558025cb8ce33a01b61fd6b802bf121f2e9d56416e1e2d641cd569a34d84c6b5dc8d1f4149361e465762f353c3e52f91a58771941598c8d63ecae0a79e84aa72ebdf643abfb19d6e6e2f095ff7b7cf7072dfdedf31897c891d3fbd41b67ce3758035ad9605808c7ecac3d4c0b"}}, &(0x7f0000000800)={0x20, 0x1, 0x1, 0x4}, &(0x7f0000000840)={0x20, 0x0, 0x1, 0x2}}) syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f00000008c0)={0x0, 0x6, 0x83, {0x83, 0x6, "71eab2b54d0e926692ba0a415597b6587267e38abf891aaca34ef0465aa77d9f51a1f5425537b72730a451f32947fac165e6cfb59beb34fca0b2a9445c5c88a21ae58fe3daafd199324997b53bfdc0a8d98ff9481052e9e60a03b196e92bc64beeb6bf5a386790ee64ff00b2281f0ff936bc174078fb3ba5039021ff9a58a56937"}}, &(0x7f00000009c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x8, 0x10, 0xa, 0x1, 0xfffb, 0xfffc}}}, &(0x7f0000001000)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="1aa6f4166827169071400c00000000"], 0x0, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000cc0)={0x20, 0x0, 0x4, {0x2, 0x3}}, 0x0, 0x0, 0x0, &(0x7f0000000dc0)={0x40, 0xb, 0x2, '(-'}, &(0x7f0000000e00)={0x40, 0xf, 0x2, 0x4}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)={0x40, 0x1c, 0x20, 0x5}, 0x0, 0x0}) syz_open_procfs$userns(0x0, 0x0) syz_usb_connect$uac1(0x5, 0x0, 0x0, &(0x7f0000001bc0)={0xa, &(0x7f00000017c0)={0xa, 0x6, 0x110, 0x4, 0x7, 0x58, 0x20, 0x4}, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000002540)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002500)={0x20, 0x0, 0x1, 0xb}}) mount$fuseblk(0x0, 0x0, 0x0, 0x1000a, 0x0) syz_usb_ep_write(r2, 0x8, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, &(0x7f0000003740)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000090, &(0x7f00000005c0)={0xa, 0x4e20, 0xa3, @loopback, 0x1ff}, 0x1c) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x800, 0x0, 0x802}, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a00010200000000000000000a"], 0x164}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x41000, 0x8) syz_open_procfs(0x0, &(0x7f0000000440)='net/udp6\x00') executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) mincore(&(0x7f0000701000/0x1000)=nil, 0x1000, &(0x7f00000004c0)=""/74) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r3, 0x82, 0x5, &(0x7f0000002340)='hello') pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r5, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u}]}}) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc004ae0a, &(0x7f0000000080)=""/8) executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) (async) open(0x0, 0x14927e, 0x0) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x1000009}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x11, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) (async) preadv(r0, &(0x7f0000000340), 0x0, 0x6, 0x6) (async) write$UHID_INPUT(r3, &(0x7f0000000700)={0x8, {"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", 0x1000}}, 0x1006) executing program 33: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) (async) open(0x0, 0x14927e, 0x0) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x1000009}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x11, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) (async) preadv(r0, &(0x7f0000000340), 0x0, 0x6, 0x6) (async) write$UHID_INPUT(r3, &(0x7f0000000700)={0x8, {"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", 0x1000}}, 0x1006) executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close(r0) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) close_range(r0, r1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="40ee00"}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100200a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="81", 0x1}], 0x1, 0x8, 0x2) executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x400}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x80008, &(0x7f00000001c0)=ANY=[@ANYBLOB="b86d1114f42f6097738afa84000000e32104c0fc562ded7476ecde21a820b1da23a860a20e2ff8082e9b37342645f974452312797ab2721572452b5e", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYRESDEC=0x0]) preadv(r2, &(0x7f0000000340), 0x0, 0x6, 0x6) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000000000/0x4000)=nil, 0x4000}) close_range(r5, r5, 0x0) executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="af24c909db8a183afd0640ba6f70be1c385381a46b60877a2634c69308c47523f939ee98e53c96a784bd2b7fd6a9d73e6f4a0f1ec60043f67c6065a9bf9818472ef0305937c037e72595fe1f6c7fda98dc1c13", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x50) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x220002, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0xde5, {{0xffffffffffffffff, 0x4, 0x200000000800, 0xffffffffffffdffd, 0x1, 0x0, {0xfffffffffffffffd, 0x6, 0x2, 0x8, 0x0, 0x4, 0x66, 0x0, 0x0, 0x8000, 0x17000000, 0x0, 0x0, 0xff}}, {0x0, 0x6a9f0190c8d7f4e7}}}, 0x0, 0x0}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) recvfrom(r4, &(0x7f00000002c0)=""/101, 0x65, 0x2000, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @empty}, 0x2, 0x4, 0x0, 0x3}}, 0x80) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r5 = dup(r4) write$FUSE_DIRENTPLUS(r5, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) r6 = socket$inet(0x2, 0x2, 0x6) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000000104010200000000000900000a0000050a000200000000ff05000000050001000100000008000340"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4044844) r7 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b48, &(0x7f0000000280)={0x0, 0xc5ba, 0x1, 0x1, 0xc3}, 0x0, 0x0) splice(r8, 0x0, r9, 0x0, 0x2000000002ffff, 0xb) sendmsg$netlink(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000011000100"], 0x30}], 0x1}, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_team\x00', 0x0}) (async) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) (async, rerun: 32) r2 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) (async) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async, rerun: 32) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0) (async, rerun: 32) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140), 0x171002, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x10000003) (async) openat$cgroup_ro(r4, &(0x7f0000000000)='memory.swap.events\x00', 0x0, 0x0) (async) getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000640)={'filter\x00', 0xb001, 0x4, 0x430, 0x0, 0x130, 0x0, 0x348, 0x348, 0x348, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x3f5e, 0x4, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x10, {@empty, {[0xff]}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10001, 'syz0\x00', {0x7b}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @local, @broadcast, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x480) (async) setreuid(0x0, r5) fcntl$setsig(r0, 0xa, 0x3b) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) (async) mremap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) (async) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000100)='/dev/ashmem\x00') executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) getpgid(0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ptrace(0x10, r1) (async) ptrace$poke(0x4, r1, &(0x7f0000000380), 0x10000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f00000000c0)={0x0, 0x1}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x3, 0x0, 0x0, 0x0, {0xa, 0x4e24, 0x9, @empty, 0x3}}}, 0x3a) (async) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x3}) (async) linkat(r2, &(0x7f0000000180)='./file1\x00', r2, &(0x7f0000000280)='./bus\x00', 0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) syz_open_dev$MSR(&(0x7f0000000040), 0x6, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000600)={@flat=@weak_binder={0x77622a85, 0x100a, 0x3, 0x300}, @flat=@binder={0x73622a85, 0x101, 0x100000000000001}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@posixacl}, {@cache_readahead}, {@dfltuid={'dfltuid', 0x3d, r3}}, {@posixacl}, {@loose}, {@cache_none}, {@access_user}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@uid_eq={'uid', 0x3d, r4}}, {@pcr={'pcr', 0x3d, 0x30}}]}}) executing program 34: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000600)={@flat=@weak_binder={0x77622a85, 0x100a, 0x3, 0x300}, @flat=@binder={0x73622a85, 0x101, 0x100000000000001}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@posixacl}, {@cache_readahead}, {@dfltuid={'dfltuid', 0x3d, r3}}, {@posixacl}, {@loose}, {@cache_none}, {@access_user}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@uid_eq={'uid', 0x3d, r4}}, {@pcr={'pcr', 0x3d, 0x30}}]}}) executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4142, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x13000000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r1, &(0x7f00000000c0)="8f2a0a65", 0x4) sendfile(r1, r0, 0x0, 0x400000000003895) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffff9c, 0x40106614, &(0x7f0000000180)) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc0000) write$P9_RSTAT(r2, &(0x7f0000000100)={0x4a, 0x7d, 0x2, {0x0, 0x43, 0x1, 0x9, {0x20, 0x0, 0x3}, 0x1840000, 0x8000, 0x9, 0x7, 0x1, '\xe4', 0x4, '$.]$', 0x8, 'bridge0\x00', 0x3, '%$%'}}, 0x4a) open(&(0x7f00000001c0)='./file0\x00', 0x210100, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4142, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x13000000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) (async) write(r1, &(0x7f00000000c0)="8f2a0a65", 0x4) (async) sendfile(r1, r0, 0x0, 0x400000000003895) (async) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffff9c, 0x40106614, &(0x7f0000000180)) (async) pipe2$9p(&(0x7f0000000080), 0xc0000) (async) write$P9_RSTAT(r2, &(0x7f0000000100)={0x4a, 0x7d, 0x2, {0x0, 0x43, 0x1, 0x9, {0x20, 0x0, 0x3}, 0x1840000, 0x8000, 0x9, 0x7, 0x1, '\xe4', 0x4, '$.]$', 0x8, 'bridge0\x00', 0x3, '%$%'}}, 0x4a) (async) open(&(0x7f00000001c0)='./file0\x00', 0x210100, 0x0) (async) executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = epoll_create1(0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d660800000000000000f3c86b66765167205fb82c9179ae3a9200e9d8127995854ab18e810e0ffbbfeda4e96f710da8499cc404dee9b5be236fa134f112b1734f271e9751", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',k']) truncate(&(0x7f0000000240)='./file0\x00', 0x100206b12) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r6, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_SET_REGS(r7, 0x4090ae82, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r7, &(0x7f0000000080)={0x9}) executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x8000000000002}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0)={[0x8001a0ffffffff]}, 0x8) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r2, 0xa, 0x12) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8) ppoll(&(0x7f0000000100)=[{r3}], 0x1, 0x0, 0x0, 0x0) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x13) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)="05"}) syz_io_uring_setup(0x4cf7, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000180)=[@request_death], 0x0, 0x0, 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000400)={0x0, {{0x2, 0x9, @empty}}}, 0x88) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x4, 0xc2, 0x4f, 0x40, 0x2, 0x80, 0x1, 0x3, 0x44, 0x8, 0x0, 0x9}, {0xb, 0x1, 0x6, 0x8, 0x9, 0xff, 0x4, 0x3, 0xa, 0x13, 0x7, 0x6, 0x1}, {0x1ff, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0xfb, 0x4, 0x5, 0x0, 0x2, 0x4}], 0x9}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10000, 0x7fff, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) executing program 6: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'veth1_to_team\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000080)=0x9, 0x4) sendto$packet(r1, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x11, 0x5, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x12, r0, 0x45809000) accept$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0xfffffffffffffff8, 0x80}) executing program 6: getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) io_setup(0x9, &(0x7f00000003c0)=0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) io_submit(r0, 0x1, &(0x7f0000002940)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x7fff, r1, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0xccf73530754b2b5a}]) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r3, 0x2000) executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') socket$packet(0x11, 0x2, 0x300) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000000)="580000001500add40500000000e5000002117ffffdff81004e230e227f0000000001e809100000ffffe74fd200000000000000020000000000000000000000000000000000079ad148d4ee0000b9cb25bba2968253ea1c03", 0x58}], 0x1) sendmsg$key(r1, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="020300090a0000000000000000000200030006000000000002000000891414bb00000000000000000200010000000000fd000503feffff4b03000500000b000002004e1fe00000020000000000000000"], 0x50}}, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}, {&(0x7f0000000100)=""/103, 0x67}], 0x2, 0xe, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$BLKDISCARDZEROES(r3, 0x127c, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x45809000) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500030000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e000fff04fcff", 0x58}], 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x4, 0x6, 0xfffa}, 0x1b, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x0, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x4, 0x71, 0x2, 0x6, 0x7, 0x2, 0x5, 0x40, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xfffff801, 0x4, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x5, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0xf, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x8001, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0x80000001, 0x4, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001"], 0x6c}}, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f00000000c0)={0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000054000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) executing program 6: r0 = socket(0x10, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT]) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000480)}, 0xa}, {{0x0, 0x40, 0x0, 0x0, 0x0, 0xff80}, 0xf}], 0x2, 0x40012040, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x300, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a"], 0x18c0}}, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r3, 0x147a5000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) executing program 6: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f00000035c0)=""/76, 0x4c}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000780)=""/83, 0x53}], 0x8}, 0x81}], 0x2, 0x2100, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e00000004fcff", 0x58}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r6, 0x0, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r6, 0xaead) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000040)=@x86={0x6, 0x3, 0x0, 0x0, 0x2, 0xdf, 0x6, 0x4, 0x2e, 0x4d, 0x0, 0x33, 0x0, 0x40, 0x8, 0x2, 0x7f, 0x0, 0xbb, '\x00', 0x4, 0x403}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000015000072000040"]) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc3842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="38010000fe0000", @ANYBLOB="7fdc98af24c46052db76afb5b62e1eef0738e7b7b0652ed6"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x2, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2501000000000000000741"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x4000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) executing program 0: getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = fcntl$getown(0xffffffffffffffff, 0x9) r2 = gettid() r3 = getpgid(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000480)='uid_map\x00') close(0x3) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r1}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x8c0) r4 = socket$inet6(0xa, 0x2, 0x0) getrandom(&(0x7f00000001c0)=""/8, 0x8, 0x5) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x3000000, @mcast2, 0x2db}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x11, &(0x7f0000000000)=0x1, 0x4) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r5, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r6, 0x2000) socket$nl_netfilter(0x10, 0x3, 0xc) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000240)='\x00', &(0x7f0000000280)='./file0\x00', r1) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='rdma.current\x00', 0x0, 0x0) r3 = signalfd(r0, &(0x7f00000001c0)={[0x3f2]}, 0x8) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0xc) move_mount(r1, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x122) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@remote, 0xb, 0x8, 0xfffc, 0x10, 0xa, 0x60, 0x80, 0x1}, {0x5, 0x9, 0xfffffffffffffffe, 0x100000000, 0xa89b, 0x0, 0x80000000000000, 0xfffffffffffffffe}, {0x400, 0x3, 0x0, 0x800}, 0x80000007, 0x0, 0x1, 0x0, 0x2}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0x2b}, 0x2, @in=@empty, 0xffefffff, 0x1, 0x3, 0xfd, 0xfffffffe, 0x0, 0xfffffffe}}, 0xe8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000010000"]) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000"]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000007dc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008001}}], 0x1, 0x4000) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$ashmem(0xffffffffffffff9c, 0x0, 0x40, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETDEVNETNS(r11, 0x54e3, 0x0) r12 = accept4(r2, &(0x7f0000000240)=@phonet, &(0x7f00000002c0)=0x80, 0x1800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r12, 0x0) executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x3}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, &(0x7f0000000000)={0x1, 'syz_tun\x00', {}, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000008009d000040"]) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) executing program 1: timer_create(0x3, &(0x7f0000000140)={0x0, 0x1, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) timer_settime(r0, 0x1, &(0x7f0000000380)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r0, &(0x7f0000000000)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x2, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) executing program 1: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x23, 0x1b, {0x1b, 0x4, "db9d28e00f494ce45f09509ce4e55eecdfc286b1c950cc9ea7"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x44, &(0x7f00000000c0)={0x40, 0x31, 0x1, "9b"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000140)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000180)={0x20, 0x80, 0x1c, {0x4, 0x3ff, 0x8, 0x1, 0x1, 0x9, 0x6, 0x6, 0x4, 0x2, 0x1, 0x7d}}, &(0x7f00000001c0)={0x20, 0x85, 0x4}, &(0x7f0000000200)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000240)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000280)={0x20, 0x89, 0x2, 0x1}}) r0 = syz_usb_connect$cdc_ncm(0x0, 0xa2, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x2, 0x1, 0x3c, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '-'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xffff, 0x2e3, 0x1000, 0x7}, {0x6, 0x24, 0x1a, 0x3, 0x2}, [@country_functional={0xe, 0x24, 0x7, 0x2, 0x5, [0xfa1, 0x2, 0xb, 0x9]}, @acm={0x4}, @dmm={0x7, 0x24, 0x14, 0x62, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x80, 0xc3, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x0, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2, 0x9, 0x4}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x310, 0x4, 0x0, 0x1, 0x20, 0x6}, 0x6a, &(0x7f0000000440)={0x5, 0xf, 0x6a, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0x4e, 0x10, 0x2, "2614d294d6aaf3adfd71a7886843aa4f8b817093e0ca3a130005aff8aa76bffc9ca68db47ce45b3d278754c74e88a8055f155cd367db4032b80cf0ccb122c64c69081eb0edeead15461889"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0x4, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0xbd, 0xd, 0x8}]}, 0x2, [{0x7a, &(0x7f00000004c0)=@string={0x7a, 0x3, "acbb50f5eecc6eda17e093e8aa1992c3bb64e136653be267a6cd622349f0948f31a0879edc864cd1b31cef0af64a8c4fc9b661b8808d3bec38224c63ce86282ebc889c0ecad4fb7cdd5697430e4f7512cbd284b9ab35a57d23a03614de33ef30dfe9972ae6232da51edb0c9df2b98e74159b21e9f98bf1e0"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x3409}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000700)={0x14, &(0x7f00000005c0)={0x0, 0x5, 0xef, {0xef, 0x31, "404bd274b0d7c91dff24b631c75a7bbb48a34240aa62be4eb4f8207d876440fb3a65a207391b7324da7195bcee5af59869976f24a302d9573002e33490ef409dffbd89c51af1a9925203e85389d81e3144f754b089b87d1e1a21a2e6f163a9863f8f08cbbb73ae8408b8d20f76421d3a0125b2ddce192b473ff5c571631767161822b40e5367846dd94162654efcbbf07727ae693c10aa23db429a49f874dc9d20d948eeccd3d0d9fe53a4b3addde2b4c4eeae280f97b2c93ff124e4707d650a036f682a841c9b9a3f2be0a2c5f60f84282bb16b21f4f1ab684abf19dda5a62f9379fd85db7dc6501c31c053a3"}}, &(0x7f00000006c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000009c0)={0x44, &(0x7f0000000740)={0x0, 0x15, 0xb0, "586c541cfe4983f716cd1c8b2b9745a6eca653e18db8bc1b3d3ec54ba7c8076b57b6a817e91e2d23bcbfbd896674eec6089cad557c0170f6324b70cd9a39ac056b67e108f20a1120d7684d5165d9a196c4fecb0241a2aeb5343cdaee4639e0b76537e41546b998bea33932bedc3477f40ac1329662922f5bb9ee82bf178c2668bffd245763528a1a81f0f9887e218cc44a138e5337fc6841bfc4460c235bacf3eac46439d10a12b88e09908fb2324641"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000880)={0x20, 0x80, 0x1c, {0x5, 0x0, 0x7, 0x5, 0x8, 0x0, 0x6, 0xf9bb, 0x0, 0x6000, 0x1, 0x4}}, &(0x7f00000008c0)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000900)={0x20, 0x83, 0x2}, &(0x7f0000000940)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000980)={0x20, 0x89, 0x2}}) r1 = syz_open_dev$loop(&(0x7f0000000a40), 0x5, 0x40000) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000ac0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r3, 0x0, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000b00)=0xfffffffffffffffd) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000b40), &(0x7f0000000b80)=0xc) r5 = syz_usb_connect$uac1(0x4, 0x110, &(0x7f0000000bc0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfe, 0x3, 0x1, 0x44, 0xc0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}, [@feature_unit={0xd, 0x24, 0x6, 0x3, 0x5, 0x3, [0x5, 0x6, 0x1], 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x1ff, 0x4, 0xfa, 0x5, 0x6, 0x9}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x100, 0x3, 0x6, 0x7}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x204, 0x6, 0x5, 0x6, 0xc, 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x107, 0x3, 0x8, 0x522a, 0xa, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x8, 0x0, 0x0, "41be678206a2fbe046"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4, 0x3, 0xc9, {0x7, 0x25, 0x1, 0x1, 0x0, 0x200}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x3, 0xd1, 0x5, '-', "f71c10"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x6, 0x0, 0x81, "fe4972"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x8, 0x2, 0x5, 0x2, "ce8424c3621a57df9c"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x1849, 0x4, "3f7a8115f5ad"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x8, 0x7, 0x7f, "0ac16de6ea5f117960"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x6, 0x3, 0x1, 0xc9, "ca"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x4, 0xc, 0x0, {0x7, 0x25, 0x1, 0x2, 0x4, 0x9}}}}}}}]}}, &(0x7f00000011c0)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x300, 0x6, 0x5, 0x9, 0x20, 0xeb}, 0x23, &(0x7f0000000d40)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x4, 0xe, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "efef09f5f578373916454def93d74f89"}]}, 0x7, [{0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x3009}}, {0xf4, &(0x7f0000000e40)=@string={0xf4, 0x3, "f0b09d155fa61b522357b8dd215bddff3231e85e1028c02c097ba339d6f5c48589320087250f6924a1985e7c13c68829bee10d5b7b3959699b252b1e0e5efaca0e682d121d9a7ba04111e5200c8e47b2b411aa01fb0078e65268d9a97474ec413f53cd5e8a66c42656b921238291d2203e5eeee02d4fbb192fef6dce64b631d16f5adae14862f842bc4af68bdc8f18dfbe6d630b7779a4b40d71f9acbba24877f3683404ae4f7c59caeadf2c54f025c4b11a1e2ae7fbf1f4fb7e5fd43eb8c00a01b4e166a572d752a70a33d1b0c9fd5c1c66833e9bee35b3c2da80cdf5843c1e1ff183f54a18854187c1c21f0388169953ea"}}, {0xe3, &(0x7f0000000f40)=@string={0xe3, 0x3, "70116dc2190ef0a8cebd0ec24889761143f5368a66493310f570701b0bb4df1ec758e8f25963988b927db3446fc808478b985559912b3cd36ac9e86d54ca66127570adf58891c2c401f09b85c4c014d83f2b9a716f583684fdf2e61e077ef31b9280649904e44b9ee91973ce2256ff447377c12c7a8d27734e746ef24ca95887469cad460a2e025115f7e3a17845c0c9662132b778255890d78772ea8d0aaa5c487d6a7089710df185c5d2abe456be55fb0d92c9ef259f8261e9aa6572f5719439dc6b444aa28f42f3bbc6ea5b9f3cd488018394289c83077d5ebab40ca44b5b31"}}, {0xd8, &(0x7f0000001040)=@string={0xd8, 0x3, "1ec8124d138b3e4d5a034581b68d639fc04b9259d23e981cb74bc7ca445fec8812795e062858372e36d1ef8fd69e7d8fecac8301370d26d9ee13d80b405f17ba4d47681462f9d5085d31ad9868d80c357d745efcc20bd246c02671328dcf67a4801b46c85f421fa76a10b4020948fd7eae59ded7e3f2956f8bcbe72902bec70b6843d1c5eea3843467240f6db6d81d77263f289d1b4a5c2d327ec0707cf365665083ebf8d8a66f7a71b9c2ace7350bc21ef48a7ad4d8f1fdf37f1a3301465ed58783535be5ef9ffcaba426fc898f5090960054a43ad7"}}, {0x63, &(0x7f0000001140)=@string={0x63, 0x3, "373c4d756c7263998cc4a13c78c3fc5c36ba8f968c68cd3361623219b4cb89eff7eeb8f1f0638c53b4d9ecb895955407439eeeec839cc6ade0f10b81ef4ac5d3a8f98f2886105b6393094d3a739dca06c820952e3f18dc039e22b74377621632c3"}}]}) syz_usb_control_io(r5, &(0x7f0000001440)={0x2c, &(0x7f0000001240)={0x0, 0x6, 0x43, {0x43, 0x22, "a34b67615a4358d92b02b17c1bb38fc790d8abb2ba4f9286a80931e01c4a1cf23e1280c56fcb610b6e57289be6a53a1fe69c0fdd608d24103f7838423609ae3913"}}, &(0x7f00000012c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}, &(0x7f0000001300)={0x0, 0xf, 0xb8, {0x5, 0xf, 0xb8, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x8, 0x7, 0x4}, @generic={0xac, 0x10, 0x1, "59ddbe9c85e2f67b155a9cb112ccbe45cd73b6b60b0b81454203f71df0c637a660239335dc34e96e1709f9d3ac24cbaffd7af0fa99d7e800329489211b84a3d267d5a0bb6a1e495846d392fa8b535618216f6916bb1d2a3c4bd746a03fb04fc1095e75f4a9b832a6c3b76546081acfb58c5817abb0dec57db3b2ad680e5f3fa48bd979e1a71ff659e8a19f179eeabbc4671f7d9ad4d523ca48b7f893d7da938bb8c335b0b17c645850"}]}}, &(0x7f00000013c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x10, 0x6, 0x6, "58a2f012", "ff060f5a"}}, &(0x7f0000001400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x2, 0x8, 0x5, 0x3, 0x4, 0xfc00}}}, &(0x7f0000001940)={0x84, &(0x7f0000001480)={0x0, 0x0, 0xca, "6dae94b224a77a4aa7ad97282d7a06abe9ec4df700ed65499486387a565b6df663bad96dabc9287df9f6c104947f1ef9ddd16fe8c6385e420034ed7f7d9aba7405d205b974362b526c9448a362e0417d85d0c0a7a10efbdbdd308b087397bfaff4991d3137d1867aa586575f7f45f0990e78102bead3f14565add95059ef0cf4fe5c6d7d4164449e40561c2bf8cb7b453ca266ba2b75aac5441acf3a18414715098129739d6d280695d874b6588209ed88ae0f83dd4c4c9a1a7881773c5ffc5e926e70d93fb9dcabbfe2"}, &(0x7f0000001580)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000015c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001600)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000001640)={0x20, 0x0, 0x4, {0x400, 0x20}}, &(0x7f0000001680)={0x40, 0x7, 0x2, 0x5}, &(0x7f00000016c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000001700)={0x40, 0xb, 0x2, "9bcf"}, &(0x7f0000001740)={0x40, 0xf, 0x2, 0xe}, &(0x7f0000001780)={0x40, 0x13, 0x6, @random="227797993d09"}, &(0x7f00000017c0)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000001800)={0x40, 0x19, 0x2, 'Zg'}, &(0x7f0000001840)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001880)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000018c0)={0x40, 0x1e, 0x1}, &(0x7f0000001900)={0x40, 0x21, 0x1, 0xe4}}) r6 = open$dir(&(0x7f0000001a00)='./file0\x00', 0x80200, 0x108) mknodat$null(r6, &(0x7f0000001a40)='./file0\x00', 0x2, 0x103) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000001ac0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r7, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x2c, r8, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_IPPROTO={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x2400c080) mount$overlay(0x0, &(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00), 0x1000, &(0x7f0000001c40)={[{@xino_off}, {@metacopy_off}, {@default_permissions}, {@index_off}], [{@obj_type={'obj_type', 0x3d, 'fou\x00'}}]}) write$selinux_context(r2, &(0x7f0000001cc0)='system_u:object_r:audisp_remote_exec_t:s0\x00', 0x2a) pipe2(&(0x7f0000001d00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001e00)={'tunl0\x00', &(0x7f0000001d80)={'syztnl1\x00', 0x0, 0x8, 0x20, 0x80000001, 0x9, {{0x11, 0x4, 0x3, 0x29, 0x44, 0x64, 0x0, 0xc, 0x4, 0x0, @broadcast, @empty, {[@lsrr={0x83, 0xf, 0xff, [@local, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback]}, @timestamp_addr={0x44, 0xc, 0x6b, 0x1, 0x0, [{@broadcast, 0x8}]}, @generic={0x44, 0xb, "9f28f0e5bbbbc3f2aa"}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) sendmsg$nl_route_sched_retired(r9, &(0x7f0000002040)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001e40)=@delqdisc={0x1a8, 0x25, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x5, 0x10}, {0x0, 0x5}, {0xfffb, 0xe}}, [@q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x30}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xd19}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8000}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x39}]}}, @q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xd4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2d}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1000}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x10}]}}, @q_dsmark={{0xb}, {0x48, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x816c}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9080}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xd}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x91d}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x101}]}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x48000) syz_usb_control_io$uac1(r5, &(0x7f0000002140)={0x14, &(0x7f0000002080)={0x20, 0x6, 0x4a, {0x4a, 0xe, "5084da0aac721ed1a6b9dd8b3e3173a14623671c93fe596de5dfa6c5c1334859f929508cc9f7e5e0387293ae5208348f916e94431390a7ae9d4e0c57b66b0f3b941a43b0e06bc8d6"}}, &(0x7f0000002100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41d}}}, &(0x7f0000002440)={0x44, &(0x7f0000002180)={0x40, 0xf, 0xc6, "ee9f2f42261ee5d5661544e515735d8df809e062629f60c6b24e26aad2d5ac7b34eb000fdf66c798960e0f41374589efca03999be3dfdcb9002db09a878f6f67eef9b640b6f146ad9d28d92641d066be20d27227d3df191991efb21a5a0b487ab29bcd3f985694d71c2529c5a070e69e2a090c635ac1bd710dae132f5b95a7743127124343c98f92cfd32142f7b3b2b25a20f9b270d8a8cad197b9b8ea853038ed391ab459420f4303a0dda6f5257a5f5ba43052509015c590986d9cb2f518c90645dea5f73d"}, &(0x7f0000002280)={0x0, 0xa, 0x1, 0xf}, &(0x7f00000022c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000002300)={0x20, 0x81, 0x1, "18"}, &(0x7f0000002340)={0x20, 0x82, 0x2, "16e3"}, &(0x7f0000002380)={0x20, 0x83, 0x3, "34a23e"}, &(0x7f00000023c0)={0x20, 0x84, 0x1, "98"}, &(0x7f0000002400)={0x20, 0x85, 0x3, "77a542"}}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0x5, &(0x7f00000024c0)=0x1fe, 0x4) r11 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000002500)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x307, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0x4, [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x3, 0x1, 0x2, 0xff, {0x9, 0x21, 0x3, 0x9, 0x1, {0x22, 0xef2}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x80, 0xaa, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x6b7080745ab0c260, 0x4, 0x1, 0x3}}]}}}]}}]}}, &(0x7f0000002840)={0xa, &(0x7f0000002540)={0xa, 0x6, 0x0, 0x33, 0x2, 0x2, 0xff, 0x8}, 0x15, &(0x7f0000002580)={0x5, 0xf, 0x15, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x5, 0x6, 0x55}, @ptm_cap={0x3}]}, 0x7, [{0x38, &(0x7f00000025c0)=@string={0x38, 0x3, "0593bbc767742a9722e37c6ce8280c326ae9c313574671e202df8e340b07e3d6c926b36342538f7f3de53ec37f2b7e6734d4b1bc6550"}}, {0xbe, &(0x7f0000002600)=@string={0xbe, 0x3, "187e282357280dfbb752f6e6daaa8c5e7d6fb9b3408cc66cae3c5628831838e5c772f12741acbc17b4838aa9b67dcfffd300e64367320b1e01e7f552ea8440a456c3b561125fd92044ee1631b3d940fe35c905a78c7ca46da4f6516cc70ab53def4d43cd03ccf24ce52165854eaea091b40380b942ea2c9e83973e2c59bad497208284e0da60be159d6d983fc95fcf0a1d6c4aea2640b7229191fd0d01603f9e5811aa6221ebd56df9357ab686cb68e3f4cace9ced153176349918d0"}}, {0x4, &(0x7f00000026c0)=@lang_id={0x4, 0x3, 0x542b}}, {0x4, &(0x7f0000002700)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000002740)=@lang_id={0x4, 0x3, 0x80a}}, {0x41, &(0x7f0000002780)=@string={0x41, 0x3, "713ead6f20aa836e9ac3c022620da36b8e0f1a1564e85c36729b4d2be6011facdc0e04595a80b359f57926aabed290e2e17d3fd69c5782e1c0e04050833f07"}}, {0x4, &(0x7f0000002800)=@lang_id={0x4, 0x3, 0x1009}}]}) syz_usb_control_io$hid(r11, &(0x7f0000002a40)={0x24, &(0x7f00000028c0)={0x20, 0x31, 0xac, {0xac, 0x21, "ec3233cbaaaaeeaa5c6906b174296d442469733a84d52ec1ae44fee74bdf91eff3df682f3b0b859a5c7c707c7adcbc6a07a6477422cec6e18d8d630a0309623e112d958192a6d9dd62a038246aac492df52280d3459bca0bd6c1bbd26db69ced05e8ccb2370d3756c1f1c34ac92fc0accd796fef3def4b4c59a8e49d9397916f2c2f3f4ba9e18b868b6b375cef9fa76f56eacfd1dd1e9d51da91e187fd6eab2507eb4aaa40520b7f6e0e"}}, &(0x7f0000002980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}, &(0x7f00000029c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "c4a464dc"}]}}, &(0x7f0000002a00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7ab1, 0xb, 0x1, {0x22, 0x1b6}}}}, &(0x7f0000002cc0)={0x2c, &(0x7f0000002a80)={0x40, 0x0, 0x6b, "495f43c397ff7fdb94090ba508900a34463cd17026c20cadaf84df611fcc8586d894df4aad14dca1f61d7582428fef11c2ffb6b2d1802590b915b77cfdc4614eb1fe0400ac28e218afa4b12fce97e6db80ad642eddc36a7728ce71c296149304c4e3db82076e54f911465a"}, &(0x7f0000002b00)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000002b40)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000002b80)={0x20, 0x1, 0xcf, "a8f55500aac42153d42bde323ee1e0bdb963098771458d2375ed6f49b69a120838df6073850e77a5b94397d8c9fe158894e5035979e16c2e98ecae8e537db71c7e5524f61ef77b83d45ed7e03c0730641e3b9a05dfdc826a2cc533e6df2d23543b6c91e0a4b29dbfc75ad4434bd2f92f55a171dd090c9af5f876157f9b8e755194a9c5658aab750cd8ddf05e9c33e402cbfbdbc1d04edcbce13c138f23888dcdf907b01d3f9a2a408582e8c100344b5b1ea589e48d664946fbf6eded18a2ebbb0c815dde78018a5fede6b8d27d5d34"}, &(0x7f0000002c80)={0x20, 0x3, 0x1, 0x80}}) sendfile(r7, r4, &(0x7f0000002d00)=0x10000, 0x5) unlink(&(0x7f0000002d40)='./file0\x00') syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000002e40)={0x14, &(0x7f0000002d80)={0x20, 0x6, 0x4b, {0x4b, 0x4, "02ed8d763cc92c9c4a52fc66da74c92efb87cbc527178ce4f5496819cd829a73802425652c081892f62314860e63fed471ca112f8ba222c8c78219189ecbc01e9f69ada2f8d99d1bbb"}}, &(0x7f0000002e00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x420}}}, &(0x7f0000003180)={0x34, &(0x7f0000002e80)={0x0, 0x14, 0xdb, "13a2daae13a72eeb30708dc6e7109d0d485744d683fda0ead2eb65f13c191c4f597d532a752fcaef7dbae2717720e3ac1af91d0fedbb829eda56611f104b93b0e1f53b2aa28d03989ff8efbffb4e57e12a4c15f958a6a7f571021bcaea40a170900f98b35e6dba404c8f17a0583c370ed0033ab92054d610699d69632b4999bde59e03ee41576642a566abcf76e272abc14a50db3032d1d060977b8cd058960d2a4d1573b9b3ae4f154be6e49213fddcb8cffcaa29ae15708eeb6dddcc19e9e2425a222d5cd84a363d50e5fda78c5efb1e926575f58793795f3d4f"}, &(0x7f0000002f80)={0x0, 0xa, 0x1, 0x99}, &(0x7f0000002fc0)={0x0, 0x8, 0x1, 0x4d}, &(0x7f0000003000)={0x20, 0x0, 0xcc, {0xca, "2cde39f2a0ecfdd1a78f82b5920024429ae67bcf04a7e8add38ee9abb1cce46f9f6cd1b85b1e46eb702c00b80472c940897f7a77f0318512511ea2ee69ba15323814cadd51b101566bd220e2d91e0c7cffbf2f8525e242d39bafc22f92ceb1f0ef464da0bd95ffe5d9d592ce4e9030d858637b1f458c0fd742366ac297c58f4fca4ce59ce876a4bc09ed254e5b127c1a0c85ea8de476ccb0785e9e37977114498934e8252385d603589b8d008450595b6fd9f4084547c91e4b74bc1ca3fce9aed19897893bfb2b8b310b"}}, &(0x7f0000003100)={0x20, 0x1, 0x1, 0xa}, &(0x7f0000003140)={0x20, 0x0, 0x1, 0x9}}) executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0xff7ffff7) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') r4 = socket$unix(0x1, 0x1, 0x0) sendfile(r4, r3, &(0x7f0000000000)=0x11, 0x7) openat(r3, &(0x7f0000000200)='./file0\x00', 0x40000, 0x281) r5 = eventfd(0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xc8, 0x0, 0xc000000) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x30, r10, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r11}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}]}, 0x30}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) r12 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r12, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r13 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000240)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r1, 0x5bfe5000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000fc160a29aa3d2076d8c7bcfbc60a58f8d945e8678e3a25df16722f9e02d9e013abc196df72e6be93e8603fcf7647e29833ed04fae59add4b715eb765ed7a60d60543ff67888ff430e908594b8b03dbffd1708b61178a622ca91a05feabc0efb7d7d21a41239d079e7dde944046e62a66b0101a743687fe3d3e00b712e170a0e3777621b9ad8cf10336bdc70f19177b3d06e32e5d6ef2fa7ab4010af9ac7b82aecddd212d4132da395a87280f86d763ea", @ANYRES16=r16, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r14, @ANYBLOB], 0x20}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6c}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x124c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x137a}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x631}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x131c}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x5) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000280)={r2, 0x1fe, 0x2, r5}) executing program 5: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x709000, 0x0) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x202080, 0x89) linkat(r2, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00', 0xc00) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000140)={'TPROXY\x00'}, &(0x7f0000000180)=0x1e) (async) r4 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000840)={0x0, &(0x7f00000001c0)=[@cpuid={0x2, 0x18, {0x4, 0xf8e}}, @uexit={0x0, 0x18, 0x400}, @code={0x1, 0x5b, {"0f91af9d8a80470f20e035800000000f22e0260f7951fe262e0fc71e0f20d835080000000f22d866baf80cb8329b818fef66bafc0c66edf226260f09c40149753ac461795acef3430f32"}}, @uexit={0x0, 0x18, 0xa1}, @uexit={0x0, 0x18, 0x8000000000000001}, @uexit={0x0, 0x18, 0x3}, @cpuid={0x2, 0x18, {0xb20b, 0x52f}}, @cpuid={0x2, 0x18, {0x869, 0xb56}}, @code={0x1, 0x6e, {"c4e14dee1ab9b70b00000f32c74424002b010000c744240213970000ff2c24b98d0800000f328f0950012867650f381d1766f2f267e2bd66450fc77327c7442400d1be0000c744240200100000c7442406000000000f011c24440f0002"}}, @cpuid={0x2, 0x18, {0x3}}, @cpuid={0x2, 0x18, {0xe81a, 0x8}}, @code={0x1, 0x60, {"66baf80cb8b2405b81ef66bafc0c66ed450f220366ba2000edc4034542fe000f214166470f00d936f2420f1ed1660fd07e1066ba6100b800100000efc74424001d010000c7442402f9310000ff2c24"}}, @uexit={0x0, 0x18, 0xd6dc}, @code={0x1, 0x5e, {"66baa000b80d000000ef0fc71b0f01cfb9b7090000b80d000000ba000000000f30c402b12949f766400f383805008000006466460f6d2ce8b805000000b924b900000f01c1410fe311430f01c8"}}, @uexit={0x0, 0x18, 0x8}, @code={0x1, 0x58, {"2e410d3771f8e266ba420066b8080066ef8fe8188e7a0f00c48131657900c482293df06544f4c42179de2e400f30b9800000c00f3235004000000f300f20d835200000000f22d8"}}, @uexit={0x0, 0x18}, @cpuid={0x2, 0x18, {0x5, 0xd}}, @code={0x1, 0x76, {"b9800000c00f3235008000000f3066baf80cb8d464938def66bafc0cb800700000ef4a0fc71e430f01c8f20f2b6e0d450f07b9ad020000b847c20000ba000000000f3048b866000000000000000f23c00f21f835030009000f23f80f01c88f09909564215d"}}, @code={0x1, 0x80, {"48b800900000000000000f23c00f21f83502000d000f23f866b8c8008ed8260f09c744240000c0ffffc744240200600000c7442406000000000f011424660f3a0f469b1248b87b780000000000000f23d80f21f835400000000f23f864470fd4dc66b8ad008ec066bad004ec0f2107"}}, @code={0x1, 0x58, {"b9c10b0000b89e1f0000ba000000000f300f7948d766ba4100edb945080000b8d6000000ba000000000f3046040366b806018ee80f52b6006000000f01c366ba4300ed360f01ca"}}, @uexit={0x0, 0x18, 0x7}, @code={0x1, 0x61, {"430f2385c4027d1300c4e3d57ce30066440f38808868360000c4821902a50058000066410f15680f66ba430066ed66b846000f00d80f01c348b801000000000000000f23c80f21f835080010000f23f8"}}, @code={0x1, 0x44, {"b8010000000f01d966baa10066ed8f2868ec77160a440f01d1c4c25d45a00e000000f30f1efb660fe0f9f30fc7360f1f00d9e0"}}, @code={0x1, 0x8d, {"66b898008ee8b805000000b96a7600000f01c1c7442400c2410000c7442402a8000000c7442406000000000f011c2466ba4100ed640f0766420fc5c3d766baf80cb88f8df58fef66bafc0cecb926030000b8fcffffffbaffffffff0f300f20e4c7442400e4480000c74424020a000000c7442406000000000f011424"}}, @cpuid={0x2, 0x18, {0x8, 0x1}}, @code={0x1, 0x48, {"64470f30450f01ca400f32c4a27d784e92f30fb88807000000440f20c03507000000440f22c066bad004ecc441fa1666d166f20f350f32"}}, @code={0x1, 0x69, {"c744240021000000c744240200800000ff1c24b9e60900000f3266baf80cb83c6fb18fef66bafc0cb800080000ef660f388133470f0131440f07b9800000c00f3235002000000f3066420fc733c4e27d254e0026663e0f32"}}], 0x678}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000880)={'vcan0\x00'}) recvmmsg(r1, &(0x7f0000005a40)=[{{&(0x7f00000008c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000940)=""/192, 0xc0}], 0x1, &(0x7f0000000a40)=""/145, 0x91}, 0x6}, {{&(0x7f0000000b00)=@caif, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000b80)=""/113, 0x71}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/101, 0x65}, {0x0}], 0x4, &(0x7f0000001cc0)=""/212, 0xd4}, 0x87}, {{&(0x7f0000001dc0)=@un=@abs, 0x80, &(0x7f0000002080)=[{&(0x7f0000001e40)=""/3, 0x3}, {&(0x7f0000001e80)=""/172, 0xac}, {&(0x7f0000001f40)=""/2, 0x2}, {&(0x7f0000001f80)=""/5, 0x5}, {&(0x7f0000001fc0)=""/130, 0x82}], 0x5}, 0x3ff}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/93, 0x5d}, {&(0x7f0000003180)=""/36, 0x24}, {&(0x7f00000031c0)=""/84, 0x54}, {&(0x7f0000003240)=""/172, 0xac}], 0x5, &(0x7f0000003380)=""/148, 0x94}}, {{&(0x7f0000003440)=@generic, 0x80, &(0x7f0000003640)=[{&(0x7f00000034c0)=""/70, 0x46}, {&(0x7f0000003540)=""/84, 0x54}, {&(0x7f00000035c0)=""/114, 0x72}], 0x3, &(0x7f0000003680)=""/70, 0x46}, 0x7}, {{&(0x7f0000003700)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003780)=""/243, 0xf3}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)}, {&(0x7f00000048c0)=""/6, 0x6}, {&(0x7f0000004900)=""/104, 0x68}, {&(0x7f0000004980)=""/47, 0x2f}], 0x6, &(0x7f0000004a40)=""/4096, 0x1000}, 0x9}], 0x6, 0x10040, &(0x7f0000005bc0)={0x0, 0x989680}) (async, rerun: 64) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (rerun: 64) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000005c00)={0x0, 0x9, 0x0, [0x1, 0xb7, 0x7fffffff, 0xaeef, 0x6], [0x8, 0x5, 0x9a4d, 0x7fff, 0x5, 0x4, 0x0, 0x9, 0x5314, 0x3, 0x7fffffff, 0x9, 0x2, 0x7ff, 0x2, 0x9, 0xe464, 0xb5, 0xb, 0xd, 0x8, 0x69d, 0x5c, 0x3, 0x9, 0x80000001, 0xfffffffffffffffc, 0xfffffffffffffff7, 0x3, 0x4, 0x9, 0x9, 0x3, 0xd, 0x9, 0x7fff, 0xfffffffffffffffa, 0x1, 0x800, 0x7ff, 0x9, 0x100000001, 0xfffffffffffffffa, 0x4, 0x9, 0x7f, 0x100000001, 0xffffffffffffffc0, 0x39, 0x1, 0x2, 0x2, 0x7, 0xfffffffffffffff4, 0x9, 0x8, 0x8000000000000001, 0xd, 0x8, 0x8, 0x2, 0x5, 0x55, 0xfffffffffffffff7, 0x1, 0x2, 0xd1, 0xe, 0xfff, 0x2, 0xffffffffffffffff, 0x1, 0xffff, 0x1, 0x8, 0x62, 0xfffffffffffffffe, 0xf000000000000000, 0x9, 0x7, 0x9, 0x7, 0x81, 0xffffffffffffffb7, 0x8, 0x5, 0x2, 0x9, 0x2, 0x99, 0xd, 0x7, 0x5a3b, 0x8, 0x50000, 0x0, 0x9, 0x7fffffff, 0x5, 0x6, 0x4, 0xe, 0xffff, 0x10000, 0xe, 0x9, 0xfffffffffffffff9, 0x2, 0x5, 0xfc1, 0xfff, 0x10, 0x7fb0, 0x9, 0x1, 0x5, 0x3, 0xfffffffffffffffa, 0x0, 0x8253, 0x4]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000006040)={r8, 0xffff, 0x1, [0x7fffffffffffffff, 0x2, 0x1, 0xf61, 0xfffffffffffffff8], [0x6, 0x400, 0x8, 0xd800000000000000, 0x7fffffff, 0x4, 0x4, 0x1, 0x2, 0x9, 0x80000001, 0x1ff, 0x3, 0x800, 0x5, 0xff, 0x3f4a, 0xa, 0x5, 0x9cbf, 0x1, 0xfffffffffffffffe, 0x7, 0x2, 0x2, 0x2, 0xffffffffffffff01, 0x1, 0x3, 0xb4c0000000000, 0x5, 0x6, 0x3, 0x4, 0x7, 0x3, 0x9, 0x10, 0x0, 0xb, 0x80, 0x73, 0x5, 0x5, 0x8, 0x1c000, 0x7, 0x525, 0x0, 0xf, 0x8000, 0x4894e478, 0x9, 0x9, 0xe066, 0x5, 0x6, 0x2, 0x5, 0x3, 0x1, 0xfffffffffffffffc, 0x0, 0x3, 0x2, 0x2, 0x7, 0xfff, 0x6, 0x1, 0x5, 0x5, 0xfffffffffffffff9, 0xfc80, 0x4, 0x7, 0xffff, 0x3e, 0xca3, 0x9, 0x2, 0x80000001, 0x81, 0x3, 0x3, 0x8000000000000000, 0x0, 0x40, 0x3, 0x8000, 0x100000001, 0x2, 0x7, 0x81, 0x1ff, 0x9, 0x18, 0x0, 0x7, 0x101, 0xa0, 0x6, 0xe, 0x1, 0x7, 0x0, 0x101, 0x200, 0x5, 0xf61, 0x4e41, 0x1, 0x100000000, 0x5, 0x2, 0xe, 0x3, 0x4, 0x2, 0x5, 0x9]}) (async) r9 = eventfd(0x81) (async, rerun: 64) r10 = syz_open_procfs(0x0, &(0x7f0000006480)='clear_refs\x00') (rerun: 64) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f00000064c0)={r9, 0x9, 0x0, r10}) r11 = getuid() (async) fstat(r7, &(0x7f0000006540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000006500)='./file0\x00', r11, r13) (async) r14 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000065c0), 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r14, 0x65, 0x2, &(0x7f0000006600)=0x80000000, 0x4) (async) getsockopt$IPT_SO_GET_REVISION_MATCH(r14, 0x0, 0x42, &(0x7f0000006640)={'HL\x00'}, &(0x7f0000006680)=0x1e) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r10, 0x54a2) pipe(&(0x7f00000066c0)) (async) getsockopt$inet_IP_XFRM_POLICY(r14, 0x0, 0x11, &(0x7f0000006780)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@private1}}, &(0x7f0000006880)=0xe8) setxattr$system_posix_acl(&(0x7f0000006700)='./file0\x00', &(0x7f0000006740)='system.posix_acl_access\x00', &(0x7f00000068c0)={{}, {0x1, 0x6}, [{0x2, 0x1, r12}, {0x2, 0x2, r11}, {0x2, 0x0, r12}, {0x2, 0x3, r15}], {0x4, 0x6}, [{0x8, 0x6, r13}, {0x8, 0x2, r13}, {0x8, 0x0, r13}, {0x8, 0x3, r13}], {0x10, 0x5}, {0x20, 0x5}}, 0x64, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000006940)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000006980)=0x2c) executing program 1: openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4142, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0, 0x80a0000}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000002c0)={0x2, 0x0, [{0x80a0000, 0x42, &(0x7f0000000100)=""/66}, {0xeeee8000, 0x54, &(0x7f0000000180)=""/84}]}) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000240)=ANY=[], 0xd0060) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x13000000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r2, &(0x7f00000000c0)="8f2a0a65", 0x4) executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x1d, r3}, 0x10, &(0x7f0000000100)={&(0x7f0000000180)={0x7, 0x0, 0x4, {}, {0x0, 0xea60}, {0x3, 0x0, 0x1}, 0x1, @can={{0x4, 0x0, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "6d56f1e83311e5a3"}}, 0x48}, 0x1, 0x0, 0x0, 0x20004011}, 0xc) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) executing program 1: openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x12, 0x0, 0x0) mmap(&(0x7f0000ad9000/0x3000)=nil, 0x3000, 0x100000d, 0x110, r0, 0x45809000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xff}}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private1, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0xa0}}, 0x0) socket$inet(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414"], 0x84}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESHEX, @ANYRES8], 0x2c}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x4, 0x7, 0xf8, 0x3, 0x6, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0xf81e, 0x7, 0x9}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc141200004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r7}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000840)={0x3f4, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1b4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1b0, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdde}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\#^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '}!{+$:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\\\'&-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x76}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+@*@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x40, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x2e, 0x4, "0efb8377eaacd4be5c0ed2072361f9d11b9476a5b281905f5b6a46417ebf494ba7668363d6a8ffa106be"}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x170, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ':.\'-#%+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x101, 0x5, "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"}, @ETHTOOL_A_BITSET_VALUE={0xd, 0x4, "2119ed1555f5f8c7c6"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x4000840}, 0x40010) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getpid() sendmsg$netlink(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1000000021ef01"], 0x10}], 0x1, 0x0, 0x0, 0x4}, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xffffe000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x20000000, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x80000000000000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x1e0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) personality(0x619641b6fb4b8591) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) uname(&(0x7f0000000240)=""/201) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x1000810, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c7766646e6f5876c1aff704001afc61b5926c2669010b4e7e0e4c678991c5f2e1496448212e8ed80faf91b05d38b785d17f000000005ddbbcbd85a859795202471875d87c7579c06fdadadbad6dda2a97761cdc0838cd4202fd242d3ab12954ad1ba3cb27a7db04de41428e868c2eb96b4a402c19b9aa9a7cabc0046ddd", @ANYRESHEX=r1, @ANYBLOB=',msize=0x0000000026da2d2a,\x00']) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000600)={@flat=@weak_binder={0x77622a85, 0x100a}, @fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0x100, 0x3}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r7 = signalfd4(r1, &(0x7f0000000580)={[0xc01a]}, 0x8, 0x80800) setsockopt$inet6_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f00000005c0)=@gcm_128={{0x304}, "53b0dff0c8b491d0", "2cd52c12ba75d255b87383c730578d43", "5e3983e0", "f77489334fd920dd"}, 0x28) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x49, &(0x7f0000001600)=0xffffffff, 0x4) sendmsg$inet(r8, &(0x7f00000004c0)={&(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000400)="d2b08b4f559e9815f1f9b326b4768bf97d059aaf14f2563d12fc9c0972b2c0aae38651d56fcb2bd047bce2d98f54ae1573361079bd301f347f09e45fecaf9470b3c258d03e416dc72b0a3e3633f0742f0f4e928cb3f344763826ca6b12a16bb96ec39d8a2972763dc5a38646481da08d5640c8d2920bfd2151631760532b98e054e6417539ac9999892c277f96373767540eeb0c7bd49f272448435fa1f6bec9", 0xa0}], 0x1, &(0x7f0000000380)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xdf}}], 0x18}, 0x4004884) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000540)={0xfffffffa, 0x200, 0x1}, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a1c010000180a01080000000000000000070000090900010073797a30000000000900020073797a3200000000e40003800800014000000000a4000380140001006d6163736563300000000000000000001400010076657468315f746f5f6261746164760014000100776c616e30000000000000000000000014000100626f6e64300000000000000000000000140001006772653000000000000000000000000014000100776732000000000000000000000000001400010064766d727030000000000000000000001400010073797a6b616c6c65723000000000000008000140000000002c0003801400010076657468315f746f5f627269646765001400010069705f767469300000000000000000000c0005400000000001d4000000020a010800000000000000000000000308000240000000030c00044000000000000000020900010073797a300000000008000240000000020c000440000000000000000589000600f1a1b368a1092e961aeae9dbbd0047e9cadd4e836f9b25701676274c81e6ab80b49ed3005f4cdc451b41b9cb672cfbb0770e1b7fcd7fe2d4ee04df2ae35870465fd12fe05961a9759dd7cf6ad20fabbefd08d29f7c460906c8d388a6b8bc1339292fd8cc39f1e990f4dc160a73e5135d4b5635c5eefabd4612962f0573aafc8160a502122200000020000000050ac1ac701a000000000000050000080900010073797a31000000004c000000020a01080000000000000000000000040900010073797a30000000000900010073797a300000000008000240000000010900010073797a30000000000900010073797a3000000000140000001100010000000000000000000700000ad8aed3b2bbbd968314e8240e0818bca375786ae82a8452446ad6785e0711431dae3997c83b01a529cba5d6475ac16bc7482ee836a0d871f4ad39d1e8183fd36d3698a30669921bbbc04c13c0493ae70eb0b218da48b8aee5685515ee1eda8544a4a6fe8bb162df0f"], 0x284}, 0x1, 0x0, 0x0, 0x4000004}, 0x44000) executing program 5: ioprio_set$pid(0x2, 0x0, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000c00)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x1, 0x0, 0x2}, {0x0, 0x1fffffffe, 0x40000000007, 0x5, 0x40000000000004, 0x800000000002, 0x200000003, 0x400}, {0x40000000000005, 0x0, 0x0, 0x5}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x6c}, 0x2, @in6=@local, 0x0, 0x1, 0x8, 0x0, 0x9075, 0x0, 0x9945}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r1, r1, 0x0, 0x2) executing program 35: openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="38010000fe0000", @ANYBLOB="7fdc98af24c46052db76afb5b62e1eef0738e7b7b0652ed6"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x2, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2501000000000000000741"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) executing program 5: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x41000, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000000)={0x9, {0x0, 0x6, 0x1, 0x800, 0x9}}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/prev\x00') r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000) executing program 36: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000240)='\x00', &(0x7f0000000280)='./file0\x00', r1) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='rdma.current\x00', 0x0, 0x0) r3 = signalfd(r0, &(0x7f00000001c0)={[0x3f2]}, 0x8) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0xc) move_mount(r1, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x122) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@remote, 0xb, 0x8, 0xfffc, 0x10, 0xa, 0x60, 0x80, 0x1}, {0x5, 0x9, 0xfffffffffffffffe, 0x100000000, 0xa89b, 0x0, 0x80000000000000, 0xfffffffffffffffe}, {0x400, 0x3, 0x0, 0x800}, 0x80000007, 0x0, 0x1, 0x0, 0x2}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0x2b}, 0x2, @in=@empty, 0xffefffff, 0x1, 0x3, 0xfd, 0xfffffffe, 0x0, 0xfffffffe}}, 0xe8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000010000"]) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000"]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000007dc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008001}}], 0x1, 0x4000) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$ashmem(0xffffffffffffff9c, 0x0, 0x40, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETDEVNETNS(r11, 0x54e3, 0x0) r12 = accept4(r2, &(0x7f0000000240)=@phonet, &(0x7f00000002c0)=0x80, 0x1800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r12, 0x0) executing program 37: openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x12, 0x0, 0x0) mmap(&(0x7f0000ad9000/0x3000)=nil, 0x3000, 0x100000d, 0x110, r0, 0x45809000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xff}}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private1, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0xa0}}, 0x0) socket$inet(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414"], 0x84}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESHEX, @ANYRES8], 0x2c}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x4, 0x7, 0xf8, 0x3, 0x6, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0xf81e, 0x7, 0x9}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc141200004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r7}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000840)={0x3f4, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1b4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1b0, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdde}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\#^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '}!{+$:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\\\'&-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x76}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+@*@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x40, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x2e, 0x4, "0efb8377eaacd4be5c0ed2072361f9d11b9476a5b281905f5b6a46417ebf494ba7668363d6a8ffa106be"}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x170, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ':.\'-#%+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x101, 0x5, "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"}, @ETHTOOL_A_BITSET_VALUE={0xd, 0x4, "2119ed1555f5f8c7c6"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x4000840}, 0x40010) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) executing program 38: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x41000, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000000)={0x9, {0x0, 0x6, 0x1, 0x800, 0x9}}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/prev\x00') r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000) program crashed: WARNING in kvm_put_kvm bisect: bisecting 49 programs bisect: split chunks (needed=false): <49> bisect: split chunk #0 of len 49 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=6m8s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 29, 12, 12, 20, 21, 30, 9, 10, 21, 17, 25, 19, 11, 19, 30, 16, 7, 30, 30, 30, 12, 10, 30, 10, 25, 7, 19, 7, 30, 30, 7] detailed listing: executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_team\x00', 0x0}) (async) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) (async, rerun: 32) r2 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) (async) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async, rerun: 32) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0) (async, rerun: 32) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140), 0x171002, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x10000003) (async) openat$cgroup_ro(r4, &(0x7f0000000000)='memory.swap.events\x00', 0x0, 0x0) (async) getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000640)={'filter\x00', 0xb001, 0x4, 0x430, 0x0, 0x130, 0x0, 0x348, 0x348, 0x348, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x3f5e, 0x4, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x10, {@empty, {[0xff]}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10001, 'syz0\x00', {0x7b}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @local, @broadcast, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x480) (async) setreuid(0x0, r5) fcntl$setsig(r0, 0xa, 0x3b) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) (async) mremap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) (async) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000100)='/dev/ashmem\x00') executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) getpgid(0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ptrace(0x10, r1) (async) ptrace$poke(0x4, r1, &(0x7f0000000380), 0x10000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f00000000c0)={0x0, 0x1}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x3, 0x0, 0x0, 0x0, {0xa, 0x4e24, 0x9, @empty, 0x3}}}, 0x3a) (async) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x3}) (async) linkat(r2, &(0x7f0000000180)='./file1\x00', r2, &(0x7f0000000280)='./bus\x00', 0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) syz_open_dev$MSR(&(0x7f0000000040), 0x6, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000600)={@flat=@weak_binder={0x77622a85, 0x100a, 0x3, 0x300}, @flat=@binder={0x73622a85, 0x101, 0x100000000000001}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@posixacl}, {@cache_readahead}, {@dfltuid={'dfltuid', 0x3d, r3}}, {@posixacl}, {@loose}, {@cache_none}, {@access_user}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@uid_eq={'uid', 0x3d, r4}}, {@pcr={'pcr', 0x3d, 0x30}}]}}) executing program 34: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000600)={@flat=@weak_binder={0x77622a85, 0x100a, 0x3, 0x300}, @flat=@binder={0x73622a85, 0x101, 0x100000000000001}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@posixacl}, {@cache_readahead}, {@dfltuid={'dfltuid', 0x3d, r3}}, {@posixacl}, {@loose}, {@cache_none}, {@access_user}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@uid_eq={'uid', 0x3d, r4}}, {@pcr={'pcr', 0x3d, 0x30}}]}}) executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4142, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x13000000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r1, &(0x7f00000000c0)="8f2a0a65", 0x4) sendfile(r1, r0, 0x0, 0x400000000003895) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffff9c, 0x40106614, &(0x7f0000000180)) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc0000) write$P9_RSTAT(r2, &(0x7f0000000100)={0x4a, 0x7d, 0x2, {0x0, 0x43, 0x1, 0x9, {0x20, 0x0, 0x3}, 0x1840000, 0x8000, 0x9, 0x7, 0x1, '\xe4', 0x4, '$.]$', 0x8, 'bridge0\x00', 0x3, '%$%'}}, 0x4a) open(&(0x7f00000001c0)='./file0\x00', 0x210100, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4142, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x13000000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) (async) write(r1, &(0x7f00000000c0)="8f2a0a65", 0x4) (async) sendfile(r1, r0, 0x0, 0x400000000003895) (async) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffff9c, 0x40106614, &(0x7f0000000180)) (async) pipe2$9p(&(0x7f0000000080), 0xc0000) (async) write$P9_RSTAT(r2, &(0x7f0000000100)={0x4a, 0x7d, 0x2, {0x0, 0x43, 0x1, 0x9, {0x20, 0x0, 0x3}, 0x1840000, 0x8000, 0x9, 0x7, 0x1, '\xe4', 0x4, '$.]$', 0x8, 'bridge0\x00', 0x3, '%$%'}}, 0x4a) (async) open(&(0x7f00000001c0)='./file0\x00', 0x210100, 0x0) (async) executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = epoll_create1(0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d660800000000000000f3c86b66765167205fb82c9179ae3a9200e9d8127995854ab18e810e0ffbbfeda4e96f710da8499cc404dee9b5be236fa134f112b1734f271e9751", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',k']) truncate(&(0x7f0000000240)='./file0\x00', 0x100206b12) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r6, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_SET_REGS(r7, 0x4090ae82, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r7, &(0x7f0000000080)={0x9}) executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x8000000000002}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0)={[0x8001a0ffffffff]}, 0x8) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r2, 0xa, 0x12) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8) ppoll(&(0x7f0000000100)=[{r3}], 0x1, 0x0, 0x0, 0x0) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x13) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)="05"}) syz_io_uring_setup(0x4cf7, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000180)=[@request_death], 0x0, 0x0, 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000400)={0x0, {{0x2, 0x9, @empty}}}, 0x88) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x4, 0xc2, 0x4f, 0x40, 0x2, 0x80, 0x1, 0x3, 0x44, 0x8, 0x0, 0x9}, {0xb, 0x1, 0x6, 0x8, 0x9, 0xff, 0x4, 0x3, 0xa, 0x13, 0x7, 0x6, 0x1}, {0x1ff, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0xfb, 0x4, 0x5, 0x0, 0x2, 0x4}], 0x9}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10000, 0x7fff, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) executing program 6: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'veth1_to_team\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000080)=0x9, 0x4) sendto$packet(r1, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x11, 0x5, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x12, r0, 0x45809000) accept$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0xfffffffffffffff8, 0x80}) executing program 6: getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) io_setup(0x9, &(0x7f00000003c0)=0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) io_submit(r0, 0x1, &(0x7f0000002940)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x7fff, r1, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0xccf73530754b2b5a}]) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r3, 0x2000) executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') socket$packet(0x11, 0x2, 0x300) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000000)="580000001500add40500000000e5000002117ffffdff81004e230e227f0000000001e809100000ffffe74fd200000000000000020000000000000000000000000000000000079ad148d4ee0000b9cb25bba2968253ea1c03", 0x58}], 0x1) sendmsg$key(r1, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="020300090a0000000000000000000200030006000000000002000000891414bb00000000000000000200010000000000fd000503feffff4b03000500000b000002004e1fe00000020000000000000000"], 0x50}}, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}, {&(0x7f0000000100)=""/103, 0x67}], 0x2, 0xe, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$BLKDISCARDZEROES(r3, 0x127c, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x45809000) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500030000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e000fff04fcff", 0x58}], 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x4, 0x6, 0xfffa}, 0x1b, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x0, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x4, 0x71, 0x2, 0x6, 0x7, 0x2, 0x5, 0x40, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xfffff801, 0x4, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x5, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0xf, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x8001, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0x80000001, 0x4, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001"], 0x6c}}, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f00000000c0)={0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000054000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) executing program 6: r0 = socket(0x10, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT]) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000480)}, 0xa}, {{0x0, 0x40, 0x0, 0x0, 0x0, 0xff80}, 0xf}], 0x2, 0x40012040, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x300, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a"], 0x18c0}}, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r3, 0x147a5000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) executing program 6: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f00000035c0)=""/76, 0x4c}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000780)=""/83, 0x53}], 0x8}, 0x81}], 0x2, 0x2100, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e00000004fcff", 0x58}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r6, 0x0, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r6, 0xaead) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000040)=@x86={0x6, 0x3, 0x0, 0x0, 0x2, 0xdf, 0x6, 0x4, 0x2e, 0x4d, 0x0, 0x33, 0x0, 0x40, 0x8, 0x2, 0x7f, 0x0, 0xbb, '\x00', 0x4, 0x403}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000015000072000040"]) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc3842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="38010000fe0000", @ANYBLOB="7fdc98af24c46052db76afb5b62e1eef0738e7b7b0652ed6"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x2, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2501000000000000000741"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x4000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) executing program 0: getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = fcntl$getown(0xffffffffffffffff, 0x9) r2 = gettid() r3 = getpgid(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000480)='uid_map\x00') close(0x3) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r1}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x8c0) r4 = socket$inet6(0xa, 0x2, 0x0) getrandom(&(0x7f00000001c0)=""/8, 0x8, 0x5) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x3000000, @mcast2, 0x2db}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x11, &(0x7f0000000000)=0x1, 0x4) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r5, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r6, 0x2000) socket$nl_netfilter(0x10, 0x3, 0xc) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000240)='\x00', &(0x7f0000000280)='./file0\x00', r1) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='rdma.current\x00', 0x0, 0x0) r3 = signalfd(r0, &(0x7f00000001c0)={[0x3f2]}, 0x8) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0xc) move_mount(r1, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x122) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@remote, 0xb, 0x8, 0xfffc, 0x10, 0xa, 0x60, 0x80, 0x1}, {0x5, 0x9, 0xfffffffffffffffe, 0x100000000, 0xa89b, 0x0, 0x80000000000000, 0xfffffffffffffffe}, {0x400, 0x3, 0x0, 0x800}, 0x80000007, 0x0, 0x1, 0x0, 0x2}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0x2b}, 0x2, @in=@empty, 0xffefffff, 0x1, 0x3, 0xfd, 0xfffffffe, 0x0, 0xfffffffe}}, 0xe8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000010000"]) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000"]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000007dc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008001}}], 0x1, 0x4000) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$ashmem(0xffffffffffffff9c, 0x0, 0x40, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETDEVNETNS(r11, 0x54e3, 0x0) r12 = accept4(r2, &(0x7f0000000240)=@phonet, &(0x7f00000002c0)=0x80, 0x1800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r12, 0x0) executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x3}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, &(0x7f0000000000)={0x1, 'syz_tun\x00', {}, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000008009d000040"]) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) executing program 1: timer_create(0x3, &(0x7f0000000140)={0x0, 0x1, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) timer_settime(r0, 0x1, &(0x7f0000000380)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r0, &(0x7f0000000000)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x2, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) executing program 1: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x23, 0x1b, {0x1b, 0x4, "db9d28e00f494ce45f09509ce4e55eecdfc286b1c950cc9ea7"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x44, &(0x7f00000000c0)={0x40, 0x31, 0x1, "9b"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000140)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000180)={0x20, 0x80, 0x1c, {0x4, 0x3ff, 0x8, 0x1, 0x1, 0x9, 0x6, 0x6, 0x4, 0x2, 0x1, 0x7d}}, &(0x7f00000001c0)={0x20, 0x85, 0x4}, &(0x7f0000000200)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000240)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000280)={0x20, 0x89, 0x2, 0x1}}) r0 = syz_usb_connect$cdc_ncm(0x0, 0xa2, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x2, 0x1, 0x3c, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '-'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xffff, 0x2e3, 0x1000, 0x7}, {0x6, 0x24, 0x1a, 0x3, 0x2}, [@country_functional={0xe, 0x24, 0x7, 0x2, 0x5, [0xfa1, 0x2, 0xb, 0x9]}, @acm={0x4}, @dmm={0x7, 0x24, 0x14, 0x62, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x80, 0xc3, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x0, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2, 0x9, 0x4}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x310, 0x4, 0x0, 0x1, 0x20, 0x6}, 0x6a, &(0x7f0000000440)={0x5, 0xf, 0x6a, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0x4e, 0x10, 0x2, "2614d294d6aaf3adfd71a7886843aa4f8b817093e0ca3a130005aff8aa76bffc9ca68db47ce45b3d278754c74e88a8055f155cd367db4032b80cf0ccb122c64c69081eb0edeead15461889"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0x4, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0xbd, 0xd, 0x8}]}, 0x2, [{0x7a, &(0x7f00000004c0)=@string={0x7a, 0x3, "acbb50f5eecc6eda17e093e8aa1992c3bb64e136653be267a6cd622349f0948f31a0879edc864cd1b31cef0af64a8c4fc9b661b8808d3bec38224c63ce86282ebc889c0ecad4fb7cdd5697430e4f7512cbd284b9ab35a57d23a03614de33ef30dfe9972ae6232da51edb0c9df2b98e74159b21e9f98bf1e0"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x3409}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000700)={0x14, &(0x7f00000005c0)={0x0, 0x5, 0xef, {0xef, 0x31, "404bd274b0d7c91dff24b631c75a7bbb48a34240aa62be4eb4f8207d876440fb3a65a207391b7324da7195bcee5af59869976f24a302d9573002e33490ef409dffbd89c51af1a9925203e85389d81e3144f754b089b87d1e1a21a2e6f163a9863f8f08cbbb73ae8408b8d20f76421d3a0125b2ddce192b473ff5c571631767161822b40e5367846dd94162654efcbbf07727ae693c10aa23db429a49f874dc9d20d948eeccd3d0d9fe53a4b3addde2b4c4eeae280f97b2c93ff124e4707d650a036f682a841c9b9a3f2be0a2c5f60f84282bb16b21f4f1ab684abf19dda5a62f9379fd85db7dc6501c31c053a3"}}, &(0x7f00000006c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000009c0)={0x44, &(0x7f0000000740)={0x0, 0x15, 0xb0, "586c541cfe4983f716cd1c8b2b9745a6eca653e18db8bc1b3d3ec54ba7c8076b57b6a817e91e2d23bcbfbd896674eec6089cad557c0170f6324b70cd9a39ac056b67e108f20a1120d7684d5165d9a196c4fecb0241a2aeb5343cdaee4639e0b76537e41546b998bea33932bedc3477f40ac1329662922f5bb9ee82bf178c2668bffd245763528a1a81f0f9887e218cc44a138e5337fc6841bfc4460c235bacf3eac46439d10a12b88e09908fb2324641"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000880)={0x20, 0x80, 0x1c, {0x5, 0x0, 0x7, 0x5, 0x8, 0x0, 0x6, 0xf9bb, 0x0, 0x6000, 0x1, 0x4}}, &(0x7f00000008c0)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000900)={0x20, 0x83, 0x2}, &(0x7f0000000940)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000980)={0x20, 0x89, 0x2}}) r1 = syz_open_dev$loop(&(0x7f0000000a40), 0x5, 0x40000) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000ac0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r3, 0x0, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000b00)=0xfffffffffffffffd) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000b40), &(0x7f0000000b80)=0xc) r5 = syz_usb_connect$uac1(0x4, 0x110, &(0x7f0000000bc0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfe, 0x3, 0x1, 0x44, 0xc0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}, [@feature_unit={0xd, 0x24, 0x6, 0x3, 0x5, 0x3, [0x5, 0x6, 0x1], 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x1ff, 0x4, 0xfa, 0x5, 0x6, 0x9}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x100, 0x3, 0x6, 0x7}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x204, 0x6, 0x5, 0x6, 0xc, 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x107, 0x3, 0x8, 0x522a, 0xa, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x8, 0x0, 0x0, "41be678206a2fbe046"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4, 0x3, 0xc9, {0x7, 0x25, 0x1, 0x1, 0x0, 0x200}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x3, 0xd1, 0x5, '-', "f71c10"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x6, 0x0, 0x81, "fe4972"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x8, 0x2, 0x5, 0x2, "ce8424c3621a57df9c"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x1849, 0x4, "3f7a8115f5ad"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x8, 0x7, 0x7f, "0ac16de6ea5f117960"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x6, 0x3, 0x1, 0xc9, "ca"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x4, 0xc, 0x0, {0x7, 0x25, 0x1, 0x2, 0x4, 0x9}}}}}}}]}}, &(0x7f00000011c0)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x300, 0x6, 0x5, 0x9, 0x20, 0xeb}, 0x23, &(0x7f0000000d40)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x4, 0xe, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "efef09f5f578373916454def93d74f89"}]}, 0x7, [{0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x3009}}, {0xf4, &(0x7f0000000e40)=@string={0xf4, 0x3, "f0b09d155fa61b522357b8dd215bddff3231e85e1028c02c097ba339d6f5c48589320087250f6924a1985e7c13c68829bee10d5b7b3959699b252b1e0e5efaca0e682d121d9a7ba04111e5200c8e47b2b411aa01fb0078e65268d9a97474ec413f53cd5e8a66c42656b921238291d2203e5eeee02d4fbb192fef6dce64b631d16f5adae14862f842bc4af68bdc8f18dfbe6d630b7779a4b40d71f9acbba24877f3683404ae4f7c59caeadf2c54f025c4b11a1e2ae7fbf1f4fb7e5fd43eb8c00a01b4e166a572d752a70a33d1b0c9fd5c1c66833e9bee35b3c2da80cdf5843c1e1ff183f54a18854187c1c21f0388169953ea"}}, {0xe3, &(0x7f0000000f40)=@string={0xe3, 0x3, "70116dc2190ef0a8cebd0ec24889761143f5368a66493310f570701b0bb4df1ec758e8f25963988b927db3446fc808478b985559912b3cd36ac9e86d54ca66127570adf58891c2c401f09b85c4c014d83f2b9a716f583684fdf2e61e077ef31b9280649904e44b9ee91973ce2256ff447377c12c7a8d27734e746ef24ca95887469cad460a2e025115f7e3a17845c0c9662132b778255890d78772ea8d0aaa5c487d6a7089710df185c5d2abe456be55fb0d92c9ef259f8261e9aa6572f5719439dc6b444aa28f42f3bbc6ea5b9f3cd488018394289c83077d5ebab40ca44b5b31"}}, {0xd8, &(0x7f0000001040)=@string={0xd8, 0x3, "1ec8124d138b3e4d5a034581b68d639fc04b9259d23e981cb74bc7ca445fec8812795e062858372e36d1ef8fd69e7d8fecac8301370d26d9ee13d80b405f17ba4d47681462f9d5085d31ad9868d80c357d745efcc20bd246c02671328dcf67a4801b46c85f421fa76a10b4020948fd7eae59ded7e3f2956f8bcbe72902bec70b6843d1c5eea3843467240f6db6d81d77263f289d1b4a5c2d327ec0707cf365665083ebf8d8a66f7a71b9c2ace7350bc21ef48a7ad4d8f1fdf37f1a3301465ed58783535be5ef9ffcaba426fc898f5090960054a43ad7"}}, {0x63, &(0x7f0000001140)=@string={0x63, 0x3, "373c4d756c7263998cc4a13c78c3fc5c36ba8f968c68cd3361623219b4cb89eff7eeb8f1f0638c53b4d9ecb895955407439eeeec839cc6ade0f10b81ef4ac5d3a8f98f2886105b6393094d3a739dca06c820952e3f18dc039e22b74377621632c3"}}]}) syz_usb_control_io(r5, &(0x7f0000001440)={0x2c, &(0x7f0000001240)={0x0, 0x6, 0x43, {0x43, 0x22, "a34b67615a4358d92b02b17c1bb38fc790d8abb2ba4f9286a80931e01c4a1cf23e1280c56fcb610b6e57289be6a53a1fe69c0fdd608d24103f7838423609ae3913"}}, &(0x7f00000012c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}, &(0x7f0000001300)={0x0, 0xf, 0xb8, {0x5, 0xf, 0xb8, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x8, 0x7, 0x4}, @generic={0xac, 0x10, 0x1, "59ddbe9c85e2f67b155a9cb112ccbe45cd73b6b60b0b81454203f71df0c637a660239335dc34e96e1709f9d3ac24cbaffd7af0fa99d7e800329489211b84a3d267d5a0bb6a1e495846d392fa8b535618216f6916bb1d2a3c4bd746a03fb04fc1095e75f4a9b832a6c3b76546081acfb58c5817abb0dec57db3b2ad680e5f3fa48bd979e1a71ff659e8a19f179eeabbc4671f7d9ad4d523ca48b7f893d7da938bb8c335b0b17c645850"}]}}, &(0x7f00000013c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x10, 0x6, 0x6, "58a2f012", "ff060f5a"}}, &(0x7f0000001400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x2, 0x8, 0x5, 0x3, 0x4, 0xfc00}}}, &(0x7f0000001940)={0x84, &(0x7f0000001480)={0x0, 0x0, 0xca, "6dae94b224a77a4aa7ad97282d7a06abe9ec4df700ed65499486387a565b6df663bad96dabc9287df9f6c104947f1ef9ddd16fe8c6385e420034ed7f7d9aba7405d205b974362b526c9448a362e0417d85d0c0a7a10efbdbdd308b087397bfaff4991d3137d1867aa586575f7f45f0990e78102bead3f14565add95059ef0cf4fe5c6d7d4164449e40561c2bf8cb7b453ca266ba2b75aac5441acf3a18414715098129739d6d280695d874b6588209ed88ae0f83dd4c4c9a1a7881773c5ffc5e926e70d93fb9dcabbfe2"}, &(0x7f0000001580)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000015c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001600)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000001640)={0x20, 0x0, 0x4, {0x400, 0x20}}, &(0x7f0000001680)={0x40, 0x7, 0x2, 0x5}, &(0x7f00000016c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000001700)={0x40, 0xb, 0x2, "9bcf"}, &(0x7f0000001740)={0x40, 0xf, 0x2, 0xe}, &(0x7f0000001780)={0x40, 0x13, 0x6, @random="227797993d09"}, &(0x7f00000017c0)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000001800)={0x40, 0x19, 0x2, 'Zg'}, &(0x7f0000001840)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001880)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000018c0)={0x40, 0x1e, 0x1}, &(0x7f0000001900)={0x40, 0x21, 0x1, 0xe4}}) r6 = open$dir(&(0x7f0000001a00)='./file0\x00', 0x80200, 0x108) mknodat$null(r6, &(0x7f0000001a40)='./file0\x00', 0x2, 0x103) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000001ac0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r7, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x2c, r8, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_IPPROTO={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x2400c080) mount$overlay(0x0, &(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00), 0x1000, &(0x7f0000001c40)={[{@xino_off}, {@metacopy_off}, {@default_permissions}, {@index_off}], [{@obj_type={'obj_type', 0x3d, 'fou\x00'}}]}) write$selinux_context(r2, &(0x7f0000001cc0)='system_u:object_r:audisp_remote_exec_t:s0\x00', 0x2a) pipe2(&(0x7f0000001d00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001e00)={'tunl0\x00', &(0x7f0000001d80)={'syztnl1\x00', 0x0, 0x8, 0x20, 0x80000001, 0x9, {{0x11, 0x4, 0x3, 0x29, 0x44, 0x64, 0x0, 0xc, 0x4, 0x0, @broadcast, @empty, {[@lsrr={0x83, 0xf, 0xff, [@local, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback]}, @timestamp_addr={0x44, 0xc, 0x6b, 0x1, 0x0, [{@broadcast, 0x8}]}, @generic={0x44, 0xb, "9f28f0e5bbbbc3f2aa"}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) sendmsg$nl_route_sched_retired(r9, &(0x7f0000002040)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001e40)=@delqdisc={0x1a8, 0x25, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x5, 0x10}, {0x0, 0x5}, {0xfffb, 0xe}}, [@q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x30}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xd19}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8000}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x39}]}}, @q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xd4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2d}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1000}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x10}]}}, @q_dsmark={{0xb}, {0x48, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x816c}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9080}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xd}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x91d}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x101}]}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x48000) syz_usb_control_io$uac1(r5, &(0x7f0000002140)={0x14, &(0x7f0000002080)={0x20, 0x6, 0x4a, {0x4a, 0xe, "5084da0aac721ed1a6b9dd8b3e3173a14623671c93fe596de5dfa6c5c1334859f929508cc9f7e5e0387293ae5208348f916e94431390a7ae9d4e0c57b66b0f3b941a43b0e06bc8d6"}}, &(0x7f0000002100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41d}}}, &(0x7f0000002440)={0x44, &(0x7f0000002180)={0x40, 0xf, 0xc6, "ee9f2f42261ee5d5661544e515735d8df809e062629f60c6b24e26aad2d5ac7b34eb000fdf66c798960e0f41374589efca03999be3dfdcb9002db09a878f6f67eef9b640b6f146ad9d28d92641d066be20d27227d3df191991efb21a5a0b487ab29bcd3f985694d71c2529c5a070e69e2a090c635ac1bd710dae132f5b95a7743127124343c98f92cfd32142f7b3b2b25a20f9b270d8a8cad197b9b8ea853038ed391ab459420f4303a0dda6f5257a5f5ba43052509015c590986d9cb2f518c90645dea5f73d"}, &(0x7f0000002280)={0x0, 0xa, 0x1, 0xf}, &(0x7f00000022c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000002300)={0x20, 0x81, 0x1, "18"}, &(0x7f0000002340)={0x20, 0x82, 0x2, "16e3"}, &(0x7f0000002380)={0x20, 0x83, 0x3, "34a23e"}, &(0x7f00000023c0)={0x20, 0x84, 0x1, "98"}, &(0x7f0000002400)={0x20, 0x85, 0x3, "77a542"}}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0x5, &(0x7f00000024c0)=0x1fe, 0x4) r11 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000002500)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x307, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0x4, [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x3, 0x1, 0x2, 0xff, {0x9, 0x21, 0x3, 0x9, 0x1, {0x22, 0xef2}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x80, 0xaa, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x6b7080745ab0c260, 0x4, 0x1, 0x3}}]}}}]}}]}}, &(0x7f0000002840)={0xa, &(0x7f0000002540)={0xa, 0x6, 0x0, 0x33, 0x2, 0x2, 0xff, 0x8}, 0x15, &(0x7f0000002580)={0x5, 0xf, 0x15, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x5, 0x6, 0x55}, @ptm_cap={0x3}]}, 0x7, [{0x38, &(0x7f00000025c0)=@string={0x38, 0x3, "0593bbc767742a9722e37c6ce8280c326ae9c313574671e202df8e340b07e3d6c926b36342538f7f3de53ec37f2b7e6734d4b1bc6550"}}, {0xbe, &(0x7f0000002600)=@string={0xbe, 0x3, "187e282357280dfbb752f6e6daaa8c5e7d6fb9b3408cc66cae3c5628831838e5c772f12741acbc17b4838aa9b67dcfffd300e64367320b1e01e7f552ea8440a456c3b561125fd92044ee1631b3d940fe35c905a78c7ca46da4f6516cc70ab53def4d43cd03ccf24ce52165854eaea091b40380b942ea2c9e83973e2c59bad497208284e0da60be159d6d983fc95fcf0a1d6c4aea2640b7229191fd0d01603f9e5811aa6221ebd56df9357ab686cb68e3f4cace9ced153176349918d0"}}, {0x4, &(0x7f00000026c0)=@lang_id={0x4, 0x3, 0x542b}}, {0x4, &(0x7f0000002700)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000002740)=@lang_id={0x4, 0x3, 0x80a}}, {0x41, &(0x7f0000002780)=@string={0x41, 0x3, "713ead6f20aa836e9ac3c022620da36b8e0f1a1564e85c36729b4d2be6011facdc0e04595a80b359f57926aabed290e2e17d3fd69c5782e1c0e04050833f07"}}, {0x4, &(0x7f0000002800)=@lang_id={0x4, 0x3, 0x1009}}]}) syz_usb_control_io$hid(r11, &(0x7f0000002a40)={0x24, &(0x7f00000028c0)={0x20, 0x31, 0xac, {0xac, 0x21, "ec3233cbaaaaeeaa5c6906b174296d442469733a84d52ec1ae44fee74bdf91eff3df682f3b0b859a5c7c707c7adcbc6a07a6477422cec6e18d8d630a0309623e112d958192a6d9dd62a038246aac492df52280d3459bca0bd6c1bbd26db69ced05e8ccb2370d3756c1f1c34ac92fc0accd796fef3def4b4c59a8e49d9397916f2c2f3f4ba9e18b868b6b375cef9fa76f56eacfd1dd1e9d51da91e187fd6eab2507eb4aaa40520b7f6e0e"}}, &(0x7f0000002980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}, &(0x7f00000029c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "c4a464dc"}]}}, &(0x7f0000002a00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7ab1, 0xb, 0x1, {0x22, 0x1b6}}}}, &(0x7f0000002cc0)={0x2c, &(0x7f0000002a80)={0x40, 0x0, 0x6b, "495f43c397ff7fdb94090ba508900a34463cd17026c20cadaf84df611fcc8586d894df4aad14dca1f61d7582428fef11c2ffb6b2d1802590b915b77cfdc4614eb1fe0400ac28e218afa4b12fce97e6db80ad642eddc36a7728ce71c296149304c4e3db82076e54f911465a"}, &(0x7f0000002b00)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000002b40)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000002b80)={0x20, 0x1, 0xcf, "a8f55500aac42153d42bde323ee1e0bdb963098771458d2375ed6f49b69a120838df6073850e77a5b94397d8c9fe158894e5035979e16c2e98ecae8e537db71c7e5524f61ef77b83d45ed7e03c0730641e3b9a05dfdc826a2cc533e6df2d23543b6c91e0a4b29dbfc75ad4434bd2f92f55a171dd090c9af5f876157f9b8e755194a9c5658aab750cd8ddf05e9c33e402cbfbdbc1d04edcbce13c138f23888dcdf907b01d3f9a2a408582e8c100344b5b1ea589e48d664946fbf6eded18a2ebbb0c815dde78018a5fede6b8d27d5d34"}, &(0x7f0000002c80)={0x20, 0x3, 0x1, 0x80}}) sendfile(r7, r4, &(0x7f0000002d00)=0x10000, 0x5) unlink(&(0x7f0000002d40)='./file0\x00') syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000002e40)={0x14, &(0x7f0000002d80)={0x20, 0x6, 0x4b, {0x4b, 0x4, "02ed8d763cc92c9c4a52fc66da74c92efb87cbc527178ce4f5496819cd829a73802425652c081892f62314860e63fed471ca112f8ba222c8c78219189ecbc01e9f69ada2f8d99d1bbb"}}, &(0x7f0000002e00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x420}}}, &(0x7f0000003180)={0x34, &(0x7f0000002e80)={0x0, 0x14, 0xdb, "13a2daae13a72eeb30708dc6e7109d0d485744d683fda0ead2eb65f13c191c4f597d532a752fcaef7dbae2717720e3ac1af91d0fedbb829eda56611f104b93b0e1f53b2aa28d03989ff8efbffb4e57e12a4c15f958a6a7f571021bcaea40a170900f98b35e6dba404c8f17a0583c370ed0033ab92054d610699d69632b4999bde59e03ee41576642a566abcf76e272abc14a50db3032d1d060977b8cd058960d2a4d1573b9b3ae4f154be6e49213fddcb8cffcaa29ae15708eeb6dddcc19e9e2425a222d5cd84a363d50e5fda78c5efb1e926575f58793795f3d4f"}, &(0x7f0000002f80)={0x0, 0xa, 0x1, 0x99}, &(0x7f0000002fc0)={0x0, 0x8, 0x1, 0x4d}, &(0x7f0000003000)={0x20, 0x0, 0xcc, {0xca, "2cde39f2a0ecfdd1a78f82b5920024429ae67bcf04a7e8add38ee9abb1cce46f9f6cd1b85b1e46eb702c00b80472c940897f7a77f0318512511ea2ee69ba15323814cadd51b101566bd220e2d91e0c7cffbf2f8525e242d39bafc22f92ceb1f0ef464da0bd95ffe5d9d592ce4e9030d858637b1f458c0fd742366ac297c58f4fca4ce59ce876a4bc09ed254e5b127c1a0c85ea8de476ccb0785e9e37977114498934e8252385d603589b8d008450595b6fd9f4084547c91e4b74bc1ca3fce9aed19897893bfb2b8b310b"}}, &(0x7f0000003100)={0x20, 0x1, 0x1, 0xa}, &(0x7f0000003140)={0x20, 0x0, 0x1, 0x9}}) executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0xff7ffff7) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') r4 = socket$unix(0x1, 0x1, 0x0) sendfile(r4, r3, &(0x7f0000000000)=0x11, 0x7) openat(r3, &(0x7f0000000200)='./file0\x00', 0x40000, 0x281) r5 = eventfd(0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xc8, 0x0, 0xc000000) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x30, r10, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r11}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}]}, 0x30}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) r12 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r12, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r13 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000240)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r1, 0x5bfe5000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000fc160a29aa3d2076d8c7bcfbc60a58f8d945e8678e3a25df16722f9e02d9e013abc196df72e6be93e8603fcf7647e29833ed04fae59add4b715eb765ed7a60d60543ff67888ff430e908594b8b03dbffd1708b61178a622ca91a05feabc0efb7d7d21a41239d079e7dde944046e62a66b0101a743687fe3d3e00b712e170a0e3777621b9ad8cf10336bdc70f19177b3d06e32e5d6ef2fa7ab4010af9ac7b82aecddd212d4132da395a87280f86d763ea", @ANYRES16=r16, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r14, @ANYBLOB], 0x20}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6c}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x124c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x137a}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x631}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x131c}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x5) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000280)={r2, 0x1fe, 0x2, r5}) executing program 5: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x709000, 0x0) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x202080, 0x89) linkat(r2, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00', 0xc00) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000140)={'TPROXY\x00'}, &(0x7f0000000180)=0x1e) (async) r4 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000840)={0x0, &(0x7f00000001c0)=[@cpuid={0x2, 0x18, {0x4, 0xf8e}}, @uexit={0x0, 0x18, 0x400}, @code={0x1, 0x5b, {"0f91af9d8a80470f20e035800000000f22e0260f7951fe262e0fc71e0f20d835080000000f22d866baf80cb8329b818fef66bafc0c66edf226260f09c40149753ac461795acef3430f32"}}, @uexit={0x0, 0x18, 0xa1}, @uexit={0x0, 0x18, 0x8000000000000001}, @uexit={0x0, 0x18, 0x3}, @cpuid={0x2, 0x18, {0xb20b, 0x52f}}, @cpuid={0x2, 0x18, {0x869, 0xb56}}, @code={0x1, 0x6e, {"c4e14dee1ab9b70b00000f32c74424002b010000c744240213970000ff2c24b98d0800000f328f0950012867650f381d1766f2f267e2bd66450fc77327c7442400d1be0000c744240200100000c7442406000000000f011c24440f0002"}}, @cpuid={0x2, 0x18, {0x3}}, @cpuid={0x2, 0x18, {0xe81a, 0x8}}, @code={0x1, 0x60, {"66baf80cb8b2405b81ef66bafc0c66ed450f220366ba2000edc4034542fe000f214166470f00d936f2420f1ed1660fd07e1066ba6100b800100000efc74424001d010000c7442402f9310000ff2c24"}}, @uexit={0x0, 0x18, 0xd6dc}, @code={0x1, 0x5e, {"66baa000b80d000000ef0fc71b0f01cfb9b7090000b80d000000ba000000000f30c402b12949f766400f383805008000006466460f6d2ce8b805000000b924b900000f01c1410fe311430f01c8"}}, @uexit={0x0, 0x18, 0x8}, @code={0x1, 0x58, {"2e410d3771f8e266ba420066b8080066ef8fe8188e7a0f00c48131657900c482293df06544f4c42179de2e400f30b9800000c00f3235004000000f300f20d835200000000f22d8"}}, @uexit={0x0, 0x18}, @cpuid={0x2, 0x18, {0x5, 0xd}}, @code={0x1, 0x76, {"b9800000c00f3235008000000f3066baf80cb8d464938def66bafc0cb800700000ef4a0fc71e430f01c8f20f2b6e0d450f07b9ad020000b847c20000ba000000000f3048b866000000000000000f23c00f21f835030009000f23f80f01c88f09909564215d"}}, @code={0x1, 0x80, {"48b800900000000000000f23c00f21f83502000d000f23f866b8c8008ed8260f09c744240000c0ffffc744240200600000c7442406000000000f011424660f3a0f469b1248b87b780000000000000f23d80f21f835400000000f23f864470fd4dc66b8ad008ec066bad004ec0f2107"}}, @code={0x1, 0x58, {"b9c10b0000b89e1f0000ba000000000f300f7948d766ba4100edb945080000b8d6000000ba000000000f3046040366b806018ee80f52b6006000000f01c366ba4300ed360f01ca"}}, @uexit={0x0, 0x18, 0x7}, @code={0x1, 0x61, {"430f2385c4027d1300c4e3d57ce30066440f38808868360000c4821902a50058000066410f15680f66ba430066ed66b846000f00d80f01c348b801000000000000000f23c80f21f835080010000f23f8"}}, @code={0x1, 0x44, {"b8010000000f01d966baa10066ed8f2868ec77160a440f01d1c4c25d45a00e000000f30f1efb660fe0f9f30fc7360f1f00d9e0"}}, @code={0x1, 0x8d, {"66b898008ee8b805000000b96a7600000f01c1c7442400c2410000c7442402a8000000c7442406000000000f011c2466ba4100ed640f0766420fc5c3d766baf80cb88f8df58fef66bafc0cecb926030000b8fcffffffbaffffffff0f300f20e4c7442400e4480000c74424020a000000c7442406000000000f011424"}}, @cpuid={0x2, 0x18, {0x8, 0x1}}, @code={0x1, 0x48, {"64470f30450f01ca400f32c4a27d784e92f30fb88807000000440f20c03507000000440f22c066bad004ecc441fa1666d166f20f350f32"}}, @code={0x1, 0x69, {"c744240021000000c744240200800000ff1c24b9e60900000f3266baf80cb83c6fb18fef66bafc0cb800080000ef660f388133470f0131440f07b9800000c00f3235002000000f3066420fc733c4e27d254e0026663e0f32"}}], 0x678}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000880)={'vcan0\x00'}) recvmmsg(r1, &(0x7f0000005a40)=[{{&(0x7f00000008c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000940)=""/192, 0xc0}], 0x1, &(0x7f0000000a40)=""/145, 0x91}, 0x6}, {{&(0x7f0000000b00)=@caif, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000b80)=""/113, 0x71}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/101, 0x65}, {0x0}], 0x4, &(0x7f0000001cc0)=""/212, 0xd4}, 0x87}, {{&(0x7f0000001dc0)=@un=@abs, 0x80, &(0x7f0000002080)=[{&(0x7f0000001e40)=""/3, 0x3}, {&(0x7f0000001e80)=""/172, 0xac}, {&(0x7f0000001f40)=""/2, 0x2}, {&(0x7f0000001f80)=""/5, 0x5}, {&(0x7f0000001fc0)=""/130, 0x82}], 0x5}, 0x3ff}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/93, 0x5d}, {&(0x7f0000003180)=""/36, 0x24}, {&(0x7f00000031c0)=""/84, 0x54}, {&(0x7f0000003240)=""/172, 0xac}], 0x5, &(0x7f0000003380)=""/148, 0x94}}, {{&(0x7f0000003440)=@generic, 0x80, &(0x7f0000003640)=[{&(0x7f00000034c0)=""/70, 0x46}, {&(0x7f0000003540)=""/84, 0x54}, {&(0x7f00000035c0)=""/114, 0x72}], 0x3, &(0x7f0000003680)=""/70, 0x46}, 0x7}, {{&(0x7f0000003700)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003780)=""/243, 0xf3}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)}, {&(0x7f00000048c0)=""/6, 0x6}, {&(0x7f0000004900)=""/104, 0x68}, {&(0x7f0000004980)=""/47, 0x2f}], 0x6, &(0x7f0000004a40)=""/4096, 0x1000}, 0x9}], 0x6, 0x10040, &(0x7f0000005bc0)={0x0, 0x989680}) (async, rerun: 64) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (rerun: 64) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000005c00)={0x0, 0x9, 0x0, [0x1, 0xb7, 0x7fffffff, 0xaeef, 0x6], [0x8, 0x5, 0x9a4d, 0x7fff, 0x5, 0x4, 0x0, 0x9, 0x5314, 0x3, 0x7fffffff, 0x9, 0x2, 0x7ff, 0x2, 0x9, 0xe464, 0xb5, 0xb, 0xd, 0x8, 0x69d, 0x5c, 0x3, 0x9, 0x80000001, 0xfffffffffffffffc, 0xfffffffffffffff7, 0x3, 0x4, 0x9, 0x9, 0x3, 0xd, 0x9, 0x7fff, 0xfffffffffffffffa, 0x1, 0x800, 0x7ff, 0x9, 0x100000001, 0xfffffffffffffffa, 0x4, 0x9, 0x7f, 0x100000001, 0xffffffffffffffc0, 0x39, 0x1, 0x2, 0x2, 0x7, 0xfffffffffffffff4, 0x9, 0x8, 0x8000000000000001, 0xd, 0x8, 0x8, 0x2, 0x5, 0x55, 0xfffffffffffffff7, 0x1, 0x2, 0xd1, 0xe, 0xfff, 0x2, 0xffffffffffffffff, 0x1, 0xffff, 0x1, 0x8, 0x62, 0xfffffffffffffffe, 0xf000000000000000, 0x9, 0x7, 0x9, 0x7, 0x81, 0xffffffffffffffb7, 0x8, 0x5, 0x2, 0x9, 0x2, 0x99, 0xd, 0x7, 0x5a3b, 0x8, 0x50000, 0x0, 0x9, 0x7fffffff, 0x5, 0x6, 0x4, 0xe, 0xffff, 0x10000, 0xe, 0x9, 0xfffffffffffffff9, 0x2, 0x5, 0xfc1, 0xfff, 0x10, 0x7fb0, 0x9, 0x1, 0x5, 0x3, 0xfffffffffffffffa, 0x0, 0x8253, 0x4]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000006040)={r8, 0xffff, 0x1, [0x7fffffffffffffff, 0x2, 0x1, 0xf61, 0xfffffffffffffff8], [0x6, 0x400, 0x8, 0xd800000000000000, 0x7fffffff, 0x4, 0x4, 0x1, 0x2, 0x9, 0x80000001, 0x1ff, 0x3, 0x800, 0x5, 0xff, 0x3f4a, 0xa, 0x5, 0x9cbf, 0x1, 0xfffffffffffffffe, 0x7, 0x2, 0x2, 0x2, 0xffffffffffffff01, 0x1, 0x3, 0xb4c0000000000, 0x5, 0x6, 0x3, 0x4, 0x7, 0x3, 0x9, 0x10, 0x0, 0xb, 0x80, 0x73, 0x5, 0x5, 0x8, 0x1c000, 0x7, 0x525, 0x0, 0xf, 0x8000, 0x4894e478, 0x9, 0x9, 0xe066, 0x5, 0x6, 0x2, 0x5, 0x3, 0x1, 0xfffffffffffffffc, 0x0, 0x3, 0x2, 0x2, 0x7, 0xfff, 0x6, 0x1, 0x5, 0x5, 0xfffffffffffffff9, 0xfc80, 0x4, 0x7, 0xffff, 0x3e, 0xca3, 0x9, 0x2, 0x80000001, 0x81, 0x3, 0x3, 0x8000000000000000, 0x0, 0x40, 0x3, 0x8000, 0x100000001, 0x2, 0x7, 0x81, 0x1ff, 0x9, 0x18, 0x0, 0x7, 0x101, 0xa0, 0x6, 0xe, 0x1, 0x7, 0x0, 0x101, 0x200, 0x5, 0xf61, 0x4e41, 0x1, 0x100000000, 0x5, 0x2, 0xe, 0x3, 0x4, 0x2, 0x5, 0x9]}) (async) r9 = eventfd(0x81) (async, rerun: 64) r10 = syz_open_procfs(0x0, &(0x7f0000006480)='clear_refs\x00') (rerun: 64) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f00000064c0)={r9, 0x9, 0x0, r10}) r11 = getuid() (async) fstat(r7, &(0x7f0000006540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000006500)='./file0\x00', r11, r13) (async) r14 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000065c0), 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r14, 0x65, 0x2, &(0x7f0000006600)=0x80000000, 0x4) (async) getsockopt$IPT_SO_GET_REVISION_MATCH(r14, 0x0, 0x42, &(0x7f0000006640)={'HL\x00'}, &(0x7f0000006680)=0x1e) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r10, 0x54a2) pipe(&(0x7f00000066c0)) (async) getsockopt$inet_IP_XFRM_POLICY(r14, 0x0, 0x11, &(0x7f0000006780)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@private1}}, &(0x7f0000006880)=0xe8) setxattr$system_posix_acl(&(0x7f0000006700)='./file0\x00', &(0x7f0000006740)='system.posix_acl_access\x00', &(0x7f00000068c0)={{}, {0x1, 0x6}, [{0x2, 0x1, r12}, {0x2, 0x2, r11}, {0x2, 0x0, r12}, {0x2, 0x3, r15}], {0x4, 0x6}, [{0x8, 0x6, r13}, {0x8, 0x2, r13}, {0x8, 0x0, r13}, {0x8, 0x3, r13}], {0x10, 0x5}, {0x20, 0x5}}, 0x64, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000006940)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000006980)=0x2c) executing program 1: openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4142, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0, 0x80a0000}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000002c0)={0x2, 0x0, [{0x80a0000, 0x42, &(0x7f0000000100)=""/66}, {0xeeee8000, 0x54, &(0x7f0000000180)=""/84}]}) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000240)=ANY=[], 0xd0060) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x13000000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r2, &(0x7f00000000c0)="8f2a0a65", 0x4) executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x1d, r3}, 0x10, &(0x7f0000000100)={&(0x7f0000000180)={0x7, 0x0, 0x4, {}, {0x0, 0xea60}, {0x3, 0x0, 0x1}, 0x1, @can={{0x4, 0x0, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "6d56f1e83311e5a3"}}, 0x48}, 0x1, 0x0, 0x0, 0x20004011}, 0xc) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) executing program 1: openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x12, 0x0, 0x0) mmap(&(0x7f0000ad9000/0x3000)=nil, 0x3000, 0x100000d, 0x110, r0, 0x45809000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xff}}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private1, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0xa0}}, 0x0) socket$inet(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414"], 0x84}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESHEX, @ANYRES8], 0x2c}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x4, 0x7, 0xf8, 0x3, 0x6, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0xf81e, 0x7, 0x9}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc141200004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r7}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000840)={0x3f4, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1b4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1b0, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdde}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\#^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '}!{+$:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\\\'&-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x76}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+@*@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x40, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x2e, 0x4, "0efb8377eaacd4be5c0ed2072361f9d11b9476a5b281905f5b6a46417ebf494ba7668363d6a8ffa106be"}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x170, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ':.\'-#%+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x101, 0x5, "192909c3a4545bdd01f278bc9785d86e8e52ef14fb4a7e891799be35af6219032934062e79588a50d344ee0141ee2e3e6b5cbf3a42d7a18ae718a54ac38dfc6eadebbe537a05119b25beee9958dc2a225719c42e55adf115761dad0892be4a3be9bf7fd52b9805608f41594bba9649493602650517b9a5414ba813432befb9755c932dd1365ed060f3c3dddaf1436c10965c67b19bb3845b48bf4499aa748bf742dc00fdc4c76ca9ec4fb3fa62198f28d84affde5476d1009b0656299428611ee2347167353363059a56bf6c435a77cfa1af3b0935eab9fa81f0c08326ee4a45c752ae222a90fc56623c916c0f79a7f9b091e42b3b60d26b21dee31cdd"}, @ETHTOOL_A_BITSET_VALUE={0xd, 0x4, "2119ed1555f5f8c7c6"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x4000840}, 0x40010) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getpid() sendmsg$netlink(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1000000021ef01"], 0x10}], 0x1, 0x0, 0x0, 0x4}, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xffffe000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x20000000, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x80000000000000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x1e0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) personality(0x619641b6fb4b8591) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) uname(&(0x7f0000000240)=""/201) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x1000810, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c7766646e6f5876c1aff704001afc61b5926c2669010b4e7e0e4c678991c5f2e1496448212e8ed80faf91b05d38b785d17f000000005ddbbcbd85a859795202471875d87c7579c06fdadadbad6dda2a97761cdc0838cd4202fd242d3ab12954ad1ba3cb27a7db04de41428e868c2eb96b4a402c19b9aa9a7cabc0046ddd", @ANYRESHEX=r1, @ANYBLOB=',msize=0x0000000026da2d2a,\x00']) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000600)={@flat=@weak_binder={0x77622a85, 0x100a}, @fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0x100, 0x3}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r7 = signalfd4(r1, &(0x7f0000000580)={[0xc01a]}, 0x8, 0x80800) setsockopt$inet6_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f00000005c0)=@gcm_128={{0x304}, "53b0dff0c8b491d0", "2cd52c12ba75d255b87383c730578d43", "5e3983e0", "f77489334fd920dd"}, 0x28) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x49, &(0x7f0000001600)=0xffffffff, 0x4) sendmsg$inet(r8, &(0x7f00000004c0)={&(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000400)="d2b08b4f559e9815f1f9b326b4768bf97d059aaf14f2563d12fc9c0972b2c0aae38651d56fcb2bd047bce2d98f54ae1573361079bd301f347f09e45fecaf9470b3c258d03e416dc72b0a3e3633f0742f0f4e928cb3f344763826ca6b12a16bb96ec39d8a2972763dc5a38646481da08d5640c8d2920bfd2151631760532b98e054e6417539ac9999892c277f96373767540eeb0c7bd49f272448435fa1f6bec9", 0xa0}], 0x1, &(0x7f0000000380)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xdf}}], 0x18}, 0x4004884) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000540)={0xfffffffa, 0x200, 0x1}, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x284}, 0x1, 0x0, 0x0, 0x4000004}, 0x44000) executing program 5: ioprio_set$pid(0x2, 0x0, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000c00)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x1, 0x0, 0x2}, {0x0, 0x1fffffffe, 0x40000000007, 0x5, 0x40000000000004, 0x800000000002, 0x200000003, 0x400}, {0x40000000000005, 0x0, 0x0, 0x5}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x6c}, 0x2, @in6=@local, 0x0, 0x1, 0x8, 0x0, 0x9075, 0x0, 0x9945}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r1, r1, 0x0, 0x2) executing program 35: openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="38010000fe0000", @ANYBLOB="7fdc98af24c46052db76afb5b62e1eef0738e7b7b0652ed6"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x2, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2501000000000000000741"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) executing program 5: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x41000, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000000)={0x9, {0x0, 0x6, 0x1, 0x800, 0x9}}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/prev\x00') r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000) executing program 36: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000240)='\x00', &(0x7f0000000280)='./file0\x00', r1) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='rdma.current\x00', 0x0, 0x0) r3 = signalfd(r0, &(0x7f00000001c0)={[0x3f2]}, 0x8) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0xc) move_mount(r1, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x122) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@remote, 0xb, 0x8, 0xfffc, 0x10, 0xa, 0x60, 0x80, 0x1}, {0x5, 0x9, 0xfffffffffffffffe, 0x100000000, 0xa89b, 0x0, 0x80000000000000, 0xfffffffffffffffe}, {0x400, 0x3, 0x0, 0x800}, 0x80000007, 0x0, 0x1, 0x0, 0x2}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0x2b}, 0x2, @in=@empty, 0xffefffff, 0x1, 0x3, 0xfd, 0xfffffffe, 0x0, 0xfffffffe}}, 0xe8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000010000"]) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000"]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000007dc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008001}}], 0x1, 0x4000) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$ashmem(0xffffffffffffff9c, 0x0, 0x40, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETDEVNETNS(r11, 0x54e3, 0x0) r12 = accept4(r2, &(0x7f0000000240)=@phonet, &(0x7f00000002c0)=0x80, 0x1800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r12, 0x0) executing program 37: openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x12, 0x0, 0x0) mmap(&(0x7f0000ad9000/0x3000)=nil, 0x3000, 0x100000d, 0x110, r0, 0x45809000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xff}}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private1, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0xa0}}, 0x0) socket$inet(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414"], 0x84}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESHEX, @ANYRES8], 0x2c}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x4, 0x7, 0xf8, 0x3, 0x6, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0xf81e, 0x7, 0x9}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc141200004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r7}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000840)={0x3f4, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1b4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1b0, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdde}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\#^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '}!{+$:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\\\'&-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x76}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+@*@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x40, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x2e, 0x4, "0efb8377eaacd4be5c0ed2072361f9d11b9476a5b281905f5b6a46417ebf494ba7668363d6a8ffa106be"}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x170, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ':.\'-#%+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x101, 0x5, "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"}, @ETHTOOL_A_BITSET_VALUE={0xd, 0x4, "2119ed1555f5f8c7c6"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x4000840}, 0x40010) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) executing program 38: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x41000, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000000)={0x9, {0x0, 0x6, 0x1, 0x800, 0x9}}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/prev\x00') r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000) program crashed: WARNING in kvm_put_kvm bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=6m3s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 30, 30, 30, 12, 10, 30, 10, 25, 7, 19, 7, 30, 30, 7] detailed listing: executing program 1: timer_create(0x3, &(0x7f0000000140)={0x0, 0x1, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) timer_settime(r0, 0x1, &(0x7f0000000380)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r0, &(0x7f0000000000)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x2, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) executing program 1: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x23, 0x1b, {0x1b, 0x4, "db9d28e00f494ce45f09509ce4e55eecdfc286b1c950cc9ea7"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x44, &(0x7f00000000c0)={0x40, 0x31, 0x1, "9b"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000140)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000180)={0x20, 0x80, 0x1c, {0x4, 0x3ff, 0x8, 0x1, 0x1, 0x9, 0x6, 0x6, 0x4, 0x2, 0x1, 0x7d}}, &(0x7f00000001c0)={0x20, 0x85, 0x4}, &(0x7f0000000200)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000240)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000280)={0x20, 0x89, 0x2, 0x1}}) r0 = syz_usb_connect$cdc_ncm(0x0, 0xa2, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x2, 0x1, 0x3c, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '-'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xffff, 0x2e3, 0x1000, 0x7}, {0x6, 0x24, 0x1a, 0x3, 0x2}, [@country_functional={0xe, 0x24, 0x7, 0x2, 0x5, [0xfa1, 0x2, 0xb, 0x9]}, @acm={0x4}, @dmm={0x7, 0x24, 0x14, 0x62, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x80, 0xc3, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x0, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2, 0x9, 0x4}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x310, 0x4, 0x0, 0x1, 0x20, 0x6}, 0x6a, &(0x7f0000000440)={0x5, 0xf, 0x6a, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0x4e, 0x10, 0x2, "2614d294d6aaf3adfd71a7886843aa4f8b817093e0ca3a130005aff8aa76bffc9ca68db47ce45b3d278754c74e88a8055f155cd367db4032b80cf0ccb122c64c69081eb0edeead15461889"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0x4, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0xbd, 0xd, 0x8}]}, 0x2, [{0x7a, &(0x7f00000004c0)=@string={0x7a, 0x3, "acbb50f5eecc6eda17e093e8aa1992c3bb64e136653be267a6cd622349f0948f31a0879edc864cd1b31cef0af64a8c4fc9b661b8808d3bec38224c63ce86282ebc889c0ecad4fb7cdd5697430e4f7512cbd284b9ab35a57d23a03614de33ef30dfe9972ae6232da51edb0c9df2b98e74159b21e9f98bf1e0"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x3409}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000700)={0x14, &(0x7f00000005c0)={0x0, 0x5, 0xef, {0xef, 0x31, "404bd274b0d7c91dff24b631c75a7bbb48a34240aa62be4eb4f8207d876440fb3a65a207391b7324da7195bcee5af59869976f24a302d9573002e33490ef409dffbd89c51af1a9925203e85389d81e3144f754b089b87d1e1a21a2e6f163a9863f8f08cbbb73ae8408b8d20f76421d3a0125b2ddce192b473ff5c571631767161822b40e5367846dd94162654efcbbf07727ae693c10aa23db429a49f874dc9d20d948eeccd3d0d9fe53a4b3addde2b4c4eeae280f97b2c93ff124e4707d650a036f682a841c9b9a3f2be0a2c5f60f84282bb16b21f4f1ab684abf19dda5a62f9379fd85db7dc6501c31c053a3"}}, &(0x7f00000006c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000009c0)={0x44, &(0x7f0000000740)={0x0, 0x15, 0xb0, "586c541cfe4983f716cd1c8b2b9745a6eca653e18db8bc1b3d3ec54ba7c8076b57b6a817e91e2d23bcbfbd896674eec6089cad557c0170f6324b70cd9a39ac056b67e108f20a1120d7684d5165d9a196c4fecb0241a2aeb5343cdaee4639e0b76537e41546b998bea33932bedc3477f40ac1329662922f5bb9ee82bf178c2668bffd245763528a1a81f0f9887e218cc44a138e5337fc6841bfc4460c235bacf3eac46439d10a12b88e09908fb2324641"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000880)={0x20, 0x80, 0x1c, {0x5, 0x0, 0x7, 0x5, 0x8, 0x0, 0x6, 0xf9bb, 0x0, 0x6000, 0x1, 0x4}}, &(0x7f00000008c0)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000900)={0x20, 0x83, 0x2}, &(0x7f0000000940)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000980)={0x20, 0x89, 0x2}}) r1 = syz_open_dev$loop(&(0x7f0000000a40), 0x5, 0x40000) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000ac0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r3, 0x0, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000b00)=0xfffffffffffffffd) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000b40), &(0x7f0000000b80)=0xc) r5 = syz_usb_connect$uac1(0x4, 0x110, &(0x7f0000000bc0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfe, 0x3, 0x1, 0x44, 0xc0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}, [@feature_unit={0xd, 0x24, 0x6, 0x3, 0x5, 0x3, [0x5, 0x6, 0x1], 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x1ff, 0x4, 0xfa, 0x5, 0x6, 0x9}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x100, 0x3, 0x6, 0x7}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x204, 0x6, 0x5, 0x6, 0xc, 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x107, 0x3, 0x8, 0x522a, 0xa, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x8, 0x0, 0x0, "41be678206a2fbe046"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4, 0x3, 0xc9, {0x7, 0x25, 0x1, 0x1, 0x0, 0x200}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x3, 0xd1, 0x5, '-', "f71c10"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x6, 0x0, 0x81, "fe4972"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x8, 0x2, 0x5, 0x2, "ce8424c3621a57df9c"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x1849, 0x4, "3f7a8115f5ad"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x8, 0x7, 0x7f, "0ac16de6ea5f117960"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x6, 0x3, 0x1, 0xc9, "ca"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x4, 0xc, 0x0, {0x7, 0x25, 0x1, 0x2, 0x4, 0x9}}}}}}}]}}, &(0x7f00000011c0)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x300, 0x6, 0x5, 0x9, 0x20, 0xeb}, 0x23, &(0x7f0000000d40)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x4, 0xe, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "efef09f5f578373916454def93d74f89"}]}, 0x7, [{0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x3009}}, {0xf4, &(0x7f0000000e40)=@string={0xf4, 0x3, "f0b09d155fa61b522357b8dd215bddff3231e85e1028c02c097ba339d6f5c48589320087250f6924a1985e7c13c68829bee10d5b7b3959699b252b1e0e5efaca0e682d121d9a7ba04111e5200c8e47b2b411aa01fb0078e65268d9a97474ec413f53cd5e8a66c42656b921238291d2203e5eeee02d4fbb192fef6dce64b631d16f5adae14862f842bc4af68bdc8f18dfbe6d630b7779a4b40d71f9acbba24877f3683404ae4f7c59caeadf2c54f025c4b11a1e2ae7fbf1f4fb7e5fd43eb8c00a01b4e166a572d752a70a33d1b0c9fd5c1c66833e9bee35b3c2da80cdf5843c1e1ff183f54a18854187c1c21f0388169953ea"}}, {0xe3, &(0x7f0000000f40)=@string={0xe3, 0x3, "70116dc2190ef0a8cebd0ec24889761143f5368a66493310f570701b0bb4df1ec758e8f25963988b927db3446fc808478b985559912b3cd36ac9e86d54ca66127570adf58891c2c401f09b85c4c014d83f2b9a716f583684fdf2e61e077ef31b9280649904e44b9ee91973ce2256ff447377c12c7a8d27734e746ef24ca95887469cad460a2e025115f7e3a17845c0c9662132b778255890d78772ea8d0aaa5c487d6a7089710df185c5d2abe456be55fb0d92c9ef259f8261e9aa6572f5719439dc6b444aa28f42f3bbc6ea5b9f3cd488018394289c83077d5ebab40ca44b5b31"}}, {0xd8, &(0x7f0000001040)=@string={0xd8, 0x3, "1ec8124d138b3e4d5a034581b68d639fc04b9259d23e981cb74bc7ca445fec8812795e062858372e36d1ef8fd69e7d8fecac8301370d26d9ee13d80b405f17ba4d47681462f9d5085d31ad9868d80c357d745efcc20bd246c02671328dcf67a4801b46c85f421fa76a10b4020948fd7eae59ded7e3f2956f8bcbe72902bec70b6843d1c5eea3843467240f6db6d81d77263f289d1b4a5c2d327ec0707cf365665083ebf8d8a66f7a71b9c2ace7350bc21ef48a7ad4d8f1fdf37f1a3301465ed58783535be5ef9ffcaba426fc898f5090960054a43ad7"}}, {0x63, &(0x7f0000001140)=@string={0x63, 0x3, "373c4d756c7263998cc4a13c78c3fc5c36ba8f968c68cd3361623219b4cb89eff7eeb8f1f0638c53b4d9ecb895955407439eeeec839cc6ade0f10b81ef4ac5d3a8f98f2886105b6393094d3a739dca06c820952e3f18dc039e22b74377621632c3"}}]}) syz_usb_control_io(r5, &(0x7f0000001440)={0x2c, &(0x7f0000001240)={0x0, 0x6, 0x43, {0x43, 0x22, "a34b67615a4358d92b02b17c1bb38fc790d8abb2ba4f9286a80931e01c4a1cf23e1280c56fcb610b6e57289be6a53a1fe69c0fdd608d24103f7838423609ae3913"}}, &(0x7f00000012c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}, &(0x7f0000001300)={0x0, 0xf, 0xb8, {0x5, 0xf, 0xb8, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x8, 0x7, 0x4}, @generic={0xac, 0x10, 0x1, "59ddbe9c85e2f67b155a9cb112ccbe45cd73b6b60b0b81454203f71df0c637a660239335dc34e96e1709f9d3ac24cbaffd7af0fa99d7e800329489211b84a3d267d5a0bb6a1e495846d392fa8b535618216f6916bb1d2a3c4bd746a03fb04fc1095e75f4a9b832a6c3b76546081acfb58c5817abb0dec57db3b2ad680e5f3fa48bd979e1a71ff659e8a19f179eeabbc4671f7d9ad4d523ca48b7f893d7da938bb8c335b0b17c645850"}]}}, &(0x7f00000013c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x10, 0x6, 0x6, "58a2f012", "ff060f5a"}}, &(0x7f0000001400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x2, 0x8, 0x5, 0x3, 0x4, 0xfc00}}}, &(0x7f0000001940)={0x84, &(0x7f0000001480)={0x0, 0x0, 0xca, "6dae94b224a77a4aa7ad97282d7a06abe9ec4df700ed65499486387a565b6df663bad96dabc9287df9f6c104947f1ef9ddd16fe8c6385e420034ed7f7d9aba7405d205b974362b526c9448a362e0417d85d0c0a7a10efbdbdd308b087397bfaff4991d3137d1867aa586575f7f45f0990e78102bead3f14565add95059ef0cf4fe5c6d7d4164449e40561c2bf8cb7b453ca266ba2b75aac5441acf3a18414715098129739d6d280695d874b6588209ed88ae0f83dd4c4c9a1a7881773c5ffc5e926e70d93fb9dcabbfe2"}, &(0x7f0000001580)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000015c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001600)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000001640)={0x20, 0x0, 0x4, {0x400, 0x20}}, &(0x7f0000001680)={0x40, 0x7, 0x2, 0x5}, &(0x7f00000016c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000001700)={0x40, 0xb, 0x2, "9bcf"}, &(0x7f0000001740)={0x40, 0xf, 0x2, 0xe}, &(0x7f0000001780)={0x40, 0x13, 0x6, @random="227797993d09"}, &(0x7f00000017c0)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000001800)={0x40, 0x19, 0x2, 'Zg'}, &(0x7f0000001840)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001880)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000018c0)={0x40, 0x1e, 0x1}, &(0x7f0000001900)={0x40, 0x21, 0x1, 0xe4}}) r6 = open$dir(&(0x7f0000001a00)='./file0\x00', 0x80200, 0x108) mknodat$null(r6, &(0x7f0000001a40)='./file0\x00', 0x2, 0x103) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000001ac0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r7, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x2c, r8, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_IPPROTO={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x2400c080) mount$overlay(0x0, &(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00), 0x1000, &(0x7f0000001c40)={[{@xino_off}, {@metacopy_off}, {@default_permissions}, {@index_off}], [{@obj_type={'obj_type', 0x3d, 'fou\x00'}}]}) write$selinux_context(r2, &(0x7f0000001cc0)='system_u:object_r:audisp_remote_exec_t:s0\x00', 0x2a) pipe2(&(0x7f0000001d00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001e00)={'tunl0\x00', &(0x7f0000001d80)={'syztnl1\x00', 0x0, 0x8, 0x20, 0x80000001, 0x9, {{0x11, 0x4, 0x3, 0x29, 0x44, 0x64, 0x0, 0xc, 0x4, 0x0, @broadcast, @empty, {[@lsrr={0x83, 0xf, 0xff, [@local, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback]}, @timestamp_addr={0x44, 0xc, 0x6b, 0x1, 0x0, [{@broadcast, 0x8}]}, @generic={0x44, 0xb, "9f28f0e5bbbbc3f2aa"}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) sendmsg$nl_route_sched_retired(r9, &(0x7f0000002040)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001e40)=@delqdisc={0x1a8, 0x25, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x5, 0x10}, {0x0, 0x5}, {0xfffb, 0xe}}, [@q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x30}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xd19}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8000}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x39}]}}, @q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xd4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2d}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1000}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x10}]}}, @q_dsmark={{0xb}, {0x48, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x816c}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9080}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xd}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x91d}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x101}]}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x48000) syz_usb_control_io$uac1(r5, &(0x7f0000002140)={0x14, &(0x7f0000002080)={0x20, 0x6, 0x4a, {0x4a, 0xe, "5084da0aac721ed1a6b9dd8b3e3173a14623671c93fe596de5dfa6c5c1334859f929508cc9f7e5e0387293ae5208348f916e94431390a7ae9d4e0c57b66b0f3b941a43b0e06bc8d6"}}, &(0x7f0000002100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41d}}}, &(0x7f0000002440)={0x44, &(0x7f0000002180)={0x40, 0xf, 0xc6, "ee9f2f42261ee5d5661544e515735d8df809e062629f60c6b24e26aad2d5ac7b34eb000fdf66c798960e0f41374589efca03999be3dfdcb9002db09a878f6f67eef9b640b6f146ad9d28d92641d066be20d27227d3df191991efb21a5a0b487ab29bcd3f985694d71c2529c5a070e69e2a090c635ac1bd710dae132f5b95a7743127124343c98f92cfd32142f7b3b2b25a20f9b270d8a8cad197b9b8ea853038ed391ab459420f4303a0dda6f5257a5f5ba43052509015c590986d9cb2f518c90645dea5f73d"}, &(0x7f0000002280)={0x0, 0xa, 0x1, 0xf}, &(0x7f00000022c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000002300)={0x20, 0x81, 0x1, "18"}, &(0x7f0000002340)={0x20, 0x82, 0x2, "16e3"}, &(0x7f0000002380)={0x20, 0x83, 0x3, "34a23e"}, &(0x7f00000023c0)={0x20, 0x84, 0x1, "98"}, &(0x7f0000002400)={0x20, 0x85, 0x3, "77a542"}}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0x5, &(0x7f00000024c0)=0x1fe, 0x4) r11 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000002500)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x307, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0x4, [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x3, 0x1, 0x2, 0xff, {0x9, 0x21, 0x3, 0x9, 0x1, {0x22, 0xef2}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x80, 0xaa, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x6b7080745ab0c260, 0x4, 0x1, 0x3}}]}}}]}}]}}, &(0x7f0000002840)={0xa, &(0x7f0000002540)={0xa, 0x6, 0x0, 0x33, 0x2, 0x2, 0xff, 0x8}, 0x15, &(0x7f0000002580)={0x5, 0xf, 0x15, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x5, 0x6, 0x55}, @ptm_cap={0x3}]}, 0x7, [{0x38, &(0x7f00000025c0)=@string={0x38, 0x3, "0593bbc767742a9722e37c6ce8280c326ae9c313574671e202df8e340b07e3d6c926b36342538f7f3de53ec37f2b7e6734d4b1bc6550"}}, {0xbe, &(0x7f0000002600)=@string={0xbe, 0x3, "187e282357280dfbb752f6e6daaa8c5e7d6fb9b3408cc66cae3c5628831838e5c772f12741acbc17b4838aa9b67dcfffd300e64367320b1e01e7f552ea8440a456c3b561125fd92044ee1631b3d940fe35c905a78c7ca46da4f6516cc70ab53def4d43cd03ccf24ce52165854eaea091b40380b942ea2c9e83973e2c59bad497208284e0da60be159d6d983fc95fcf0a1d6c4aea2640b7229191fd0d01603f9e5811aa6221ebd56df9357ab686cb68e3f4cace9ced153176349918d0"}}, {0x4, &(0x7f00000026c0)=@lang_id={0x4, 0x3, 0x542b}}, {0x4, &(0x7f0000002700)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000002740)=@lang_id={0x4, 0x3, 0x80a}}, {0x41, &(0x7f0000002780)=@string={0x41, 0x3, "713ead6f20aa836e9ac3c022620da36b8e0f1a1564e85c36729b4d2be6011facdc0e04595a80b359f57926aabed290e2e17d3fd69c5782e1c0e04050833f07"}}, {0x4, &(0x7f0000002800)=@lang_id={0x4, 0x3, 0x1009}}]}) syz_usb_control_io$hid(r11, &(0x7f0000002a40)={0x24, &(0x7f00000028c0)={0x20, 0x31, 0xac, {0xac, 0x21, "ec3233cbaaaaeeaa5c6906b174296d442469733a84d52ec1ae44fee74bdf91eff3df682f3b0b859a5c7c707c7adcbc6a07a6477422cec6e18d8d630a0309623e112d958192a6d9dd62a038246aac492df52280d3459bca0bd6c1bbd26db69ced05e8ccb2370d3756c1f1c34ac92fc0accd796fef3def4b4c59a8e49d9397916f2c2f3f4ba9e18b868b6b375cef9fa76f56eacfd1dd1e9d51da91e187fd6eab2507eb4aaa40520b7f6e0e"}}, &(0x7f0000002980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}, &(0x7f00000029c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "c4a464dc"}]}}, &(0x7f0000002a00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7ab1, 0xb, 0x1, {0x22, 0x1b6}}}}, &(0x7f0000002cc0)={0x2c, &(0x7f0000002a80)={0x40, 0x0, 0x6b, "495f43c397ff7fdb94090ba508900a34463cd17026c20cadaf84df611fcc8586d894df4aad14dca1f61d7582428fef11c2ffb6b2d1802590b915b77cfdc4614eb1fe0400ac28e218afa4b12fce97e6db80ad642eddc36a7728ce71c296149304c4e3db82076e54f911465a"}, &(0x7f0000002b00)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000002b40)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000002b80)={0x20, 0x1, 0xcf, "a8f55500aac42153d42bde323ee1e0bdb963098771458d2375ed6f49b69a120838df6073850e77a5b94397d8c9fe158894e5035979e16c2e98ecae8e537db71c7e5524f61ef77b83d45ed7e03c0730641e3b9a05dfdc826a2cc533e6df2d23543b6c91e0a4b29dbfc75ad4434bd2f92f55a171dd090c9af5f876157f9b8e755194a9c5658aab750cd8ddf05e9c33e402cbfbdbc1d04edcbce13c138f23888dcdf907b01d3f9a2a408582e8c100344b5b1ea589e48d664946fbf6eded18a2ebbb0c815dde78018a5fede6b8d27d5d34"}, &(0x7f0000002c80)={0x20, 0x3, 0x1, 0x80}}) sendfile(r7, r4, &(0x7f0000002d00)=0x10000, 0x5) unlink(&(0x7f0000002d40)='./file0\x00') syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000002e40)={0x14, &(0x7f0000002d80)={0x20, 0x6, 0x4b, {0x4b, 0x4, "02ed8d763cc92c9c4a52fc66da74c92efb87cbc527178ce4f5496819cd829a73802425652c081892f62314860e63fed471ca112f8ba222c8c78219189ecbc01e9f69ada2f8d99d1bbb"}}, &(0x7f0000002e00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x420}}}, &(0x7f0000003180)={0x34, &(0x7f0000002e80)={0x0, 0x14, 0xdb, "13a2daae13a72eeb30708dc6e7109d0d485744d683fda0ead2eb65f13c191c4f597d532a752fcaef7dbae2717720e3ac1af91d0fedbb829eda56611f104b93b0e1f53b2aa28d03989ff8efbffb4e57e12a4c15f958a6a7f571021bcaea40a170900f98b35e6dba404c8f17a0583c370ed0033ab92054d610699d69632b4999bde59e03ee41576642a566abcf76e272abc14a50db3032d1d060977b8cd058960d2a4d1573b9b3ae4f154be6e49213fddcb8cffcaa29ae15708eeb6dddcc19e9e2425a222d5cd84a363d50e5fda78c5efb1e926575f58793795f3d4f"}, &(0x7f0000002f80)={0x0, 0xa, 0x1, 0x99}, &(0x7f0000002fc0)={0x0, 0x8, 0x1, 0x4d}, &(0x7f0000003000)={0x20, 0x0, 0xcc, {0xca, "2cde39f2a0ecfdd1a78f82b5920024429ae67bcf04a7e8add38ee9abb1cce46f9f6cd1b85b1e46eb702c00b80472c940897f7a77f0318512511ea2ee69ba15323814cadd51b101566bd220e2d91e0c7cffbf2f8525e242d39bafc22f92ceb1f0ef464da0bd95ffe5d9d592ce4e9030d858637b1f458c0fd742366ac297c58f4fca4ce59ce876a4bc09ed254e5b127c1a0c85ea8de476ccb0785e9e37977114498934e8252385d603589b8d008450595b6fd9f4084547c91e4b74bc1ca3fce9aed19897893bfb2b8b310b"}}, &(0x7f0000003100)={0x20, 0x1, 0x1, 0xa}, &(0x7f0000003140)={0x20, 0x0, 0x1, 0x9}}) executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0xff7ffff7) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') r4 = socket$unix(0x1, 0x1, 0x0) sendfile(r4, r3, &(0x7f0000000000)=0x11, 0x7) openat(r3, &(0x7f0000000200)='./file0\x00', 0x40000, 0x281) r5 = eventfd(0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xc8, 0x0, 0xc000000) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x30, r10, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r11}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}]}, 0x30}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) r12 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r12, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r13 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000240)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r1, 0x5bfe5000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000fc160a29aa3d2076d8c7bcfbc60a58f8d945e8678e3a25df16722f9e02d9e013abc196df72e6be93e8603fcf7647e29833ed04fae59add4b715eb765ed7a60d60543ff67888ff430e908594b8b03dbffd1708b61178a622ca91a05feabc0efb7d7d21a41239d079e7dde944046e62a66b0101a743687fe3d3e00b712e170a0e3777621b9ad8cf10336bdc70f19177b3d06e32e5d6ef2fa7ab4010af9ac7b82aecddd212d4132da395a87280f86d763ea", @ANYRES16=r16, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r14, @ANYBLOB], 0x20}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6c}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x124c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x137a}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x631}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x131c}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x5) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000280)={r2, 0x1fe, 0x2, r5}) executing program 5: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x709000, 0x0) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x202080, 0x89) linkat(r2, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00', 0xc00) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000140)={'TPROXY\x00'}, &(0x7f0000000180)=0x1e) (async) r4 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000840)={0x0, &(0x7f00000001c0)=[@cpuid={0x2, 0x18, {0x4, 0xf8e}}, @uexit={0x0, 0x18, 0x400}, @code={0x1, 0x5b, {"0f91af9d8a80470f20e035800000000f22e0260f7951fe262e0fc71e0f20d835080000000f22d866baf80cb8329b818fef66bafc0c66edf226260f09c40149753ac461795acef3430f32"}}, @uexit={0x0, 0x18, 0xa1}, @uexit={0x0, 0x18, 0x8000000000000001}, @uexit={0x0, 0x18, 0x3}, @cpuid={0x2, 0x18, {0xb20b, 0x52f}}, @cpuid={0x2, 0x18, {0x869, 0xb56}}, @code={0x1, 0x6e, {"c4e14dee1ab9b70b00000f32c74424002b010000c744240213970000ff2c24b98d0800000f328f0950012867650f381d1766f2f267e2bd66450fc77327c7442400d1be0000c744240200100000c7442406000000000f011c24440f0002"}}, @cpuid={0x2, 0x18, {0x3}}, @cpuid={0x2, 0x18, {0xe81a, 0x8}}, @code={0x1, 0x60, {"66baf80cb8b2405b81ef66bafc0c66ed450f220366ba2000edc4034542fe000f214166470f00d936f2420f1ed1660fd07e1066ba6100b800100000efc74424001d010000c7442402f9310000ff2c24"}}, @uexit={0x0, 0x18, 0xd6dc}, @code={0x1, 0x5e, {"66baa000b80d000000ef0fc71b0f01cfb9b7090000b80d000000ba000000000f30c402b12949f766400f383805008000006466460f6d2ce8b805000000b924b900000f01c1410fe311430f01c8"}}, @uexit={0x0, 0x18, 0x8}, @code={0x1, 0x58, {"2e410d3771f8e266ba420066b8080066ef8fe8188e7a0f00c48131657900c482293df06544f4c42179de2e400f30b9800000c00f3235004000000f300f20d835200000000f22d8"}}, @uexit={0x0, 0x18}, @cpuid={0x2, 0x18, {0x5, 0xd}}, @code={0x1, 0x76, {"b9800000c00f3235008000000f3066baf80cb8d464938def66bafc0cb800700000ef4a0fc71e430f01c8f20f2b6e0d450f07b9ad020000b847c20000ba000000000f3048b866000000000000000f23c00f21f835030009000f23f80f01c88f09909564215d"}}, @code={0x1, 0x80, {"48b800900000000000000f23c00f21f83502000d000f23f866b8c8008ed8260f09c744240000c0ffffc744240200600000c7442406000000000f011424660f3a0f469b1248b87b780000000000000f23d80f21f835400000000f23f864470fd4dc66b8ad008ec066bad004ec0f2107"}}, @code={0x1, 0x58, {"b9c10b0000b89e1f0000ba000000000f300f7948d766ba4100edb945080000b8d6000000ba000000000f3046040366b806018ee80f52b6006000000f01c366ba4300ed360f01ca"}}, @uexit={0x0, 0x18, 0x7}, @code={0x1, 0x61, {"430f2385c4027d1300c4e3d57ce30066440f38808868360000c4821902a50058000066410f15680f66ba430066ed66b846000f00d80f01c348b801000000000000000f23c80f21f835080010000f23f8"}}, @code={0x1, 0x44, {"b8010000000f01d966baa10066ed8f2868ec77160a440f01d1c4c25d45a00e000000f30f1efb660fe0f9f30fc7360f1f00d9e0"}}, @code={0x1, 0x8d, {"66b898008ee8b805000000b96a7600000f01c1c7442400c2410000c7442402a8000000c7442406000000000f011c2466ba4100ed640f0766420fc5c3d766baf80cb88f8df58fef66bafc0cecb926030000b8fcffffffbaffffffff0f300f20e4c7442400e4480000c74424020a000000c7442406000000000f011424"}}, @cpuid={0x2, 0x18, {0x8, 0x1}}, @code={0x1, 0x48, {"64470f30450f01ca400f32c4a27d784e92f30fb88807000000440f20c03507000000440f22c066bad004ecc441fa1666d166f20f350f32"}}, @code={0x1, 0x69, {"c744240021000000c744240200800000ff1c24b9e60900000f3266baf80cb83c6fb18fef66bafc0cb800080000ef660f388133470f0131440f07b9800000c00f3235002000000f3066420fc733c4e27d254e0026663e0f32"}}], 0x678}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000880)={'vcan0\x00'}) recvmmsg(r1, &(0x7f0000005a40)=[{{&(0x7f00000008c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000940)=""/192, 0xc0}], 0x1, &(0x7f0000000a40)=""/145, 0x91}, 0x6}, {{&(0x7f0000000b00)=@caif, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000b80)=""/113, 0x71}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/101, 0x65}, {0x0}], 0x4, &(0x7f0000001cc0)=""/212, 0xd4}, 0x87}, {{&(0x7f0000001dc0)=@un=@abs, 0x80, &(0x7f0000002080)=[{&(0x7f0000001e40)=""/3, 0x3}, {&(0x7f0000001e80)=""/172, 0xac}, {&(0x7f0000001f40)=""/2, 0x2}, {&(0x7f0000001f80)=""/5, 0x5}, {&(0x7f0000001fc0)=""/130, 0x82}], 0x5}, 0x3ff}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/93, 0x5d}, {&(0x7f0000003180)=""/36, 0x24}, {&(0x7f00000031c0)=""/84, 0x54}, {&(0x7f0000003240)=""/172, 0xac}], 0x5, &(0x7f0000003380)=""/148, 0x94}}, {{&(0x7f0000003440)=@generic, 0x80, &(0x7f0000003640)=[{&(0x7f00000034c0)=""/70, 0x46}, {&(0x7f0000003540)=""/84, 0x54}, {&(0x7f00000035c0)=""/114, 0x72}], 0x3, &(0x7f0000003680)=""/70, 0x46}, 0x7}, {{&(0x7f0000003700)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003780)=""/243, 0xf3}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)}, {&(0x7f00000048c0)=""/6, 0x6}, {&(0x7f0000004900)=""/104, 0x68}, {&(0x7f0000004980)=""/47, 0x2f}], 0x6, &(0x7f0000004a40)=""/4096, 0x1000}, 0x9}], 0x6, 0x10040, &(0x7f0000005bc0)={0x0, 0x989680}) (async, rerun: 64) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (rerun: 64) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000005c00)={0x0, 0x9, 0x0, [0x1, 0xb7, 0x7fffffff, 0xaeef, 0x6], [0x8, 0x5, 0x9a4d, 0x7fff, 0x5, 0x4, 0x0, 0x9, 0x5314, 0x3, 0x7fffffff, 0x9, 0x2, 0x7ff, 0x2, 0x9, 0xe464, 0xb5, 0xb, 0xd, 0x8, 0x69d, 0x5c, 0x3, 0x9, 0x80000001, 0xfffffffffffffffc, 0xfffffffffffffff7, 0x3, 0x4, 0x9, 0x9, 0x3, 0xd, 0x9, 0x7fff, 0xfffffffffffffffa, 0x1, 0x800, 0x7ff, 0x9, 0x100000001, 0xfffffffffffffffa, 0x4, 0x9, 0x7f, 0x100000001, 0xffffffffffffffc0, 0x39, 0x1, 0x2, 0x2, 0x7, 0xfffffffffffffff4, 0x9, 0x8, 0x8000000000000001, 0xd, 0x8, 0x8, 0x2, 0x5, 0x55, 0xfffffffffffffff7, 0x1, 0x2, 0xd1, 0xe, 0xfff, 0x2, 0xffffffffffffffff, 0x1, 0xffff, 0x1, 0x8, 0x62, 0xfffffffffffffffe, 0xf000000000000000, 0x9, 0x7, 0x9, 0x7, 0x81, 0xffffffffffffffb7, 0x8, 0x5, 0x2, 0x9, 0x2, 0x99, 0xd, 0x7, 0x5a3b, 0x8, 0x50000, 0x0, 0x9, 0x7fffffff, 0x5, 0x6, 0x4, 0xe, 0xffff, 0x10000, 0xe, 0x9, 0xfffffffffffffff9, 0x2, 0x5, 0xfc1, 0xfff, 0x10, 0x7fb0, 0x9, 0x1, 0x5, 0x3, 0xfffffffffffffffa, 0x0, 0x8253, 0x4]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000006040)={r8, 0xffff, 0x1, [0x7fffffffffffffff, 0x2, 0x1, 0xf61, 0xfffffffffffffff8], [0x6, 0x400, 0x8, 0xd800000000000000, 0x7fffffff, 0x4, 0x4, 0x1, 0x2, 0x9, 0x80000001, 0x1ff, 0x3, 0x800, 0x5, 0xff, 0x3f4a, 0xa, 0x5, 0x9cbf, 0x1, 0xfffffffffffffffe, 0x7, 0x2, 0x2, 0x2, 0xffffffffffffff01, 0x1, 0x3, 0xb4c0000000000, 0x5, 0x6, 0x3, 0x4, 0x7, 0x3, 0x9, 0x10, 0x0, 0xb, 0x80, 0x73, 0x5, 0x5, 0x8, 0x1c000, 0x7, 0x525, 0x0, 0xf, 0x8000, 0x4894e478, 0x9, 0x9, 0xe066, 0x5, 0x6, 0x2, 0x5, 0x3, 0x1, 0xfffffffffffffffc, 0x0, 0x3, 0x2, 0x2, 0x7, 0xfff, 0x6, 0x1, 0x5, 0x5, 0xfffffffffffffff9, 0xfc80, 0x4, 0x7, 0xffff, 0x3e, 0xca3, 0x9, 0x2, 0x80000001, 0x81, 0x3, 0x3, 0x8000000000000000, 0x0, 0x40, 0x3, 0x8000, 0x100000001, 0x2, 0x7, 0x81, 0x1ff, 0x9, 0x18, 0x0, 0x7, 0x101, 0xa0, 0x6, 0xe, 0x1, 0x7, 0x0, 0x101, 0x200, 0x5, 0xf61, 0x4e41, 0x1, 0x100000000, 0x5, 0x2, 0xe, 0x3, 0x4, 0x2, 0x5, 0x9]}) (async) r9 = eventfd(0x81) (async, rerun: 64) r10 = syz_open_procfs(0x0, &(0x7f0000006480)='clear_refs\x00') (rerun: 64) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f00000064c0)={r9, 0x9, 0x0, r10}) r11 = getuid() (async) fstat(r7, &(0x7f0000006540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000006500)='./file0\x00', r11, r13) (async) r14 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000065c0), 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r14, 0x65, 0x2, &(0x7f0000006600)=0x80000000, 0x4) (async) getsockopt$IPT_SO_GET_REVISION_MATCH(r14, 0x0, 0x42, &(0x7f0000006640)={'HL\x00'}, &(0x7f0000006680)=0x1e) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r10, 0x54a2) pipe(&(0x7f00000066c0)) (async) getsockopt$inet_IP_XFRM_POLICY(r14, 0x0, 0x11, &(0x7f0000006780)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@private1}}, &(0x7f0000006880)=0xe8) setxattr$system_posix_acl(&(0x7f0000006700)='./file0\x00', &(0x7f0000006740)='system.posix_acl_access\x00', &(0x7f00000068c0)={{}, {0x1, 0x6}, [{0x2, 0x1, r12}, {0x2, 0x2, r11}, {0x2, 0x0, r12}, {0x2, 0x3, r15}], {0x4, 0x6}, [{0x8, 0x6, r13}, {0x8, 0x2, r13}, {0x8, 0x0, r13}, {0x8, 0x3, r13}], {0x10, 0x5}, {0x20, 0x5}}, 0x64, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000006940)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000006980)=0x2c) executing program 1: openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4142, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0, 0x80a0000}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000002c0)={0x2, 0x0, [{0x80a0000, 0x42, &(0x7f0000000100)=""/66}, {0xeeee8000, 0x54, &(0x7f0000000180)=""/84}]}) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000240)=ANY=[], 0xd0060) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x13000000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r2, &(0x7f00000000c0)="8f2a0a65", 0x4) executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x1d, r3}, 0x10, &(0x7f0000000100)={&(0x7f0000000180)={0x7, 0x0, 0x4, {}, {0x0, 0xea60}, {0x3, 0x0, 0x1}, 0x1, @can={{0x4, 0x0, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "6d56f1e83311e5a3"}}, 0x48}, 0x1, 0x0, 0x0, 0x20004011}, 0xc) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) executing program 1: openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x12, 0x0, 0x0) mmap(&(0x7f0000ad9000/0x3000)=nil, 0x3000, 0x100000d, 0x110, r0, 0x45809000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xff}}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private1, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0xa0}}, 0x0) socket$inet(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414"], 0x84}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESHEX, @ANYRES8], 0x2c}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x4, 0x7, 0xf8, 0x3, 0x6, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0xf81e, 0x7, 0x9}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc141200004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r7}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000840)={0x3f4, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1b4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1b0, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdde}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\#^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '}!{+$:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\\\'&-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x76}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+@*@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x40, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x2e, 0x4, "0efb8377eaacd4be5c0ed2072361f9d11b9476a5b281905f5b6a46417ebf494ba7668363d6a8ffa106be"}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x170, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ':.\'-#%+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x101, 0x5, "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"}, @ETHTOOL_A_BITSET_VALUE={0xd, 0x4, "2119ed1555f5f8c7c6"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x4000840}, 0x40010) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getpid() sendmsg$netlink(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1000000021ef01"], 0x10}], 0x1, 0x0, 0x0, 0x4}, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xffffe000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x20000000, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x80000000000000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x1e0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) personality(0x619641b6fb4b8591) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) uname(&(0x7f0000000240)=""/201) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x1000810, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c7766646e6f5876c1aff704001afc61b5926c2669010b4e7e0e4c678991c5f2e1496448212e8ed80faf91b05d38b785d17f000000005ddbbcbd85a859795202471875d87c7579c06fdadadbad6dda2a97761cdc0838cd4202fd242d3ab12954ad1ba3cb27a7db04de41428e868c2eb96b4a402c19b9aa9a7cabc0046ddd", @ANYRESHEX=r1, @ANYBLOB=',msize=0x0000000026da2d2a,\x00']) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000600)={@flat=@weak_binder={0x77622a85, 0x100a}, @fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0x100, 0x3}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r7 = signalfd4(r1, &(0x7f0000000580)={[0xc01a]}, 0x8, 0x80800) setsockopt$inet6_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f00000005c0)=@gcm_128={{0x304}, "53b0dff0c8b491d0", "2cd52c12ba75d255b87383c730578d43", "5e3983e0", "f77489334fd920dd"}, 0x28) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x49, &(0x7f0000001600)=0xffffffff, 0x4) sendmsg$inet(r8, &(0x7f00000004c0)={&(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000400)="d2b08b4f559e9815f1f9b326b4768bf97d059aaf14f2563d12fc9c0972b2c0aae38651d56fcb2bd047bce2d98f54ae1573361079bd301f347f09e45fecaf9470b3c258d03e416dc72b0a3e3633f0742f0f4e928cb3f344763826ca6b12a16bb96ec39d8a2972763dc5a38646481da08d5640c8d2920bfd2151631760532b98e054e6417539ac9999892c277f96373767540eeb0c7bd49f272448435fa1f6bec9", 0xa0}], 0x1, &(0x7f0000000380)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xdf}}], 0x18}, 0x4004884) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000540)={0xfffffffa, 0x200, 0x1}, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x284}, 0x1, 0x0, 0x0, 0x4000004}, 0x44000) executing program 5: ioprio_set$pid(0x2, 0x0, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000c00)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x1, 0x0, 0x2}, {0x0, 0x1fffffffe, 0x40000000007, 0x5, 0x40000000000004, 0x800000000002, 0x200000003, 0x400}, {0x40000000000005, 0x0, 0x0, 0x5}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x6c}, 0x2, @in6=@local, 0x0, 0x1, 0x8, 0x0, 0x9075, 0x0, 0x9945}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r1, r1, 0x0, 0x2) executing program 35: openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="38010000fe0000", @ANYBLOB="7fdc98af24c46052db76afb5b62e1eef0738e7b7b0652ed6"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x2, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2501000000000000000741"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) executing program 5: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x41000, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000000)={0x9, {0x0, 0x6, 0x1, 0x800, 0x9}}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/prev\x00') r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000) executing program 36: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000240)='\x00', &(0x7f0000000280)='./file0\x00', r1) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='rdma.current\x00', 0x0, 0x0) r3 = signalfd(r0, &(0x7f00000001c0)={[0x3f2]}, 0x8) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0xc) move_mount(r1, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x122) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@remote, 0xb, 0x8, 0xfffc, 0x10, 0xa, 0x60, 0x80, 0x1}, {0x5, 0x9, 0xfffffffffffffffe, 0x100000000, 0xa89b, 0x0, 0x80000000000000, 0xfffffffffffffffe}, {0x400, 0x3, 0x0, 0x800}, 0x80000007, 0x0, 0x1, 0x0, 0x2}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0x2b}, 0x2, @in=@empty, 0xffefffff, 0x1, 0x3, 0xfd, 0xfffffffe, 0x0, 0xfffffffe}}, 0xe8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000010000"]) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000"]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000007dc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008001}}], 0x1, 0x4000) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$ashmem(0xffffffffffffff9c, 0x0, 0x40, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETDEVNETNS(r11, 0x54e3, 0x0) r12 = accept4(r2, &(0x7f0000000240)=@phonet, &(0x7f00000002c0)=0x80, 0x1800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r12, 0x0) executing program 37: openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x12, 0x0, 0x0) mmap(&(0x7f0000ad9000/0x3000)=nil, 0x3000, 0x100000d, 0x110, r0, 0x45809000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xff}}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private1, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0xa0}}, 0x0) socket$inet(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414"], 0x84}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESHEX, @ANYRES8], 0x2c}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x4, 0x7, 0xf8, 0x3, 0x6, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0xf81e, 0x7, 0x9}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc141200004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r7}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000840)={0x3f4, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1b4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1b0, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdde}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\#^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '}!{+$:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\\\'&-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x76}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+@*@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x40, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x2e, 0x4, "0efb8377eaacd4be5c0ed2072361f9d11b9476a5b281905f5b6a46417ebf494ba7668363d6a8ffa106be"}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x170, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ':.\'-#%+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x101, 0x5, "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"}, @ETHTOOL_A_BITSET_VALUE={0xd, 0x4, "2119ed1555f5f8c7c6"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x4000840}, 0x40010) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) executing program 38: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x41000, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000000)={0x9, {0x0, 0x6, 0x1, 0x800, 0x9}}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/prev\x00') r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000) program crashed: WARNING in kvm_put_kvm bisect: the chunk can be dropped bisect: testing without sub-chunk 3/3 bisect: split chunks (needed=true): <15> bisect: split chunk #0 of len 15 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 7, 19, 7, 30, 30, 7] detailed listing: executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x20000000, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x80000000000000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x1e0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) personality(0x619641b6fb4b8591) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) uname(&(0x7f0000000240)=""/201) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x1000810, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c7766646e6f5876c1aff704001afc61b5926c2669010b4e7e0e4c678991c5f2e1496448212e8ed80faf91b05d38b785d17f000000005ddbbcbd85a859795202471875d87c7579c06fdadadbad6dda2a97761cdc0838cd4202fd242d3ab12954ad1ba3cb27a7db04de41428e868c2eb96b4a402c19b9aa9a7cabc0046ddd", @ANYRESHEX=r1, @ANYBLOB=',msize=0x0000000026da2d2a,\x00']) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000600)={@flat=@weak_binder={0x77622a85, 0x100a}, @fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0x100, 0x3}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r7 = signalfd4(r1, &(0x7f0000000580)={[0xc01a]}, 0x8, 0x80800) setsockopt$inet6_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f00000005c0)=@gcm_128={{0x304}, "53b0dff0c8b491d0", "2cd52c12ba75d255b87383c730578d43", "5e3983e0", "f77489334fd920dd"}, 0x28) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x49, &(0x7f0000001600)=0xffffffff, 0x4) sendmsg$inet(r8, &(0x7f00000004c0)={&(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000400)="d2b08b4f559e9815f1f9b326b4768bf97d059aaf14f2563d12fc9c0972b2c0aae38651d56fcb2bd047bce2d98f54ae1573361079bd301f347f09e45fecaf9470b3c258d03e416dc72b0a3e3633f0742f0f4e928cb3f344763826ca6b12a16bb96ec39d8a2972763dc5a38646481da08d5640c8d2920bfd2151631760532b98e054e6417539ac9999892c277f96373767540eeb0c7bd49f272448435fa1f6bec9", 0xa0}], 0x1, &(0x7f0000000380)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xdf}}], 0x18}, 0x4004884) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000540)={0xfffffffa, 0x200, 0x1}, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x284}, 0x1, 0x0, 0x0, 0x4000004}, 0x44000) executing program 5: ioprio_set$pid(0x2, 0x0, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000c00)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x1, 0x0, 0x2}, {0x0, 0x1fffffffe, 0x40000000007, 0x5, 0x40000000000004, 0x800000000002, 0x200000003, 0x400}, {0x40000000000005, 0x0, 0x0, 0x5}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x6c}, 0x2, @in6=@local, 0x0, 0x1, 0x8, 0x0, 0x9075, 0x0, 0x9945}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r1, r1, 0x0, 0x2) executing program 35: openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="38010000fe0000", @ANYBLOB="7fdc98af24c46052db76afb5b62e1eef0738e7b7b0652ed6"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x2, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2501000000000000000741"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) executing program 5: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x41000, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000000)={0x9, {0x0, 0x6, 0x1, 0x800, 0x9}}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/prev\x00') r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000) executing program 36: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000240)='\x00', &(0x7f0000000280)='./file0\x00', r1) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='rdma.current\x00', 0x0, 0x0) r3 = signalfd(r0, &(0x7f00000001c0)={[0x3f2]}, 0x8) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0xc) move_mount(r1, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x122) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@remote, 0xb, 0x8, 0xfffc, 0x10, 0xa, 0x60, 0x80, 0x1}, {0x5, 0x9, 0xfffffffffffffffe, 0x100000000, 0xa89b, 0x0, 0x80000000000000, 0xfffffffffffffffe}, {0x400, 0x3, 0x0, 0x800}, 0x80000007, 0x0, 0x1, 0x0, 0x2}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0x2b}, 0x2, @in=@empty, 0xffefffff, 0x1, 0x3, 0xfd, 0xfffffffe, 0x0, 0xfffffffe}}, 0xe8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000010000"]) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000"]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000007dc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008001}}], 0x1, 0x4000) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$ashmem(0xffffffffffffff9c, 0x0, 0x40, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETDEVNETNS(r11, 0x54e3, 0x0) r12 = accept4(r2, &(0x7f0000000240)=@phonet, &(0x7f00000002c0)=0x80, 0x1800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r12, 0x0) executing program 37: openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x12, 0x0, 0x0) mmap(&(0x7f0000ad9000/0x3000)=nil, 0x3000, 0x100000d, 0x110, r0, 0x45809000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xff}}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private1, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0xa0}}, 0x0) socket$inet(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414"], 0x84}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESHEX, @ANYRES8], 0x2c}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x4, 0x7, 0xf8, 0x3, 0x6, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0xf81e, 0x7, 0x9}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc141200004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r7}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000840)={0x3f4, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1b4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1b0, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdde}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\#^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '}!{+$:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\\\'&-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x76}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+@*@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x40, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x2e, 0x4, "0efb8377eaacd4be5c0ed2072361f9d11b9476a5b281905f5b6a46417ebf494ba7668363d6a8ffa106be"}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x170, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ':.\'-#%+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x101, 0x5, "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"}, @ETHTOOL_A_BITSET_VALUE={0xd, 0x4, "2119ed1555f5f8c7c6"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x4000840}, 0x40010) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) executing program 38: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x41000, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000000)={0x9, {0x0, 0x6, 0x1, 0x800, 0x9}}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/prev\x00') r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m2s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 30, 30, 30, 12, 10, 30, 10] detailed listing: executing program 1: timer_create(0x3, &(0x7f0000000140)={0x0, 0x1, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) timer_settime(r0, 0x1, &(0x7f0000000380)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r0, &(0x7f0000000000)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x2, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) executing program 1: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x23, 0x1b, {0x1b, 0x4, "db9d28e00f494ce45f09509ce4e55eecdfc286b1c950cc9ea7"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x44, &(0x7f00000000c0)={0x40, 0x31, 0x1, "9b"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000140)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000180)={0x20, 0x80, 0x1c, {0x4, 0x3ff, 0x8, 0x1, 0x1, 0x9, 0x6, 0x6, 0x4, 0x2, 0x1, 0x7d}}, &(0x7f00000001c0)={0x20, 0x85, 0x4}, &(0x7f0000000200)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000240)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000280)={0x20, 0x89, 0x2, 0x1}}) r0 = syz_usb_connect$cdc_ncm(0x0, 0xa2, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x2, 0x1, 0x3c, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '-'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xffff, 0x2e3, 0x1000, 0x7}, {0x6, 0x24, 0x1a, 0x3, 0x2}, [@country_functional={0xe, 0x24, 0x7, 0x2, 0x5, [0xfa1, 0x2, 0xb, 0x9]}, @acm={0x4}, @dmm={0x7, 0x24, 0x14, 0x62, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x80, 0xc3, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x0, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2, 0x9, 0x4}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x310, 0x4, 0x0, 0x1, 0x20, 0x6}, 0x6a, &(0x7f0000000440)={0x5, 0xf, 0x6a, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0x4e, 0x10, 0x2, "2614d294d6aaf3adfd71a7886843aa4f8b817093e0ca3a130005aff8aa76bffc9ca68db47ce45b3d278754c74e88a8055f155cd367db4032b80cf0ccb122c64c69081eb0edeead15461889"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0x4, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0xbd, 0xd, 0x8}]}, 0x2, [{0x7a, &(0x7f00000004c0)=@string={0x7a, 0x3, "acbb50f5eecc6eda17e093e8aa1992c3bb64e136653be267a6cd622349f0948f31a0879edc864cd1b31cef0af64a8c4fc9b661b8808d3bec38224c63ce86282ebc889c0ecad4fb7cdd5697430e4f7512cbd284b9ab35a57d23a03614de33ef30dfe9972ae6232da51edb0c9df2b98e74159b21e9f98bf1e0"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x3409}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000700)={0x14, &(0x7f00000005c0)={0x0, 0x5, 0xef, {0xef, 0x31, "404bd274b0d7c91dff24b631c75a7bbb48a34240aa62be4eb4f8207d876440fb3a65a207391b7324da7195bcee5af59869976f24a302d9573002e33490ef409dffbd89c51af1a9925203e85389d81e3144f754b089b87d1e1a21a2e6f163a9863f8f08cbbb73ae8408b8d20f76421d3a0125b2ddce192b473ff5c571631767161822b40e5367846dd94162654efcbbf07727ae693c10aa23db429a49f874dc9d20d948eeccd3d0d9fe53a4b3addde2b4c4eeae280f97b2c93ff124e4707d650a036f682a841c9b9a3f2be0a2c5f60f84282bb16b21f4f1ab684abf19dda5a62f9379fd85db7dc6501c31c053a3"}}, &(0x7f00000006c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000009c0)={0x44, &(0x7f0000000740)={0x0, 0x15, 0xb0, "586c541cfe4983f716cd1c8b2b9745a6eca653e18db8bc1b3d3ec54ba7c8076b57b6a817e91e2d23bcbfbd896674eec6089cad557c0170f6324b70cd9a39ac056b67e108f20a1120d7684d5165d9a196c4fecb0241a2aeb5343cdaee4639e0b76537e41546b998bea33932bedc3477f40ac1329662922f5bb9ee82bf178c2668bffd245763528a1a81f0f9887e218cc44a138e5337fc6841bfc4460c235bacf3eac46439d10a12b88e09908fb2324641"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000880)={0x20, 0x80, 0x1c, {0x5, 0x0, 0x7, 0x5, 0x8, 0x0, 0x6, 0xf9bb, 0x0, 0x6000, 0x1, 0x4}}, &(0x7f00000008c0)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000900)={0x20, 0x83, 0x2}, &(0x7f0000000940)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000980)={0x20, 0x89, 0x2}}) r1 = syz_open_dev$loop(&(0x7f0000000a40), 0x5, 0x40000) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000ac0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r3, 0x0, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000b00)=0xfffffffffffffffd) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000b40), &(0x7f0000000b80)=0xc) r5 = syz_usb_connect$uac1(0x4, 0x110, &(0x7f0000000bc0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfe, 0x3, 0x1, 0x44, 0xc0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}, [@feature_unit={0xd, 0x24, 0x6, 0x3, 0x5, 0x3, [0x5, 0x6, 0x1], 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x1ff, 0x4, 0xfa, 0x5, 0x6, 0x9}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x100, 0x3, 0x6, 0x7}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x204, 0x6, 0x5, 0x6, 0xc, 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x107, 0x3, 0x8, 0x522a, 0xa, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x8, 0x0, 0x0, "41be678206a2fbe046"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4, 0x3, 0xc9, {0x7, 0x25, 0x1, 0x1, 0x0, 0x200}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x3, 0xd1, 0x5, '-', "f71c10"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x6, 0x0, 0x81, "fe4972"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x8, 0x2, 0x5, 0x2, "ce8424c3621a57df9c"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x1849, 0x4, "3f7a8115f5ad"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x8, 0x7, 0x7f, "0ac16de6ea5f117960"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x6, 0x3, 0x1, 0xc9, "ca"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x4, 0xc, 0x0, {0x7, 0x25, 0x1, 0x2, 0x4, 0x9}}}}}}}]}}, &(0x7f00000011c0)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x300, 0x6, 0x5, 0x9, 0x20, 0xeb}, 0x23, &(0x7f0000000d40)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x4, 0xe, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "efef09f5f578373916454def93d74f89"}]}, 0x7, [{0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x3009}}, {0xf4, &(0x7f0000000e40)=@string={0xf4, 0x3, "f0b09d155fa61b522357b8dd215bddff3231e85e1028c02c097ba339d6f5c48589320087250f6924a1985e7c13c68829bee10d5b7b3959699b252b1e0e5efaca0e682d121d9a7ba04111e5200c8e47b2b411aa01fb0078e65268d9a97474ec413f53cd5e8a66c42656b921238291d2203e5eeee02d4fbb192fef6dce64b631d16f5adae14862f842bc4af68bdc8f18dfbe6d630b7779a4b40d71f9acbba24877f3683404ae4f7c59caeadf2c54f025c4b11a1e2ae7fbf1f4fb7e5fd43eb8c00a01b4e166a572d752a70a33d1b0c9fd5c1c66833e9bee35b3c2da80cdf5843c1e1ff183f54a18854187c1c21f0388169953ea"}}, {0xe3, &(0x7f0000000f40)=@string={0xe3, 0x3, "70116dc2190ef0a8cebd0ec24889761143f5368a66493310f570701b0bb4df1ec758e8f25963988b927db3446fc808478b985559912b3cd36ac9e86d54ca66127570adf58891c2c401f09b85c4c014d83f2b9a716f583684fdf2e61e077ef31b9280649904e44b9ee91973ce2256ff447377c12c7a8d27734e746ef24ca95887469cad460a2e025115f7e3a17845c0c9662132b778255890d78772ea8d0aaa5c487d6a7089710df185c5d2abe456be55fb0d92c9ef259f8261e9aa6572f5719439dc6b444aa28f42f3bbc6ea5b9f3cd488018394289c83077d5ebab40ca44b5b31"}}, {0xd8, &(0x7f0000001040)=@string={0xd8, 0x3, "1ec8124d138b3e4d5a034581b68d639fc04b9259d23e981cb74bc7ca445fec8812795e062858372e36d1ef8fd69e7d8fecac8301370d26d9ee13d80b405f17ba4d47681462f9d5085d31ad9868d80c357d745efcc20bd246c02671328dcf67a4801b46c85f421fa76a10b4020948fd7eae59ded7e3f2956f8bcbe72902bec70b6843d1c5eea3843467240f6db6d81d77263f289d1b4a5c2d327ec0707cf365665083ebf8d8a66f7a71b9c2ace7350bc21ef48a7ad4d8f1fdf37f1a3301465ed58783535be5ef9ffcaba426fc898f5090960054a43ad7"}}, {0x63, &(0x7f0000001140)=@string={0x63, 0x3, "373c4d756c7263998cc4a13c78c3fc5c36ba8f968c68cd3361623219b4cb89eff7eeb8f1f0638c53b4d9ecb895955407439eeeec839cc6ade0f10b81ef4ac5d3a8f98f2886105b6393094d3a739dca06c820952e3f18dc039e22b74377621632c3"}}]}) syz_usb_control_io(r5, &(0x7f0000001440)={0x2c, &(0x7f0000001240)={0x0, 0x6, 0x43, {0x43, 0x22, "a34b67615a4358d92b02b17c1bb38fc790d8abb2ba4f9286a80931e01c4a1cf23e1280c56fcb610b6e57289be6a53a1fe69c0fdd608d24103f7838423609ae3913"}}, &(0x7f00000012c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}, &(0x7f0000001300)={0x0, 0xf, 0xb8, {0x5, 0xf, 0xb8, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x8, 0x7, 0x4}, @generic={0xac, 0x10, 0x1, "59ddbe9c85e2f67b155a9cb112ccbe45cd73b6b60b0b81454203f71df0c637a660239335dc34e96e1709f9d3ac24cbaffd7af0fa99d7e800329489211b84a3d267d5a0bb6a1e495846d392fa8b535618216f6916bb1d2a3c4bd746a03fb04fc1095e75f4a9b832a6c3b76546081acfb58c5817abb0dec57db3b2ad680e5f3fa48bd979e1a71ff659e8a19f179eeabbc4671f7d9ad4d523ca48b7f893d7da938bb8c335b0b17c645850"}]}}, &(0x7f00000013c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x10, 0x6, 0x6, "58a2f012", "ff060f5a"}}, &(0x7f0000001400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x2, 0x8, 0x5, 0x3, 0x4, 0xfc00}}}, &(0x7f0000001940)={0x84, &(0x7f0000001480)={0x0, 0x0, 0xca, "6dae94b224a77a4aa7ad97282d7a06abe9ec4df700ed65499486387a565b6df663bad96dabc9287df9f6c104947f1ef9ddd16fe8c6385e420034ed7f7d9aba7405d205b974362b526c9448a362e0417d85d0c0a7a10efbdbdd308b087397bfaff4991d3137d1867aa586575f7f45f0990e78102bead3f14565add95059ef0cf4fe5c6d7d4164449e40561c2bf8cb7b453ca266ba2b75aac5441acf3a18414715098129739d6d280695d874b6588209ed88ae0f83dd4c4c9a1a7881773c5ffc5e926e70d93fb9dcabbfe2"}, &(0x7f0000001580)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000015c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001600)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000001640)={0x20, 0x0, 0x4, {0x400, 0x20}}, &(0x7f0000001680)={0x40, 0x7, 0x2, 0x5}, &(0x7f00000016c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000001700)={0x40, 0xb, 0x2, "9bcf"}, &(0x7f0000001740)={0x40, 0xf, 0x2, 0xe}, &(0x7f0000001780)={0x40, 0x13, 0x6, @random="227797993d09"}, &(0x7f00000017c0)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000001800)={0x40, 0x19, 0x2, 'Zg'}, &(0x7f0000001840)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001880)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000018c0)={0x40, 0x1e, 0x1}, &(0x7f0000001900)={0x40, 0x21, 0x1, 0xe4}}) r6 = open$dir(&(0x7f0000001a00)='./file0\x00', 0x80200, 0x108) mknodat$null(r6, &(0x7f0000001a40)='./file0\x00', 0x2, 0x103) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000001ac0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r7, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x2c, r8, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_IPPROTO={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x2400c080) mount$overlay(0x0, &(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00), 0x1000, &(0x7f0000001c40)={[{@xino_off}, {@metacopy_off}, {@default_permissions}, {@index_off}], [{@obj_type={'obj_type', 0x3d, 'fou\x00'}}]}) write$selinux_context(r2, &(0x7f0000001cc0)='system_u:object_r:audisp_remote_exec_t:s0\x00', 0x2a) pipe2(&(0x7f0000001d00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001e00)={'tunl0\x00', &(0x7f0000001d80)={'syztnl1\x00', 0x0, 0x8, 0x20, 0x80000001, 0x9, {{0x11, 0x4, 0x3, 0x29, 0x44, 0x64, 0x0, 0xc, 0x4, 0x0, @broadcast, @empty, {[@lsrr={0x83, 0xf, 0xff, [@local, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback]}, @timestamp_addr={0x44, 0xc, 0x6b, 0x1, 0x0, [{@broadcast, 0x8}]}, @generic={0x44, 0xb, "9f28f0e5bbbbc3f2aa"}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) sendmsg$nl_route_sched_retired(r9, &(0x7f0000002040)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001e40)=@delqdisc={0x1a8, 0x25, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x5, 0x10}, {0x0, 0x5}, {0xfffb, 0xe}}, [@q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x30}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xd19}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8000}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x39}]}}, @q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xd4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2d}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1000}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x10}]}}, @q_dsmark={{0xb}, {0x48, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x816c}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9080}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xd}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x91d}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x101}]}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x48000) syz_usb_control_io$uac1(r5, &(0x7f0000002140)={0x14, &(0x7f0000002080)={0x20, 0x6, 0x4a, {0x4a, 0xe, "5084da0aac721ed1a6b9dd8b3e3173a14623671c93fe596de5dfa6c5c1334859f929508cc9f7e5e0387293ae5208348f916e94431390a7ae9d4e0c57b66b0f3b941a43b0e06bc8d6"}}, &(0x7f0000002100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41d}}}, &(0x7f0000002440)={0x44, &(0x7f0000002180)={0x40, 0xf, 0xc6, "ee9f2f42261ee5d5661544e515735d8df809e062629f60c6b24e26aad2d5ac7b34eb000fdf66c798960e0f41374589efca03999be3dfdcb9002db09a878f6f67eef9b640b6f146ad9d28d92641d066be20d27227d3df191991efb21a5a0b487ab29bcd3f985694d71c2529c5a070e69e2a090c635ac1bd710dae132f5b95a7743127124343c98f92cfd32142f7b3b2b25a20f9b270d8a8cad197b9b8ea853038ed391ab459420f4303a0dda6f5257a5f5ba43052509015c590986d9cb2f518c90645dea5f73d"}, &(0x7f0000002280)={0x0, 0xa, 0x1, 0xf}, &(0x7f00000022c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000002300)={0x20, 0x81, 0x1, "18"}, &(0x7f0000002340)={0x20, 0x82, 0x2, "16e3"}, &(0x7f0000002380)={0x20, 0x83, 0x3, "34a23e"}, &(0x7f00000023c0)={0x20, 0x84, 0x1, "98"}, &(0x7f0000002400)={0x20, 0x85, 0x3, "77a542"}}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0x5, &(0x7f00000024c0)=0x1fe, 0x4) r11 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000002500)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x307, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0x4, [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x3, 0x1, 0x2, 0xff, {0x9, 0x21, 0x3, 0x9, 0x1, {0x22, 0xef2}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x80, 0xaa, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x6b7080745ab0c260, 0x4, 0x1, 0x3}}]}}}]}}]}}, &(0x7f0000002840)={0xa, &(0x7f0000002540)={0xa, 0x6, 0x0, 0x33, 0x2, 0x2, 0xff, 0x8}, 0x15, &(0x7f0000002580)={0x5, 0xf, 0x15, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x5, 0x6, 0x55}, @ptm_cap={0x3}]}, 0x7, [{0x38, &(0x7f00000025c0)=@string={0x38, 0x3, "0593bbc767742a9722e37c6ce8280c326ae9c313574671e202df8e340b07e3d6c926b36342538f7f3de53ec37f2b7e6734d4b1bc6550"}}, {0xbe, &(0x7f0000002600)=@string={0xbe, 0x3, "187e282357280dfbb752f6e6daaa8c5e7d6fb9b3408cc66cae3c5628831838e5c772f12741acbc17b4838aa9b67dcfffd300e64367320b1e01e7f552ea8440a456c3b561125fd92044ee1631b3d940fe35c905a78c7ca46da4f6516cc70ab53def4d43cd03ccf24ce52165854eaea091b40380b942ea2c9e83973e2c59bad497208284e0da60be159d6d983fc95fcf0a1d6c4aea2640b7229191fd0d01603f9e5811aa6221ebd56df9357ab686cb68e3f4cace9ced153176349918d0"}}, {0x4, &(0x7f00000026c0)=@lang_id={0x4, 0x3, 0x542b}}, {0x4, &(0x7f0000002700)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000002740)=@lang_id={0x4, 0x3, 0x80a}}, {0x41, &(0x7f0000002780)=@string={0x41, 0x3, "713ead6f20aa836e9ac3c022620da36b8e0f1a1564e85c36729b4d2be6011facdc0e04595a80b359f57926aabed290e2e17d3fd69c5782e1c0e04050833f07"}}, {0x4, &(0x7f0000002800)=@lang_id={0x4, 0x3, 0x1009}}]}) syz_usb_control_io$hid(r11, &(0x7f0000002a40)={0x24, &(0x7f00000028c0)={0x20, 0x31, 0xac, {0xac, 0x21, "ec3233cbaaaaeeaa5c6906b174296d442469733a84d52ec1ae44fee74bdf91eff3df682f3b0b859a5c7c707c7adcbc6a07a6477422cec6e18d8d630a0309623e112d958192a6d9dd62a038246aac492df52280d3459bca0bd6c1bbd26db69ced05e8ccb2370d3756c1f1c34ac92fc0accd796fef3def4b4c59a8e49d9397916f2c2f3f4ba9e18b868b6b375cef9fa76f56eacfd1dd1e9d51da91e187fd6eab2507eb4aaa40520b7f6e0e"}}, &(0x7f0000002980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}, &(0x7f00000029c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "c4a464dc"}]}}, &(0x7f0000002a00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7ab1, 0xb, 0x1, {0x22, 0x1b6}}}}, &(0x7f0000002cc0)={0x2c, &(0x7f0000002a80)={0x40, 0x0, 0x6b, "495f43c397ff7fdb94090ba508900a34463cd17026c20cadaf84df611fcc8586d894df4aad14dca1f61d7582428fef11c2ffb6b2d1802590b915b77cfdc4614eb1fe0400ac28e218afa4b12fce97e6db80ad642eddc36a7728ce71c296149304c4e3db82076e54f911465a"}, &(0x7f0000002b00)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000002b40)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000002b80)={0x20, 0x1, 0xcf, "a8f55500aac42153d42bde323ee1e0bdb963098771458d2375ed6f49b69a120838df6073850e77a5b94397d8c9fe158894e5035979e16c2e98ecae8e537db71c7e5524f61ef77b83d45ed7e03c0730641e3b9a05dfdc826a2cc533e6df2d23543b6c91e0a4b29dbfc75ad4434bd2f92f55a171dd090c9af5f876157f9b8e755194a9c5658aab750cd8ddf05e9c33e402cbfbdbc1d04edcbce13c138f23888dcdf907b01d3f9a2a408582e8c100344b5b1ea589e48d664946fbf6eded18a2ebbb0c815dde78018a5fede6b8d27d5d34"}, &(0x7f0000002c80)={0x20, 0x3, 0x1, 0x80}}) sendfile(r7, r4, &(0x7f0000002d00)=0x10000, 0x5) unlink(&(0x7f0000002d40)='./file0\x00') syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000002e40)={0x14, &(0x7f0000002d80)={0x20, 0x6, 0x4b, {0x4b, 0x4, "02ed8d763cc92c9c4a52fc66da74c92efb87cbc527178ce4f5496819cd829a73802425652c081892f62314860e63fed471ca112f8ba222c8c78219189ecbc01e9f69ada2f8d99d1bbb"}}, &(0x7f0000002e00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x420}}}, &(0x7f0000003180)={0x34, &(0x7f0000002e80)={0x0, 0x14, 0xdb, "13a2daae13a72eeb30708dc6e7109d0d485744d683fda0ead2eb65f13c191c4f597d532a752fcaef7dbae2717720e3ac1af91d0fedbb829eda56611f104b93b0e1f53b2aa28d03989ff8efbffb4e57e12a4c15f958a6a7f571021bcaea40a170900f98b35e6dba404c8f17a0583c370ed0033ab92054d610699d69632b4999bde59e03ee41576642a566abcf76e272abc14a50db3032d1d060977b8cd058960d2a4d1573b9b3ae4f154be6e49213fddcb8cffcaa29ae15708eeb6dddcc19e9e2425a222d5cd84a363d50e5fda78c5efb1e926575f58793795f3d4f"}, &(0x7f0000002f80)={0x0, 0xa, 0x1, 0x99}, &(0x7f0000002fc0)={0x0, 0x8, 0x1, 0x4d}, &(0x7f0000003000)={0x20, 0x0, 0xcc, {0xca, "2cde39f2a0ecfdd1a78f82b5920024429ae67bcf04a7e8add38ee9abb1cce46f9f6cd1b85b1e46eb702c00b80472c940897f7a77f0318512511ea2ee69ba15323814cadd51b101566bd220e2d91e0c7cffbf2f8525e242d39bafc22f92ceb1f0ef464da0bd95ffe5d9d592ce4e9030d858637b1f458c0fd742366ac297c58f4fca4ce59ce876a4bc09ed254e5b127c1a0c85ea8de476ccb0785e9e37977114498934e8252385d603589b8d008450595b6fd9f4084547c91e4b74bc1ca3fce9aed19897893bfb2b8b310b"}}, &(0x7f0000003100)={0x20, 0x1, 0x1, 0xa}, &(0x7f0000003140)={0x20, 0x0, 0x1, 0x9}}) executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0xff7ffff7) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') r4 = socket$unix(0x1, 0x1, 0x0) sendfile(r4, r3, &(0x7f0000000000)=0x11, 0x7) openat(r3, &(0x7f0000000200)='./file0\x00', 0x40000, 0x281) r5 = eventfd(0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xc8, 0x0, 0xc000000) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x30, r10, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r11}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}]}, 0x30}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) r12 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r12, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r13 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000240)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r1, 0x5bfe5000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000fc160a29aa3d2076d8c7bcfbc60a58f8d945e8678e3a25df16722f9e02d9e013abc196df72e6be93e8603fcf7647e29833ed04fae59add4b715eb765ed7a60d60543ff67888ff430e908594b8b03dbffd1708b61178a622ca91a05feabc0efb7d7d21a41239d079e7dde944046e62a66b0101a743687fe3d3e00b712e170a0e3777621b9ad8cf10336bdc70f19177b3d06e32e5d6ef2fa7ab4010af9ac7b82aecddd212d4132da395a87280f86d763ea", @ANYRES16=r16, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r14, @ANYBLOB], 0x20}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6c}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x124c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x137a}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x631}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x131c}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x5) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000280)={r2, 0x1fe, 0x2, r5}) executing program 5: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x709000, 0x0) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x202080, 0x89) linkat(r2, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00', 0xc00) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000140)={'TPROXY\x00'}, &(0x7f0000000180)=0x1e) (async) r4 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000840)={0x0, &(0x7f00000001c0)=[@cpuid={0x2, 0x18, {0x4, 0xf8e}}, @uexit={0x0, 0x18, 0x400}, @code={0x1, 0x5b, {"0f91af9d8a80470f20e035800000000f22e0260f7951fe262e0fc71e0f20d835080000000f22d866baf80cb8329b818fef66bafc0c66edf226260f09c40149753ac461795acef3430f32"}}, @uexit={0x0, 0x18, 0xa1}, @uexit={0x0, 0x18, 0x8000000000000001}, @uexit={0x0, 0x18, 0x3}, @cpuid={0x2, 0x18, {0xb20b, 0x52f}}, @cpuid={0x2, 0x18, {0x869, 0xb56}}, @code={0x1, 0x6e, {"c4e14dee1ab9b70b00000f32c74424002b010000c744240213970000ff2c24b98d0800000f328f0950012867650f381d1766f2f267e2bd66450fc77327c7442400d1be0000c744240200100000c7442406000000000f011c24440f0002"}}, @cpuid={0x2, 0x18, {0x3}}, @cpuid={0x2, 0x18, {0xe81a, 0x8}}, @code={0x1, 0x60, {"66baf80cb8b2405b81ef66bafc0c66ed450f220366ba2000edc4034542fe000f214166470f00d936f2420f1ed1660fd07e1066ba6100b800100000efc74424001d010000c7442402f9310000ff2c24"}}, @uexit={0x0, 0x18, 0xd6dc}, @code={0x1, 0x5e, {"66baa000b80d000000ef0fc71b0f01cfb9b7090000b80d000000ba000000000f30c402b12949f766400f383805008000006466460f6d2ce8b805000000b924b900000f01c1410fe311430f01c8"}}, @uexit={0x0, 0x18, 0x8}, @code={0x1, 0x58, {"2e410d3771f8e266ba420066b8080066ef8fe8188e7a0f00c48131657900c482293df06544f4c42179de2e400f30b9800000c00f3235004000000f300f20d835200000000f22d8"}}, @uexit={0x0, 0x18}, @cpuid={0x2, 0x18, {0x5, 0xd}}, @code={0x1, 0x76, {"b9800000c00f3235008000000f3066baf80cb8d464938def66bafc0cb800700000ef4a0fc71e430f01c8f20f2b6e0d450f07b9ad020000b847c20000ba000000000f3048b866000000000000000f23c00f21f835030009000f23f80f01c88f09909564215d"}}, @code={0x1, 0x80, {"48b800900000000000000f23c00f21f83502000d000f23f866b8c8008ed8260f09c744240000c0ffffc744240200600000c7442406000000000f011424660f3a0f469b1248b87b780000000000000f23d80f21f835400000000f23f864470fd4dc66b8ad008ec066bad004ec0f2107"}}, @code={0x1, 0x58, {"b9c10b0000b89e1f0000ba000000000f300f7948d766ba4100edb945080000b8d6000000ba000000000f3046040366b806018ee80f52b6006000000f01c366ba4300ed360f01ca"}}, @uexit={0x0, 0x18, 0x7}, @code={0x1, 0x61, {"430f2385c4027d1300c4e3d57ce30066440f38808868360000c4821902a50058000066410f15680f66ba430066ed66b846000f00d80f01c348b801000000000000000f23c80f21f835080010000f23f8"}}, @code={0x1, 0x44, {"b8010000000f01d966baa10066ed8f2868ec77160a440f01d1c4c25d45a00e000000f30f1efb660fe0f9f30fc7360f1f00d9e0"}}, @code={0x1, 0x8d, {"66b898008ee8b805000000b96a7600000f01c1c7442400c2410000c7442402a8000000c7442406000000000f011c2466ba4100ed640f0766420fc5c3d766baf80cb88f8df58fef66bafc0cecb926030000b8fcffffffbaffffffff0f300f20e4c7442400e4480000c74424020a000000c7442406000000000f011424"}}, @cpuid={0x2, 0x18, {0x8, 0x1}}, @code={0x1, 0x48, {"64470f30450f01ca400f32c4a27d784e92f30fb88807000000440f20c03507000000440f22c066bad004ecc441fa1666d166f20f350f32"}}, @code={0x1, 0x69, {"c744240021000000c744240200800000ff1c24b9e60900000f3266baf80cb83c6fb18fef66bafc0cb800080000ef660f388133470f0131440f07b9800000c00f3235002000000f3066420fc733c4e27d254e0026663e0f32"}}], 0x678}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000880)={'vcan0\x00'}) recvmmsg(r1, &(0x7f0000005a40)=[{{&(0x7f00000008c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000940)=""/192, 0xc0}], 0x1, &(0x7f0000000a40)=""/145, 0x91}, 0x6}, {{&(0x7f0000000b00)=@caif, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000b80)=""/113, 0x71}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/101, 0x65}, {0x0}], 0x4, &(0x7f0000001cc0)=""/212, 0xd4}, 0x87}, {{&(0x7f0000001dc0)=@un=@abs, 0x80, &(0x7f0000002080)=[{&(0x7f0000001e40)=""/3, 0x3}, {&(0x7f0000001e80)=""/172, 0xac}, {&(0x7f0000001f40)=""/2, 0x2}, {&(0x7f0000001f80)=""/5, 0x5}, {&(0x7f0000001fc0)=""/130, 0x82}], 0x5}, 0x3ff}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/93, 0x5d}, {&(0x7f0000003180)=""/36, 0x24}, {&(0x7f00000031c0)=""/84, 0x54}, {&(0x7f0000003240)=""/172, 0xac}], 0x5, &(0x7f0000003380)=""/148, 0x94}}, {{&(0x7f0000003440)=@generic, 0x80, &(0x7f0000003640)=[{&(0x7f00000034c0)=""/70, 0x46}, {&(0x7f0000003540)=""/84, 0x54}, {&(0x7f00000035c0)=""/114, 0x72}], 0x3, &(0x7f0000003680)=""/70, 0x46}, 0x7}, {{&(0x7f0000003700)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003780)=""/243, 0xf3}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)}, {&(0x7f00000048c0)=""/6, 0x6}, {&(0x7f0000004900)=""/104, 0x68}, {&(0x7f0000004980)=""/47, 0x2f}], 0x6, &(0x7f0000004a40)=""/4096, 0x1000}, 0x9}], 0x6, 0x10040, &(0x7f0000005bc0)={0x0, 0x989680}) (async, rerun: 64) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (rerun: 64) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000005c00)={0x0, 0x9, 0x0, [0x1, 0xb7, 0x7fffffff, 0xaeef, 0x6], [0x8, 0x5, 0x9a4d, 0x7fff, 0x5, 0x4, 0x0, 0x9, 0x5314, 0x3, 0x7fffffff, 0x9, 0x2, 0x7ff, 0x2, 0x9, 0xe464, 0xb5, 0xb, 0xd, 0x8, 0x69d, 0x5c, 0x3, 0x9, 0x80000001, 0xfffffffffffffffc, 0xfffffffffffffff7, 0x3, 0x4, 0x9, 0x9, 0x3, 0xd, 0x9, 0x7fff, 0xfffffffffffffffa, 0x1, 0x800, 0x7ff, 0x9, 0x100000001, 0xfffffffffffffffa, 0x4, 0x9, 0x7f, 0x100000001, 0xffffffffffffffc0, 0x39, 0x1, 0x2, 0x2, 0x7, 0xfffffffffffffff4, 0x9, 0x8, 0x8000000000000001, 0xd, 0x8, 0x8, 0x2, 0x5, 0x55, 0xfffffffffffffff7, 0x1, 0x2, 0xd1, 0xe, 0xfff, 0x2, 0xffffffffffffffff, 0x1, 0xffff, 0x1, 0x8, 0x62, 0xfffffffffffffffe, 0xf000000000000000, 0x9, 0x7, 0x9, 0x7, 0x81, 0xffffffffffffffb7, 0x8, 0x5, 0x2, 0x9, 0x2, 0x99, 0xd, 0x7, 0x5a3b, 0x8, 0x50000, 0x0, 0x9, 0x7fffffff, 0x5, 0x6, 0x4, 0xe, 0xffff, 0x10000, 0xe, 0x9, 0xfffffffffffffff9, 0x2, 0x5, 0xfc1, 0xfff, 0x10, 0x7fb0, 0x9, 0x1, 0x5, 0x3, 0xfffffffffffffffa, 0x0, 0x8253, 0x4]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000006040)={r8, 0xffff, 0x1, [0x7fffffffffffffff, 0x2, 0x1, 0xf61, 0xfffffffffffffff8], [0x6, 0x400, 0x8, 0xd800000000000000, 0x7fffffff, 0x4, 0x4, 0x1, 0x2, 0x9, 0x80000001, 0x1ff, 0x3, 0x800, 0x5, 0xff, 0x3f4a, 0xa, 0x5, 0x9cbf, 0x1, 0xfffffffffffffffe, 0x7, 0x2, 0x2, 0x2, 0xffffffffffffff01, 0x1, 0x3, 0xb4c0000000000, 0x5, 0x6, 0x3, 0x4, 0x7, 0x3, 0x9, 0x10, 0x0, 0xb, 0x80, 0x73, 0x5, 0x5, 0x8, 0x1c000, 0x7, 0x525, 0x0, 0xf, 0x8000, 0x4894e478, 0x9, 0x9, 0xe066, 0x5, 0x6, 0x2, 0x5, 0x3, 0x1, 0xfffffffffffffffc, 0x0, 0x3, 0x2, 0x2, 0x7, 0xfff, 0x6, 0x1, 0x5, 0x5, 0xfffffffffffffff9, 0xfc80, 0x4, 0x7, 0xffff, 0x3e, 0xca3, 0x9, 0x2, 0x80000001, 0x81, 0x3, 0x3, 0x8000000000000000, 0x0, 0x40, 0x3, 0x8000, 0x100000001, 0x2, 0x7, 0x81, 0x1ff, 0x9, 0x18, 0x0, 0x7, 0x101, 0xa0, 0x6, 0xe, 0x1, 0x7, 0x0, 0x101, 0x200, 0x5, 0xf61, 0x4e41, 0x1, 0x100000000, 0x5, 0x2, 0xe, 0x3, 0x4, 0x2, 0x5, 0x9]}) (async) r9 = eventfd(0x81) (async, rerun: 64) r10 = syz_open_procfs(0x0, &(0x7f0000006480)='clear_refs\x00') (rerun: 64) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f00000064c0)={r9, 0x9, 0x0, r10}) r11 = getuid() (async) fstat(r7, &(0x7f0000006540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000006500)='./file0\x00', r11, r13) (async) r14 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000065c0), 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r14, 0x65, 0x2, &(0x7f0000006600)=0x80000000, 0x4) (async) getsockopt$IPT_SO_GET_REVISION_MATCH(r14, 0x0, 0x42, &(0x7f0000006640)={'HL\x00'}, &(0x7f0000006680)=0x1e) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r10, 0x54a2) pipe(&(0x7f00000066c0)) (async) getsockopt$inet_IP_XFRM_POLICY(r14, 0x0, 0x11, &(0x7f0000006780)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@private1}}, &(0x7f0000006880)=0xe8) setxattr$system_posix_acl(&(0x7f0000006700)='./file0\x00', &(0x7f0000006740)='system.posix_acl_access\x00', &(0x7f00000068c0)={{}, {0x1, 0x6}, [{0x2, 0x1, r12}, {0x2, 0x2, r11}, {0x2, 0x0, r12}, {0x2, 0x3, r15}], {0x4, 0x6}, [{0x8, 0x6, r13}, {0x8, 0x2, r13}, {0x8, 0x0, r13}, {0x8, 0x3, r13}], {0x10, 0x5}, {0x20, 0x5}}, 0x64, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000006940)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000006980)=0x2c) executing program 1: openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4142, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0, 0x80a0000}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000002c0)={0x2, 0x0, [{0x80a0000, 0x42, &(0x7f0000000100)=""/66}, {0xeeee8000, 0x54, &(0x7f0000000180)=""/84}]}) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000240)=ANY=[], 0xd0060) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x13000000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r2, &(0x7f00000000c0)="8f2a0a65", 0x4) executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x1d, r3}, 0x10, &(0x7f0000000100)={&(0x7f0000000180)={0x7, 0x0, 0x4, {}, {0x0, 0xea60}, {0x3, 0x0, 0x1}, 0x1, @can={{0x4, 0x0, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "6d56f1e83311e5a3"}}, 0x48}, 0x1, 0x0, 0x0, 0x20004011}, 0xc) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) executing program 1: openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x12, 0x0, 0x0) mmap(&(0x7f0000ad9000/0x3000)=nil, 0x3000, 0x100000d, 0x110, r0, 0x45809000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xff}}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private1, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0xa0}}, 0x0) socket$inet(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414"], 0x84}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESHEX, @ANYRES8], 0x2c}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x4, 0x7, 0xf8, 0x3, 0x6, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0xf81e, 0x7, 0x9}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc141200004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r7}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000840)={0x3f4, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1b4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1b0, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdde}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\#^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '}!{+$:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\\\'&-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x76}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+@*@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x40, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x2e, 0x4, "0efb8377eaacd4be5c0ed2072361f9d11b9476a5b281905f5b6a46417ebf494ba7668363d6a8ffa106be"}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x170, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ':.\'-#%+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x101, 0x5, "192909c3a4545bdd01f278bc9785d86e8e52ef14fb4a7e891799be35af6219032934062e79588a50d344ee0141ee2e3e6b5cbf3a42d7a18ae718a54ac38dfc6eadebbe537a05119b25beee9958dc2a225719c42e55adf115761dad0892be4a3be9bf7fd52b9805608f41594bba9649493602650517b9a5414ba813432befb9755c932dd1365ed060f3c3dddaf1436c10965c67b19bb3845b48bf4499aa748bf742dc00fdc4c76ca9ec4fb3fa62198f28d84affde5476d1009b0656299428611ee2347167353363059a56bf6c435a77cfa1af3b0935eab9fa81f0c08326ee4a45c752ae222a90fc56623c916c0f79a7f9b091e42b3b60d26b21dee31cdd"}, @ETHTOOL_A_BITSET_VALUE={0xd, 0x4, "2119ed1555f5f8c7c6"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x4000840}, 0x40010) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getpid() sendmsg$netlink(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1000000021ef01"], 0x10}], 0x1, 0x0, 0x0, 0x4}, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xffffe000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') program crashed: WARNING in kvm_put_kvm bisect: the chunk can be dropped bisect: split chunks (needed=true): <8> bisect: split chunk #0 of len 8 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 10, 30, 10] detailed listing: executing program 1: openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4142, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0, 0x80a0000}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000002c0)={0x2, 0x0, [{0x80a0000, 0x42, &(0x7f0000000100)=""/66}, {0xeeee8000, 0x54, &(0x7f0000000180)=""/84}]}) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000240)=ANY=[], 0xd0060) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x13000000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r2, &(0x7f00000000c0)="8f2a0a65", 0x4) executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x1d, r3}, 0x10, &(0x7f0000000100)={&(0x7f0000000180)={0x7, 0x0, 0x4, {}, {0x0, 0xea60}, {0x3, 0x0, 0x1}, 0x1, @can={{0x4, 0x0, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "6d56f1e83311e5a3"}}, 0x48}, 0x1, 0x0, 0x0, 0x20004011}, 0xc) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) executing program 1: openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x12, 0x0, 0x0) mmap(&(0x7f0000ad9000/0x3000)=nil, 0x3000, 0x100000d, 0x110, r0, 0x45809000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xff}}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private1, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0xa0}}, 0x0) socket$inet(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414"], 0x84}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESHEX, @ANYRES8], 0x2c}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x4, 0x7, 0xf8, 0x3, 0x6, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0xf81e, 0x7, 0x9}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc141200004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r7}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000840)={0x3f4, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1b4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1b0, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdde}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\#^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '}!{+$:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\\\'&-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x76}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+@*@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x40, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x2e, 0x4, "0efb8377eaacd4be5c0ed2072361f9d11b9476a5b281905f5b6a46417ebf494ba7668363d6a8ffa106be"}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x170, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ':.\'-#%+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x101, 0x5, "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"}, @ETHTOOL_A_BITSET_VALUE={0xd, 0x4, "2119ed1555f5f8c7c6"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x4000840}, 0x40010) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getpid() sendmsg$netlink(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1000000021ef01"], 0x10}], 0x1, 0x0, 0x0, 0x4}, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xffffe000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 30, 30, 30] detailed listing: executing program 1: timer_create(0x3, &(0x7f0000000140)={0x0, 0x1, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) timer_settime(r0, 0x1, &(0x7f0000000380)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r0, &(0x7f0000000000)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x2, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) executing program 1: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x23, 0x1b, {0x1b, 0x4, "db9d28e00f494ce45f09509ce4e55eecdfc286b1c950cc9ea7"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x44, &(0x7f00000000c0)={0x40, 0x31, 0x1, "9b"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000140)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000180)={0x20, 0x80, 0x1c, {0x4, 0x3ff, 0x8, 0x1, 0x1, 0x9, 0x6, 0x6, 0x4, 0x2, 0x1, 0x7d}}, &(0x7f00000001c0)={0x20, 0x85, 0x4}, &(0x7f0000000200)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000240)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000280)={0x20, 0x89, 0x2, 0x1}}) r0 = syz_usb_connect$cdc_ncm(0x0, 0xa2, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x2, 0x1, 0x3c, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '-'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xffff, 0x2e3, 0x1000, 0x7}, {0x6, 0x24, 0x1a, 0x3, 0x2}, [@country_functional={0xe, 0x24, 0x7, 0x2, 0x5, [0xfa1, 0x2, 0xb, 0x9]}, @acm={0x4}, @dmm={0x7, 0x24, 0x14, 0x62, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x80, 0xc3, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x0, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2, 0x9, 0x4}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x310, 0x4, 0x0, 0x1, 0x20, 0x6}, 0x6a, &(0x7f0000000440)={0x5, 0xf, 0x6a, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0x4e, 0x10, 0x2, "2614d294d6aaf3adfd71a7886843aa4f8b817093e0ca3a130005aff8aa76bffc9ca68db47ce45b3d278754c74e88a8055f155cd367db4032b80cf0ccb122c64c69081eb0edeead15461889"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0x4, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0xbd, 0xd, 0x8}]}, 0x2, [{0x7a, &(0x7f00000004c0)=@string={0x7a, 0x3, "acbb50f5eecc6eda17e093e8aa1992c3bb64e136653be267a6cd622349f0948f31a0879edc864cd1b31cef0af64a8c4fc9b661b8808d3bec38224c63ce86282ebc889c0ecad4fb7cdd5697430e4f7512cbd284b9ab35a57d23a03614de33ef30dfe9972ae6232da51edb0c9df2b98e74159b21e9f98bf1e0"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x3409}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000700)={0x14, &(0x7f00000005c0)={0x0, 0x5, 0xef, {0xef, 0x31, "404bd274b0d7c91dff24b631c75a7bbb48a34240aa62be4eb4f8207d876440fb3a65a207391b7324da7195bcee5af59869976f24a302d9573002e33490ef409dffbd89c51af1a9925203e85389d81e3144f754b089b87d1e1a21a2e6f163a9863f8f08cbbb73ae8408b8d20f76421d3a0125b2ddce192b473ff5c571631767161822b40e5367846dd94162654efcbbf07727ae693c10aa23db429a49f874dc9d20d948eeccd3d0d9fe53a4b3addde2b4c4eeae280f97b2c93ff124e4707d650a036f682a841c9b9a3f2be0a2c5f60f84282bb16b21f4f1ab684abf19dda5a62f9379fd85db7dc6501c31c053a3"}}, &(0x7f00000006c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000009c0)={0x44, &(0x7f0000000740)={0x0, 0x15, 0xb0, "586c541cfe4983f716cd1c8b2b9745a6eca653e18db8bc1b3d3ec54ba7c8076b57b6a817e91e2d23bcbfbd896674eec6089cad557c0170f6324b70cd9a39ac056b67e108f20a1120d7684d5165d9a196c4fecb0241a2aeb5343cdaee4639e0b76537e41546b998bea33932bedc3477f40ac1329662922f5bb9ee82bf178c2668bffd245763528a1a81f0f9887e218cc44a138e5337fc6841bfc4460c235bacf3eac46439d10a12b88e09908fb2324641"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000880)={0x20, 0x80, 0x1c, {0x5, 0x0, 0x7, 0x5, 0x8, 0x0, 0x6, 0xf9bb, 0x0, 0x6000, 0x1, 0x4}}, &(0x7f00000008c0)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000900)={0x20, 0x83, 0x2}, &(0x7f0000000940)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000980)={0x20, 0x89, 0x2}}) r1 = syz_open_dev$loop(&(0x7f0000000a40), 0x5, 0x40000) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000ac0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r3, 0x0, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000b00)=0xfffffffffffffffd) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000b40), &(0x7f0000000b80)=0xc) r5 = syz_usb_connect$uac1(0x4, 0x110, &(0x7f0000000bc0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfe, 0x3, 0x1, 0x44, 0xc0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}, [@feature_unit={0xd, 0x24, 0x6, 0x3, 0x5, 0x3, [0x5, 0x6, 0x1], 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x1ff, 0x4, 0xfa, 0x5, 0x6, 0x9}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x100, 0x3, 0x6, 0x7}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x204, 0x6, 0x5, 0x6, 0xc, 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x107, 0x3, 0x8, 0x522a, 0xa, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x8, 0x0, 0x0, "41be678206a2fbe046"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4, 0x3, 0xc9, {0x7, 0x25, 0x1, 0x1, 0x0, 0x200}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x3, 0xd1, 0x5, '-', "f71c10"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x6, 0x0, 0x81, "fe4972"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x8, 0x2, 0x5, 0x2, "ce8424c3621a57df9c"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x1849, 0x4, "3f7a8115f5ad"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x8, 0x7, 0x7f, "0ac16de6ea5f117960"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x6, 0x3, 0x1, 0xc9, "ca"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x4, 0xc, 0x0, {0x7, 0x25, 0x1, 0x2, 0x4, 0x9}}}}}}}]}}, &(0x7f00000011c0)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x300, 0x6, 0x5, 0x9, 0x20, 0xeb}, 0x23, &(0x7f0000000d40)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x4, 0xe, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "efef09f5f578373916454def93d74f89"}]}, 0x7, [{0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x3009}}, {0xf4, &(0x7f0000000e40)=@string={0xf4, 0x3, "f0b09d155fa61b522357b8dd215bddff3231e85e1028c02c097ba339d6f5c48589320087250f6924a1985e7c13c68829bee10d5b7b3959699b252b1e0e5efaca0e682d121d9a7ba04111e5200c8e47b2b411aa01fb0078e65268d9a97474ec413f53cd5e8a66c42656b921238291d2203e5eeee02d4fbb192fef6dce64b631d16f5adae14862f842bc4af68bdc8f18dfbe6d630b7779a4b40d71f9acbba24877f3683404ae4f7c59caeadf2c54f025c4b11a1e2ae7fbf1f4fb7e5fd43eb8c00a01b4e166a572d752a70a33d1b0c9fd5c1c66833e9bee35b3c2da80cdf5843c1e1ff183f54a18854187c1c21f0388169953ea"}}, {0xe3, &(0x7f0000000f40)=@string={0xe3, 0x3, "70116dc2190ef0a8cebd0ec24889761143f5368a66493310f570701b0bb4df1ec758e8f25963988b927db3446fc808478b985559912b3cd36ac9e86d54ca66127570adf58891c2c401f09b85c4c014d83f2b9a716f583684fdf2e61e077ef31b9280649904e44b9ee91973ce2256ff447377c12c7a8d27734e746ef24ca95887469cad460a2e025115f7e3a17845c0c9662132b778255890d78772ea8d0aaa5c487d6a7089710df185c5d2abe456be55fb0d92c9ef259f8261e9aa6572f5719439dc6b444aa28f42f3bbc6ea5b9f3cd488018394289c83077d5ebab40ca44b5b31"}}, {0xd8, &(0x7f0000001040)=@string={0xd8, 0x3, "1ec8124d138b3e4d5a034581b68d639fc04b9259d23e981cb74bc7ca445fec8812795e062858372e36d1ef8fd69e7d8fecac8301370d26d9ee13d80b405f17ba4d47681462f9d5085d31ad9868d80c357d745efcc20bd246c02671328dcf67a4801b46c85f421fa76a10b4020948fd7eae59ded7e3f2956f8bcbe72902bec70b6843d1c5eea3843467240f6db6d81d77263f289d1b4a5c2d327ec0707cf365665083ebf8d8a66f7a71b9c2ace7350bc21ef48a7ad4d8f1fdf37f1a3301465ed58783535be5ef9ffcaba426fc898f5090960054a43ad7"}}, {0x63, &(0x7f0000001140)=@string={0x63, 0x3, "373c4d756c7263998cc4a13c78c3fc5c36ba8f968c68cd3361623219b4cb89eff7eeb8f1f0638c53b4d9ecb895955407439eeeec839cc6ade0f10b81ef4ac5d3a8f98f2886105b6393094d3a739dca06c820952e3f18dc039e22b74377621632c3"}}]}) syz_usb_control_io(r5, &(0x7f0000001440)={0x2c, &(0x7f0000001240)={0x0, 0x6, 0x43, {0x43, 0x22, "a34b67615a4358d92b02b17c1bb38fc790d8abb2ba4f9286a80931e01c4a1cf23e1280c56fcb610b6e57289be6a53a1fe69c0fdd608d24103f7838423609ae3913"}}, &(0x7f00000012c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}, &(0x7f0000001300)={0x0, 0xf, 0xb8, {0x5, 0xf, 0xb8, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x8, 0x7, 0x4}, @generic={0xac, 0x10, 0x1, "59ddbe9c85e2f67b155a9cb112ccbe45cd73b6b60b0b81454203f71df0c637a660239335dc34e96e1709f9d3ac24cbaffd7af0fa99d7e800329489211b84a3d267d5a0bb6a1e495846d392fa8b535618216f6916bb1d2a3c4bd746a03fb04fc1095e75f4a9b832a6c3b76546081acfb58c5817abb0dec57db3b2ad680e5f3fa48bd979e1a71ff659e8a19f179eeabbc4671f7d9ad4d523ca48b7f893d7da938bb8c335b0b17c645850"}]}}, &(0x7f00000013c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x10, 0x6, 0x6, "58a2f012", "ff060f5a"}}, &(0x7f0000001400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x2, 0x8, 0x5, 0x3, 0x4, 0xfc00}}}, &(0x7f0000001940)={0x84, &(0x7f0000001480)={0x0, 0x0, 0xca, "6dae94b224a77a4aa7ad97282d7a06abe9ec4df700ed65499486387a565b6df663bad96dabc9287df9f6c104947f1ef9ddd16fe8c6385e420034ed7f7d9aba7405d205b974362b526c9448a362e0417d85d0c0a7a10efbdbdd308b087397bfaff4991d3137d1867aa586575f7f45f0990e78102bead3f14565add95059ef0cf4fe5c6d7d4164449e40561c2bf8cb7b453ca266ba2b75aac5441acf3a18414715098129739d6d280695d874b6588209ed88ae0f83dd4c4c9a1a7881773c5ffc5e926e70d93fb9dcabbfe2"}, &(0x7f0000001580)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000015c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001600)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000001640)={0x20, 0x0, 0x4, {0x400, 0x20}}, &(0x7f0000001680)={0x40, 0x7, 0x2, 0x5}, &(0x7f00000016c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000001700)={0x40, 0xb, 0x2, "9bcf"}, &(0x7f0000001740)={0x40, 0xf, 0x2, 0xe}, &(0x7f0000001780)={0x40, 0x13, 0x6, @random="227797993d09"}, &(0x7f00000017c0)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000001800)={0x40, 0x19, 0x2, 'Zg'}, &(0x7f0000001840)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001880)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000018c0)={0x40, 0x1e, 0x1}, &(0x7f0000001900)={0x40, 0x21, 0x1, 0xe4}}) r6 = open$dir(&(0x7f0000001a00)='./file0\x00', 0x80200, 0x108) mknodat$null(r6, &(0x7f0000001a40)='./file0\x00', 0x2, 0x103) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000001ac0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r7, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x2c, r8, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_IPPROTO={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x2400c080) mount$overlay(0x0, &(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00), 0x1000, &(0x7f0000001c40)={[{@xino_off}, {@metacopy_off}, {@default_permissions}, {@index_off}], [{@obj_type={'obj_type', 0x3d, 'fou\x00'}}]}) write$selinux_context(r2, &(0x7f0000001cc0)='system_u:object_r:audisp_remote_exec_t:s0\x00', 0x2a) pipe2(&(0x7f0000001d00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001e00)={'tunl0\x00', &(0x7f0000001d80)={'syztnl1\x00', 0x0, 0x8, 0x20, 0x80000001, 0x9, {{0x11, 0x4, 0x3, 0x29, 0x44, 0x64, 0x0, 0xc, 0x4, 0x0, @broadcast, @empty, {[@lsrr={0x83, 0xf, 0xff, [@local, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback]}, @timestamp_addr={0x44, 0xc, 0x6b, 0x1, 0x0, [{@broadcast, 0x8}]}, @generic={0x44, 0xb, "9f28f0e5bbbbc3f2aa"}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) sendmsg$nl_route_sched_retired(r9, &(0x7f0000002040)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001e40)=@delqdisc={0x1a8, 0x25, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x5, 0x10}, {0x0, 0x5}, {0xfffb, 0xe}}, [@q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x30}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xd19}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8000}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x39}]}}, @q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xd4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2d}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1000}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x10}]}}, @q_dsmark={{0xb}, {0x48, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x816c}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9080}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xd}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x91d}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x101}]}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x48000) syz_usb_control_io$uac1(r5, &(0x7f0000002140)={0x14, &(0x7f0000002080)={0x20, 0x6, 0x4a, {0x4a, 0xe, "5084da0aac721ed1a6b9dd8b3e3173a14623671c93fe596de5dfa6c5c1334859f929508cc9f7e5e0387293ae5208348f916e94431390a7ae9d4e0c57b66b0f3b941a43b0e06bc8d6"}}, &(0x7f0000002100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41d}}}, &(0x7f0000002440)={0x44, &(0x7f0000002180)={0x40, 0xf, 0xc6, "ee9f2f42261ee5d5661544e515735d8df809e062629f60c6b24e26aad2d5ac7b34eb000fdf66c798960e0f41374589efca03999be3dfdcb9002db09a878f6f67eef9b640b6f146ad9d28d92641d066be20d27227d3df191991efb21a5a0b487ab29bcd3f985694d71c2529c5a070e69e2a090c635ac1bd710dae132f5b95a7743127124343c98f92cfd32142f7b3b2b25a20f9b270d8a8cad197b9b8ea853038ed391ab459420f4303a0dda6f5257a5f5ba43052509015c590986d9cb2f518c90645dea5f73d"}, &(0x7f0000002280)={0x0, 0xa, 0x1, 0xf}, &(0x7f00000022c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000002300)={0x20, 0x81, 0x1, "18"}, &(0x7f0000002340)={0x20, 0x82, 0x2, "16e3"}, &(0x7f0000002380)={0x20, 0x83, 0x3, "34a23e"}, &(0x7f00000023c0)={0x20, 0x84, 0x1, "98"}, &(0x7f0000002400)={0x20, 0x85, 0x3, "77a542"}}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0x5, &(0x7f00000024c0)=0x1fe, 0x4) r11 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000002500)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x307, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0x4, [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x3, 0x1, 0x2, 0xff, {0x9, 0x21, 0x3, 0x9, 0x1, {0x22, 0xef2}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x80, 0xaa, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x6b7080745ab0c260, 0x4, 0x1, 0x3}}]}}}]}}]}}, &(0x7f0000002840)={0xa, &(0x7f0000002540)={0xa, 0x6, 0x0, 0x33, 0x2, 0x2, 0xff, 0x8}, 0x15, &(0x7f0000002580)={0x5, 0xf, 0x15, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x5, 0x6, 0x55}, @ptm_cap={0x3}]}, 0x7, [{0x38, &(0x7f00000025c0)=@string={0x38, 0x3, "0593bbc767742a9722e37c6ce8280c326ae9c313574671e202df8e340b07e3d6c926b36342538f7f3de53ec37f2b7e6734d4b1bc6550"}}, {0xbe, &(0x7f0000002600)=@string={0xbe, 0x3, "187e282357280dfbb752f6e6daaa8c5e7d6fb9b3408cc66cae3c5628831838e5c772f12741acbc17b4838aa9b67dcfffd300e64367320b1e01e7f552ea8440a456c3b561125fd92044ee1631b3d940fe35c905a78c7ca46da4f6516cc70ab53def4d43cd03ccf24ce52165854eaea091b40380b942ea2c9e83973e2c59bad497208284e0da60be159d6d983fc95fcf0a1d6c4aea2640b7229191fd0d01603f9e5811aa6221ebd56df9357ab686cb68e3f4cace9ced153176349918d0"}}, {0x4, &(0x7f00000026c0)=@lang_id={0x4, 0x3, 0x542b}}, {0x4, &(0x7f0000002700)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000002740)=@lang_id={0x4, 0x3, 0x80a}}, {0x41, &(0x7f0000002780)=@string={0x41, 0x3, "713ead6f20aa836e9ac3c022620da36b8e0f1a1564e85c36729b4d2be6011facdc0e04595a80b359f57926aabed290e2e17d3fd69c5782e1c0e04050833f07"}}, {0x4, &(0x7f0000002800)=@lang_id={0x4, 0x3, 0x1009}}]}) syz_usb_control_io$hid(r11, &(0x7f0000002a40)={0x24, &(0x7f00000028c0)={0x20, 0x31, 0xac, {0xac, 0x21, "ec3233cbaaaaeeaa5c6906b174296d442469733a84d52ec1ae44fee74bdf91eff3df682f3b0b859a5c7c707c7adcbc6a07a6477422cec6e18d8d630a0309623e112d958192a6d9dd62a038246aac492df52280d3459bca0bd6c1bbd26db69ced05e8ccb2370d3756c1f1c34ac92fc0accd796fef3def4b4c59a8e49d9397916f2c2f3f4ba9e18b868b6b375cef9fa76f56eacfd1dd1e9d51da91e187fd6eab2507eb4aaa40520b7f6e0e"}}, &(0x7f0000002980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}, &(0x7f00000029c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "c4a464dc"}]}}, &(0x7f0000002a00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7ab1, 0xb, 0x1, {0x22, 0x1b6}}}}, &(0x7f0000002cc0)={0x2c, &(0x7f0000002a80)={0x40, 0x0, 0x6b, "495f43c397ff7fdb94090ba508900a34463cd17026c20cadaf84df611fcc8586d894df4aad14dca1f61d7582428fef11c2ffb6b2d1802590b915b77cfdc4614eb1fe0400ac28e218afa4b12fce97e6db80ad642eddc36a7728ce71c296149304c4e3db82076e54f911465a"}, &(0x7f0000002b00)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000002b40)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000002b80)={0x20, 0x1, 0xcf, "a8f55500aac42153d42bde323ee1e0bdb963098771458d2375ed6f49b69a120838df6073850e77a5b94397d8c9fe158894e5035979e16c2e98ecae8e537db71c7e5524f61ef77b83d45ed7e03c0730641e3b9a05dfdc826a2cc533e6df2d23543b6c91e0a4b29dbfc75ad4434bd2f92f55a171dd090c9af5f876157f9b8e755194a9c5658aab750cd8ddf05e9c33e402cbfbdbc1d04edcbce13c138f23888dcdf907b01d3f9a2a408582e8c100344b5b1ea589e48d664946fbf6eded18a2ebbb0c815dde78018a5fede6b8d27d5d34"}, &(0x7f0000002c80)={0x20, 0x3, 0x1, 0x80}}) sendfile(r7, r4, &(0x7f0000002d00)=0x10000, 0x5) unlink(&(0x7f0000002d40)='./file0\x00') syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000002e40)={0x14, &(0x7f0000002d80)={0x20, 0x6, 0x4b, {0x4b, 0x4, "02ed8d763cc92c9c4a52fc66da74c92efb87cbc527178ce4f5496819cd829a73802425652c081892f62314860e63fed471ca112f8ba222c8c78219189ecbc01e9f69ada2f8d99d1bbb"}}, &(0x7f0000002e00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x420}}}, &(0x7f0000003180)={0x34, &(0x7f0000002e80)={0x0, 0x14, 0xdb, "13a2daae13a72eeb30708dc6e7109d0d485744d683fda0ead2eb65f13c191c4f597d532a752fcaef7dbae2717720e3ac1af91d0fedbb829eda56611f104b93b0e1f53b2aa28d03989ff8efbffb4e57e12a4c15f958a6a7f571021bcaea40a170900f98b35e6dba404c8f17a0583c370ed0033ab92054d610699d69632b4999bde59e03ee41576642a566abcf76e272abc14a50db3032d1d060977b8cd058960d2a4d1573b9b3ae4f154be6e49213fddcb8cffcaa29ae15708eeb6dddcc19e9e2425a222d5cd84a363d50e5fda78c5efb1e926575f58793795f3d4f"}, &(0x7f0000002f80)={0x0, 0xa, 0x1, 0x99}, &(0x7f0000002fc0)={0x0, 0x8, 0x1, 0x4d}, &(0x7f0000003000)={0x20, 0x0, 0xcc, {0xca, "2cde39f2a0ecfdd1a78f82b5920024429ae67bcf04a7e8add38ee9abb1cce46f9f6cd1b85b1e46eb702c00b80472c940897f7a77f0318512511ea2ee69ba15323814cadd51b101566bd220e2d91e0c7cffbf2f8525e242d39bafc22f92ceb1f0ef464da0bd95ffe5d9d592ce4e9030d858637b1f458c0fd742366ac297c58f4fca4ce59ce876a4bc09ed254e5b127c1a0c85ea8de476ccb0785e9e37977114498934e8252385d603589b8d008450595b6fd9f4084547c91e4b74bc1ca3fce9aed19897893bfb2b8b310b"}}, &(0x7f0000003100)={0x20, 0x1, 0x1, 0xa}, &(0x7f0000003140)={0x20, 0x0, 0x1, 0x9}}) executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0xff7ffff7) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') r4 = socket$unix(0x1, 0x1, 0x0) sendfile(r4, r3, &(0x7f0000000000)=0x11, 0x7) openat(r3, &(0x7f0000000200)='./file0\x00', 0x40000, 0x281) r5 = eventfd(0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xc8, 0x0, 0xc000000) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x30, r10, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r11}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}]}, 0x30}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) r12 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r12, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r13 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000240)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r1, 0x5bfe5000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000fc160a29aa3d2076d8c7bcfbc60a58f8d945e8678e3a25df16722f9e02d9e013abc196df72e6be93e8603fcf7647e29833ed04fae59add4b715eb765ed7a60d60543ff67888ff430e908594b8b03dbffd1708b61178a622ca91a05feabc0efb7d7d21a41239d079e7dde944046e62a66b0101a743687fe3d3e00b712e170a0e3777621b9ad8cf10336bdc70f19177b3d06e32e5d6ef2fa7ab4010af9ac7b82aecddd212d4132da395a87280f86d763ea", @ANYRES16=r16, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r14, @ANYBLOB], 0x20}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6c}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x124c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x137a}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x631}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x131c}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x5) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000280)={r2, 0x1fe, 0x2, r5}) executing program 5: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x709000, 0x0) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x202080, 0x89) linkat(r2, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00', 0xc00) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000140)={'TPROXY\x00'}, &(0x7f0000000180)=0x1e) (async) r4 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000840)={0x0, &(0x7f00000001c0)=[@cpuid={0x2, 0x18, {0x4, 0xf8e}}, @uexit={0x0, 0x18, 0x400}, @code={0x1, 0x5b, {"0f91af9d8a80470f20e035800000000f22e0260f7951fe262e0fc71e0f20d835080000000f22d866baf80cb8329b818fef66bafc0c66edf226260f09c40149753ac461795acef3430f32"}}, @uexit={0x0, 0x18, 0xa1}, @uexit={0x0, 0x18, 0x8000000000000001}, @uexit={0x0, 0x18, 0x3}, @cpuid={0x2, 0x18, {0xb20b, 0x52f}}, @cpuid={0x2, 0x18, {0x869, 0xb56}}, @code={0x1, 0x6e, {"c4e14dee1ab9b70b00000f32c74424002b010000c744240213970000ff2c24b98d0800000f328f0950012867650f381d1766f2f267e2bd66450fc77327c7442400d1be0000c744240200100000c7442406000000000f011c24440f0002"}}, @cpuid={0x2, 0x18, {0x3}}, @cpuid={0x2, 0x18, {0xe81a, 0x8}}, @code={0x1, 0x60, {"66baf80cb8b2405b81ef66bafc0c66ed450f220366ba2000edc4034542fe000f214166470f00d936f2420f1ed1660fd07e1066ba6100b800100000efc74424001d010000c7442402f9310000ff2c24"}}, @uexit={0x0, 0x18, 0xd6dc}, @code={0x1, 0x5e, {"66baa000b80d000000ef0fc71b0f01cfb9b7090000b80d000000ba000000000f30c402b12949f766400f383805008000006466460f6d2ce8b805000000b924b900000f01c1410fe311430f01c8"}}, @uexit={0x0, 0x18, 0x8}, @code={0x1, 0x58, {"2e410d3771f8e266ba420066b8080066ef8fe8188e7a0f00c48131657900c482293df06544f4c42179de2e400f30b9800000c00f3235004000000f300f20d835200000000f22d8"}}, @uexit={0x0, 0x18}, @cpuid={0x2, 0x18, {0x5, 0xd}}, @code={0x1, 0x76, {"b9800000c00f3235008000000f3066baf80cb8d464938def66bafc0cb800700000ef4a0fc71e430f01c8f20f2b6e0d450f07b9ad020000b847c20000ba000000000f3048b866000000000000000f23c00f21f835030009000f23f80f01c88f09909564215d"}}, @code={0x1, 0x80, {"48b800900000000000000f23c00f21f83502000d000f23f866b8c8008ed8260f09c744240000c0ffffc744240200600000c7442406000000000f011424660f3a0f469b1248b87b780000000000000f23d80f21f835400000000f23f864470fd4dc66b8ad008ec066bad004ec0f2107"}}, @code={0x1, 0x58, {"b9c10b0000b89e1f0000ba000000000f300f7948d766ba4100edb945080000b8d6000000ba000000000f3046040366b806018ee80f52b6006000000f01c366ba4300ed360f01ca"}}, @uexit={0x0, 0x18, 0x7}, @code={0x1, 0x61, {"430f2385c4027d1300c4e3d57ce30066440f38808868360000c4821902a50058000066410f15680f66ba430066ed66b846000f00d80f01c348b801000000000000000f23c80f21f835080010000f23f8"}}, @code={0x1, 0x44, {"b8010000000f01d966baa10066ed8f2868ec77160a440f01d1c4c25d45a00e000000f30f1efb660fe0f9f30fc7360f1f00d9e0"}}, @code={0x1, 0x8d, {"66b898008ee8b805000000b96a7600000f01c1c7442400c2410000c7442402a8000000c7442406000000000f011c2466ba4100ed640f0766420fc5c3d766baf80cb88f8df58fef66bafc0cecb926030000b8fcffffffbaffffffff0f300f20e4c7442400e4480000c74424020a000000c7442406000000000f011424"}}, @cpuid={0x2, 0x18, {0x8, 0x1}}, @code={0x1, 0x48, {"64470f30450f01ca400f32c4a27d784e92f30fb88807000000440f20c03507000000440f22c066bad004ecc441fa1666d166f20f350f32"}}, @code={0x1, 0x69, {"c744240021000000c744240200800000ff1c24b9e60900000f3266baf80cb83c6fb18fef66bafc0cb800080000ef660f388133470f0131440f07b9800000c00f3235002000000f3066420fc733c4e27d254e0026663e0f32"}}], 0x678}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000880)={'vcan0\x00'}) recvmmsg(r1, &(0x7f0000005a40)=[{{&(0x7f00000008c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000940)=""/192, 0xc0}], 0x1, &(0x7f0000000a40)=""/145, 0x91}, 0x6}, {{&(0x7f0000000b00)=@caif, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000b80)=""/113, 0x71}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/101, 0x65}, {0x0}], 0x4, &(0x7f0000001cc0)=""/212, 0xd4}, 0x87}, {{&(0x7f0000001dc0)=@un=@abs, 0x80, &(0x7f0000002080)=[{&(0x7f0000001e40)=""/3, 0x3}, {&(0x7f0000001e80)=""/172, 0xac}, {&(0x7f0000001f40)=""/2, 0x2}, {&(0x7f0000001f80)=""/5, 0x5}, {&(0x7f0000001fc0)=""/130, 0x82}], 0x5}, 0x3ff}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/93, 0x5d}, {&(0x7f0000003180)=""/36, 0x24}, {&(0x7f00000031c0)=""/84, 0x54}, {&(0x7f0000003240)=""/172, 0xac}], 0x5, &(0x7f0000003380)=""/148, 0x94}}, {{&(0x7f0000003440)=@generic, 0x80, &(0x7f0000003640)=[{&(0x7f00000034c0)=""/70, 0x46}, {&(0x7f0000003540)=""/84, 0x54}, {&(0x7f00000035c0)=""/114, 0x72}], 0x3, &(0x7f0000003680)=""/70, 0x46}, 0x7}, {{&(0x7f0000003700)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003780)=""/243, 0xf3}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)}, {&(0x7f00000048c0)=""/6, 0x6}, {&(0x7f0000004900)=""/104, 0x68}, {&(0x7f0000004980)=""/47, 0x2f}], 0x6, &(0x7f0000004a40)=""/4096, 0x1000}, 0x9}], 0x6, 0x10040, &(0x7f0000005bc0)={0x0, 0x989680}) (async, rerun: 64) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (rerun: 64) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000005c00)={0x0, 0x9, 0x0, [0x1, 0xb7, 0x7fffffff, 0xaeef, 0x6], [0x8, 0x5, 0x9a4d, 0x7fff, 0x5, 0x4, 0x0, 0x9, 0x5314, 0x3, 0x7fffffff, 0x9, 0x2, 0x7ff, 0x2, 0x9, 0xe464, 0xb5, 0xb, 0xd, 0x8, 0x69d, 0x5c, 0x3, 0x9, 0x80000001, 0xfffffffffffffffc, 0xfffffffffffffff7, 0x3, 0x4, 0x9, 0x9, 0x3, 0xd, 0x9, 0x7fff, 0xfffffffffffffffa, 0x1, 0x800, 0x7ff, 0x9, 0x100000001, 0xfffffffffffffffa, 0x4, 0x9, 0x7f, 0x100000001, 0xffffffffffffffc0, 0x39, 0x1, 0x2, 0x2, 0x7, 0xfffffffffffffff4, 0x9, 0x8, 0x8000000000000001, 0xd, 0x8, 0x8, 0x2, 0x5, 0x55, 0xfffffffffffffff7, 0x1, 0x2, 0xd1, 0xe, 0xfff, 0x2, 0xffffffffffffffff, 0x1, 0xffff, 0x1, 0x8, 0x62, 0xfffffffffffffffe, 0xf000000000000000, 0x9, 0x7, 0x9, 0x7, 0x81, 0xffffffffffffffb7, 0x8, 0x5, 0x2, 0x9, 0x2, 0x99, 0xd, 0x7, 0x5a3b, 0x8, 0x50000, 0x0, 0x9, 0x7fffffff, 0x5, 0x6, 0x4, 0xe, 0xffff, 0x10000, 0xe, 0x9, 0xfffffffffffffff9, 0x2, 0x5, 0xfc1, 0xfff, 0x10, 0x7fb0, 0x9, 0x1, 0x5, 0x3, 0xfffffffffffffffa, 0x0, 0x8253, 0x4]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000006040)={r8, 0xffff, 0x1, [0x7fffffffffffffff, 0x2, 0x1, 0xf61, 0xfffffffffffffff8], [0x6, 0x400, 0x8, 0xd800000000000000, 0x7fffffff, 0x4, 0x4, 0x1, 0x2, 0x9, 0x80000001, 0x1ff, 0x3, 0x800, 0x5, 0xff, 0x3f4a, 0xa, 0x5, 0x9cbf, 0x1, 0xfffffffffffffffe, 0x7, 0x2, 0x2, 0x2, 0xffffffffffffff01, 0x1, 0x3, 0xb4c0000000000, 0x5, 0x6, 0x3, 0x4, 0x7, 0x3, 0x9, 0x10, 0x0, 0xb, 0x80, 0x73, 0x5, 0x5, 0x8, 0x1c000, 0x7, 0x525, 0x0, 0xf, 0x8000, 0x4894e478, 0x9, 0x9, 0xe066, 0x5, 0x6, 0x2, 0x5, 0x3, 0x1, 0xfffffffffffffffc, 0x0, 0x3, 0x2, 0x2, 0x7, 0xfff, 0x6, 0x1, 0x5, 0x5, 0xfffffffffffffff9, 0xfc80, 0x4, 0x7, 0xffff, 0x3e, 0xca3, 0x9, 0x2, 0x80000001, 0x81, 0x3, 0x3, 0x8000000000000000, 0x0, 0x40, 0x3, 0x8000, 0x100000001, 0x2, 0x7, 0x81, 0x1ff, 0x9, 0x18, 0x0, 0x7, 0x101, 0xa0, 0x6, 0xe, 0x1, 0x7, 0x0, 0x101, 0x200, 0x5, 0xf61, 0x4e41, 0x1, 0x100000000, 0x5, 0x2, 0xe, 0x3, 0x4, 0x2, 0x5, 0x9]}) (async) r9 = eventfd(0x81) (async, rerun: 64) r10 = syz_open_procfs(0x0, &(0x7f0000006480)='clear_refs\x00') (rerun: 64) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f00000064c0)={r9, 0x9, 0x0, r10}) r11 = getuid() (async) fstat(r7, &(0x7f0000006540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000006500)='./file0\x00', r11, r13) (async) r14 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000065c0), 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r14, 0x65, 0x2, &(0x7f0000006600)=0x80000000, 0x4) (async) getsockopt$IPT_SO_GET_REVISION_MATCH(r14, 0x0, 0x42, &(0x7f0000006640)={'HL\x00'}, &(0x7f0000006680)=0x1e) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r10, 0x54a2) pipe(&(0x7f00000066c0)) (async) getsockopt$inet_IP_XFRM_POLICY(r14, 0x0, 0x11, &(0x7f0000006780)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@private1}}, &(0x7f0000006880)=0xe8) setxattr$system_posix_acl(&(0x7f0000006700)='./file0\x00', &(0x7f0000006740)='system.posix_acl_access\x00', &(0x7f00000068c0)={{}, {0x1, 0x6}, [{0x2, 0x1, r12}, {0x2, 0x2, r11}, {0x2, 0x0, r12}, {0x2, 0x3, r15}], {0x4, 0x6}, [{0x8, 0x6, r13}, {0x8, 0x2, r13}, {0x8, 0x0, r13}, {0x8, 0x3, r13}], {0x10, 0x5}, {0x20, 0x5}}, 0x64, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000006940)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000006980)=0x2c) program crashed: WARNING in kvm_put_kvm bisect: the chunk can be dropped bisect: split chunks (needed=true): <4> bisect: split chunk #0 of len 4 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 30] detailed listing: executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0xff7ffff7) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') r4 = socket$unix(0x1, 0x1, 0x0) sendfile(r4, r3, &(0x7f0000000000)=0x11, 0x7) openat(r3, &(0x7f0000000200)='./file0\x00', 0x40000, 0x281) r5 = eventfd(0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xc8, 0x0, 0xc000000) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x30, r10, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r11}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}]}, 0x30}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) r12 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r12, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r13 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000240)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r1, 0x5bfe5000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000fc160a29aa3d2076d8c7bcfbc60a58f8d945e8678e3a25df16722f9e02d9e013abc196df72e6be93e8603fcf7647e29833ed04fae59add4b715eb765ed7a60d60543ff67888ff430e908594b8b03dbffd1708b61178a622ca91a05feabc0efb7d7d21a41239d079e7dde944046e62a66b0101a743687fe3d3e00b712e170a0e3777621b9ad8cf10336bdc70f19177b3d06e32e5d6ef2fa7ab4010af9ac7b82aecddd212d4132da395a87280f86d763ea", @ANYRES16=r16, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r14, @ANYBLOB], 0x20}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6c}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x124c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x137a}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x631}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x131c}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x5) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000280)={r2, 0x1fe, 0x2, r5}) executing program 5: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x709000, 0x0) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x202080, 0x89) linkat(r2, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00', 0xc00) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000140)={'TPROXY\x00'}, &(0x7f0000000180)=0x1e) (async) r4 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000840)={0x0, &(0x7f00000001c0)=[@cpuid={0x2, 0x18, {0x4, 0xf8e}}, @uexit={0x0, 0x18, 0x400}, @code={0x1, 0x5b, {"0f91af9d8a80470f20e035800000000f22e0260f7951fe262e0fc71e0f20d835080000000f22d866baf80cb8329b818fef66bafc0c66edf226260f09c40149753ac461795acef3430f32"}}, @uexit={0x0, 0x18, 0xa1}, @uexit={0x0, 0x18, 0x8000000000000001}, @uexit={0x0, 0x18, 0x3}, @cpuid={0x2, 0x18, {0xb20b, 0x52f}}, @cpuid={0x2, 0x18, {0x869, 0xb56}}, @code={0x1, 0x6e, {"c4e14dee1ab9b70b00000f32c74424002b010000c744240213970000ff2c24b98d0800000f328f0950012867650f381d1766f2f267e2bd66450fc77327c7442400d1be0000c744240200100000c7442406000000000f011c24440f0002"}}, @cpuid={0x2, 0x18, {0x3}}, @cpuid={0x2, 0x18, {0xe81a, 0x8}}, @code={0x1, 0x60, {"66baf80cb8b2405b81ef66bafc0c66ed450f220366ba2000edc4034542fe000f214166470f00d936f2420f1ed1660fd07e1066ba6100b800100000efc74424001d010000c7442402f9310000ff2c24"}}, @uexit={0x0, 0x18, 0xd6dc}, @code={0x1, 0x5e, {"66baa000b80d000000ef0fc71b0f01cfb9b7090000b80d000000ba000000000f30c402b12949f766400f383805008000006466460f6d2ce8b805000000b924b900000f01c1410fe311430f01c8"}}, @uexit={0x0, 0x18, 0x8}, @code={0x1, 0x58, {"2e410d3771f8e266ba420066b8080066ef8fe8188e7a0f00c48131657900c482293df06544f4c42179de2e400f30b9800000c00f3235004000000f300f20d835200000000f22d8"}}, @uexit={0x0, 0x18}, @cpuid={0x2, 0x18, {0x5, 0xd}}, @code={0x1, 0x76, {"b9800000c00f3235008000000f3066baf80cb8d464938def66bafc0cb800700000ef4a0fc71e430f01c8f20f2b6e0d450f07b9ad020000b847c20000ba000000000f3048b866000000000000000f23c00f21f835030009000f23f80f01c88f09909564215d"}}, @code={0x1, 0x80, {"48b800900000000000000f23c00f21f83502000d000f23f866b8c8008ed8260f09c744240000c0ffffc744240200600000c7442406000000000f011424660f3a0f469b1248b87b780000000000000f23d80f21f835400000000f23f864470fd4dc66b8ad008ec066bad004ec0f2107"}}, @code={0x1, 0x58, {"b9c10b0000b89e1f0000ba000000000f300f7948d766ba4100edb945080000b8d6000000ba000000000f3046040366b806018ee80f52b6006000000f01c366ba4300ed360f01ca"}}, @uexit={0x0, 0x18, 0x7}, @code={0x1, 0x61, {"430f2385c4027d1300c4e3d57ce30066440f38808868360000c4821902a50058000066410f15680f66ba430066ed66b846000f00d80f01c348b801000000000000000f23c80f21f835080010000f23f8"}}, @code={0x1, 0x44, {"b8010000000f01d966baa10066ed8f2868ec77160a440f01d1c4c25d45a00e000000f30f1efb660fe0f9f30fc7360f1f00d9e0"}}, @code={0x1, 0x8d, {"66b898008ee8b805000000b96a7600000f01c1c7442400c2410000c7442402a8000000c7442406000000000f011c2466ba4100ed640f0766420fc5c3d766baf80cb88f8df58fef66bafc0cecb926030000b8fcffffffbaffffffff0f300f20e4c7442400e4480000c74424020a000000c7442406000000000f011424"}}, @cpuid={0x2, 0x18, {0x8, 0x1}}, @code={0x1, 0x48, {"64470f30450f01ca400f32c4a27d784e92f30fb88807000000440f20c03507000000440f22c066bad004ecc441fa1666d166f20f350f32"}}, @code={0x1, 0x69, {"c744240021000000c744240200800000ff1c24b9e60900000f3266baf80cb83c6fb18fef66bafc0cb800080000ef660f388133470f0131440f07b9800000c00f3235002000000f3066420fc733c4e27d254e0026663e0f32"}}], 0x678}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000880)={'vcan0\x00'}) recvmmsg(r1, &(0x7f0000005a40)=[{{&(0x7f00000008c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000940)=""/192, 0xc0}], 0x1, &(0x7f0000000a40)=""/145, 0x91}, 0x6}, {{&(0x7f0000000b00)=@caif, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000b80)=""/113, 0x71}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/101, 0x65}, {0x0}], 0x4, &(0x7f0000001cc0)=""/212, 0xd4}, 0x87}, {{&(0x7f0000001dc0)=@un=@abs, 0x80, &(0x7f0000002080)=[{&(0x7f0000001e40)=""/3, 0x3}, {&(0x7f0000001e80)=""/172, 0xac}, {&(0x7f0000001f40)=""/2, 0x2}, {&(0x7f0000001f80)=""/5, 0x5}, {&(0x7f0000001fc0)=""/130, 0x82}], 0x5}, 0x3ff}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/93, 0x5d}, {&(0x7f0000003180)=""/36, 0x24}, {&(0x7f00000031c0)=""/84, 0x54}, {&(0x7f0000003240)=""/172, 0xac}], 0x5, &(0x7f0000003380)=""/148, 0x94}}, {{&(0x7f0000003440)=@generic, 0x80, &(0x7f0000003640)=[{&(0x7f00000034c0)=""/70, 0x46}, {&(0x7f0000003540)=""/84, 0x54}, {&(0x7f00000035c0)=""/114, 0x72}], 0x3, &(0x7f0000003680)=""/70, 0x46}, 0x7}, {{&(0x7f0000003700)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003780)=""/243, 0xf3}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)}, {&(0x7f00000048c0)=""/6, 0x6}, {&(0x7f0000004900)=""/104, 0x68}, {&(0x7f0000004980)=""/47, 0x2f}], 0x6, &(0x7f0000004a40)=""/4096, 0x1000}, 0x9}], 0x6, 0x10040, &(0x7f0000005bc0)={0x0, 0x989680}) (async, rerun: 64) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (rerun: 64) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000005c00)={0x0, 0x9, 0x0, [0x1, 0xb7, 0x7fffffff, 0xaeef, 0x6], [0x8, 0x5, 0x9a4d, 0x7fff, 0x5, 0x4, 0x0, 0x9, 0x5314, 0x3, 0x7fffffff, 0x9, 0x2, 0x7ff, 0x2, 0x9, 0xe464, 0xb5, 0xb, 0xd, 0x8, 0x69d, 0x5c, 0x3, 0x9, 0x80000001, 0xfffffffffffffffc, 0xfffffffffffffff7, 0x3, 0x4, 0x9, 0x9, 0x3, 0xd, 0x9, 0x7fff, 0xfffffffffffffffa, 0x1, 0x800, 0x7ff, 0x9, 0x100000001, 0xfffffffffffffffa, 0x4, 0x9, 0x7f, 0x100000001, 0xffffffffffffffc0, 0x39, 0x1, 0x2, 0x2, 0x7, 0xfffffffffffffff4, 0x9, 0x8, 0x8000000000000001, 0xd, 0x8, 0x8, 0x2, 0x5, 0x55, 0xfffffffffffffff7, 0x1, 0x2, 0xd1, 0xe, 0xfff, 0x2, 0xffffffffffffffff, 0x1, 0xffff, 0x1, 0x8, 0x62, 0xfffffffffffffffe, 0xf000000000000000, 0x9, 0x7, 0x9, 0x7, 0x81, 0xffffffffffffffb7, 0x8, 0x5, 0x2, 0x9, 0x2, 0x99, 0xd, 0x7, 0x5a3b, 0x8, 0x50000, 0x0, 0x9, 0x7fffffff, 0x5, 0x6, 0x4, 0xe, 0xffff, 0x10000, 0xe, 0x9, 0xfffffffffffffff9, 0x2, 0x5, 0xfc1, 0xfff, 0x10, 0x7fb0, 0x9, 0x1, 0x5, 0x3, 0xfffffffffffffffa, 0x0, 0x8253, 0x4]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000006040)={r8, 0xffff, 0x1, [0x7fffffffffffffff, 0x2, 0x1, 0xf61, 0xfffffffffffffff8], [0x6, 0x400, 0x8, 0xd800000000000000, 0x7fffffff, 0x4, 0x4, 0x1, 0x2, 0x9, 0x80000001, 0x1ff, 0x3, 0x800, 0x5, 0xff, 0x3f4a, 0xa, 0x5, 0x9cbf, 0x1, 0xfffffffffffffffe, 0x7, 0x2, 0x2, 0x2, 0xffffffffffffff01, 0x1, 0x3, 0xb4c0000000000, 0x5, 0x6, 0x3, 0x4, 0x7, 0x3, 0x9, 0x10, 0x0, 0xb, 0x80, 0x73, 0x5, 0x5, 0x8, 0x1c000, 0x7, 0x525, 0x0, 0xf, 0x8000, 0x4894e478, 0x9, 0x9, 0xe066, 0x5, 0x6, 0x2, 0x5, 0x3, 0x1, 0xfffffffffffffffc, 0x0, 0x3, 0x2, 0x2, 0x7, 0xfff, 0x6, 0x1, 0x5, 0x5, 0xfffffffffffffff9, 0xfc80, 0x4, 0x7, 0xffff, 0x3e, 0xca3, 0x9, 0x2, 0x80000001, 0x81, 0x3, 0x3, 0x8000000000000000, 0x0, 0x40, 0x3, 0x8000, 0x100000001, 0x2, 0x7, 0x81, 0x1ff, 0x9, 0x18, 0x0, 0x7, 0x101, 0xa0, 0x6, 0xe, 0x1, 0x7, 0x0, 0x101, 0x200, 0x5, 0xf61, 0x4e41, 0x1, 0x100000000, 0x5, 0x2, 0xe, 0x3, 0x4, 0x2, 0x5, 0x9]}) (async) r9 = eventfd(0x81) (async, rerun: 64) r10 = syz_open_procfs(0x0, &(0x7f0000006480)='clear_refs\x00') (rerun: 64) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f00000064c0)={r9, 0x9, 0x0, r10}) r11 = getuid() (async) fstat(r7, &(0x7f0000006540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000006500)='./file0\x00', r11, r13) (async) r14 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000065c0), 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r14, 0x65, 0x2, &(0x7f0000006600)=0x80000000, 0x4) (async) getsockopt$IPT_SO_GET_REVISION_MATCH(r14, 0x0, 0x42, &(0x7f0000006640)={'HL\x00'}, &(0x7f0000006680)=0x1e) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r10, 0x54a2) pipe(&(0x7f00000066c0)) (async) getsockopt$inet_IP_XFRM_POLICY(r14, 0x0, 0x11, &(0x7f0000006780)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@private1}}, &(0x7f0000006880)=0xe8) setxattr$system_posix_acl(&(0x7f0000006700)='./file0\x00', &(0x7f0000006740)='system.posix_acl_access\x00', &(0x7f00000068c0)={{}, {0x1, 0x6}, [{0x2, 0x1, r12}, {0x2, 0x2, r11}, {0x2, 0x0, r12}, {0x2, 0x3, r15}], {0x4, 0x6}, [{0x8, 0x6, r13}, {0x8, 0x2, r13}, {0x8, 0x0, r13}, {0x8, 0x3, r13}], {0x10, 0x5}, {0x20, 0x5}}, 0x64, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000006940)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000006980)=0x2c) program crashed: WARNING in kvm_put_kvm bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-socket$can_raw-mkdir-open$dir-linkat-socket$inet6_tcp-getsockopt$IP6T_SO_GET_REVISION_TARGET-syz_kvm_setup_syzos_vm$x86-syz_kvm_add_vcpu$x86-ioctl$ifreq_SIOCGIFINDEX_vcan-recvmmsg-ioctl$KVM_CREATE_VM-socket$nl_xfrm-ioctl$BTRFS_IOC_GET_DEV_STATS-ioctl$BTRFS_IOC_GET_DEV_STATS-eventfd-syz_open_procfs-ioctl$KVM_IRQFD-getuid-fstat-chown-openat$selinux_mls-setsockopt$CAN_RAW_ERR_FILTER-getsockopt$IPT_SO_GET_REVISION_MATCH-ioctl$SNDRV_TIMER_IOCTL_CONTINUE-pipe-getsockopt$inet_IP_XFRM_POLICY-setxattr$system_posix_acl-socket$nl_generic-getsockopt$IP_SET_OP_GET_FNAME detailed listing: executing program 5: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x709000, 0x0) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x202080, 0x89) linkat(r2, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00', 0xc00) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000140)={'TPROXY\x00'}, &(0x7f0000000180)=0x1e) (async) r4 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000840)={0x0, &(0x7f00000001c0)=[@cpuid={0x2, 0x18, {0x4, 0xf8e}}, @uexit={0x0, 0x18, 0x400}, @code={0x1, 0x5b, {"0f91af9d8a80470f20e035800000000f22e0260f7951fe262e0fc71e0f20d835080000000f22d866baf80cb8329b818fef66bafc0c66edf226260f09c40149753ac461795acef3430f32"}}, @uexit={0x0, 0x18, 0xa1}, @uexit={0x0, 0x18, 0x8000000000000001}, @uexit={0x0, 0x18, 0x3}, @cpuid={0x2, 0x18, {0xb20b, 0x52f}}, @cpuid={0x2, 0x18, {0x869, 0xb56}}, @code={0x1, 0x6e, {"c4e14dee1ab9b70b00000f32c74424002b010000c744240213970000ff2c24b98d0800000f328f0950012867650f381d1766f2f267e2bd66450fc77327c7442400d1be0000c744240200100000c7442406000000000f011c24440f0002"}}, @cpuid={0x2, 0x18, {0x3}}, @cpuid={0x2, 0x18, {0xe81a, 0x8}}, @code={0x1, 0x60, {"66baf80cb8b2405b81ef66bafc0c66ed450f220366ba2000edc4034542fe000f214166470f00d936f2420f1ed1660fd07e1066ba6100b800100000efc74424001d010000c7442402f9310000ff2c24"}}, @uexit={0x0, 0x18, 0xd6dc}, @code={0x1, 0x5e, {"66baa000b80d000000ef0fc71b0f01cfb9b7090000b80d000000ba000000000f30c402b12949f766400f383805008000006466460f6d2ce8b805000000b924b900000f01c1410fe311430f01c8"}}, @uexit={0x0, 0x18, 0x8}, @code={0x1, 0x58, {"2e410d3771f8e266ba420066b8080066ef8fe8188e7a0f00c48131657900c482293df06544f4c42179de2e400f30b9800000c00f3235004000000f300f20d835200000000f22d8"}}, @uexit={0x0, 0x18}, @cpuid={0x2, 0x18, {0x5, 0xd}}, @code={0x1, 0x76, {"b9800000c00f3235008000000f3066baf80cb8d464938def66bafc0cb800700000ef4a0fc71e430f01c8f20f2b6e0d450f07b9ad020000b847c20000ba000000000f3048b866000000000000000f23c00f21f835030009000f23f80f01c88f09909564215d"}}, @code={0x1, 0x80, {"48b800900000000000000f23c00f21f83502000d000f23f866b8c8008ed8260f09c744240000c0ffffc744240200600000c7442406000000000f011424660f3a0f469b1248b87b780000000000000f23d80f21f835400000000f23f864470fd4dc66b8ad008ec066bad004ec0f2107"}}, @code={0x1, 0x58, {"b9c10b0000b89e1f0000ba000000000f300f7948d766ba4100edb945080000b8d6000000ba000000000f3046040366b806018ee80f52b6006000000f01c366ba4300ed360f01ca"}}, @uexit={0x0, 0x18, 0x7}, @code={0x1, 0x61, {"430f2385c4027d1300c4e3d57ce30066440f38808868360000c4821902a50058000066410f15680f66ba430066ed66b846000f00d80f01c348b801000000000000000f23c80f21f835080010000f23f8"}}, @code={0x1, 0x44, {"b8010000000f01d966baa10066ed8f2868ec77160a440f01d1c4c25d45a00e000000f30f1efb660fe0f9f30fc7360f1f00d9e0"}}, @code={0x1, 0x8d, {"66b898008ee8b805000000b96a7600000f01c1c7442400c2410000c7442402a8000000c7442406000000000f011c2466ba4100ed640f0766420fc5c3d766baf80cb88f8df58fef66bafc0cecb926030000b8fcffffffbaffffffff0f300f20e4c7442400e4480000c74424020a000000c7442406000000000f011424"}}, @cpuid={0x2, 0x18, {0x8, 0x1}}, @code={0x1, 0x48, {"64470f30450f01ca400f32c4a27d784e92f30fb88807000000440f20c03507000000440f22c066bad004ecc441fa1666d166f20f350f32"}}, @code={0x1, 0x69, {"c744240021000000c744240200800000ff1c24b9e60900000f3266baf80cb83c6fb18fef66bafc0cb800080000ef660f388133470f0131440f07b9800000c00f3235002000000f3066420fc733c4e27d254e0026663e0f32"}}], 0x678}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000880)={'vcan0\x00'}) recvmmsg(r1, &(0x7f0000005a40)=[{{&(0x7f00000008c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000940)=""/192, 0xc0}], 0x1, &(0x7f0000000a40)=""/145, 0x91}, 0x6}, {{&(0x7f0000000b00)=@caif, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000b80)=""/113, 0x71}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/101, 0x65}, {0x0}], 0x4, &(0x7f0000001cc0)=""/212, 0xd4}, 0x87}, {{&(0x7f0000001dc0)=@un=@abs, 0x80, &(0x7f0000002080)=[{&(0x7f0000001e40)=""/3, 0x3}, {&(0x7f0000001e80)=""/172, 0xac}, {&(0x7f0000001f40)=""/2, 0x2}, {&(0x7f0000001f80)=""/5, 0x5}, {&(0x7f0000001fc0)=""/130, 0x82}], 0x5}, 0x3ff}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/93, 0x5d}, {&(0x7f0000003180)=""/36, 0x24}, {&(0x7f00000031c0)=""/84, 0x54}, {&(0x7f0000003240)=""/172, 0xac}], 0x5, &(0x7f0000003380)=""/148, 0x94}}, {{&(0x7f0000003440)=@generic, 0x80, &(0x7f0000003640)=[{&(0x7f00000034c0)=""/70, 0x46}, {&(0x7f0000003540)=""/84, 0x54}, {&(0x7f00000035c0)=""/114, 0x72}], 0x3, &(0x7f0000003680)=""/70, 0x46}, 0x7}, {{&(0x7f0000003700)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003780)=""/243, 0xf3}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)}, {&(0x7f00000048c0)=""/6, 0x6}, {&(0x7f0000004900)=""/104, 0x68}, {&(0x7f0000004980)=""/47, 0x2f}], 0x6, &(0x7f0000004a40)=""/4096, 0x1000}, 0x9}], 0x6, 0x10040, &(0x7f0000005bc0)={0x0, 0x989680}) (async, rerun: 64) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (rerun: 64) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000005c00)={0x0, 0x9, 0x0, [0x1, 0xb7, 0x7fffffff, 0xaeef, 0x6], [0x8, 0x5, 0x9a4d, 0x7fff, 0x5, 0x4, 0x0, 0x9, 0x5314, 0x3, 0x7fffffff, 0x9, 0x2, 0x7ff, 0x2, 0x9, 0xe464, 0xb5, 0xb, 0xd, 0x8, 0x69d, 0x5c, 0x3, 0x9, 0x80000001, 0xfffffffffffffffc, 0xfffffffffffffff7, 0x3, 0x4, 0x9, 0x9, 0x3, 0xd, 0x9, 0x7fff, 0xfffffffffffffffa, 0x1, 0x800, 0x7ff, 0x9, 0x100000001, 0xfffffffffffffffa, 0x4, 0x9, 0x7f, 0x100000001, 0xffffffffffffffc0, 0x39, 0x1, 0x2, 0x2, 0x7, 0xfffffffffffffff4, 0x9, 0x8, 0x8000000000000001, 0xd, 0x8, 0x8, 0x2, 0x5, 0x55, 0xfffffffffffffff7, 0x1, 0x2, 0xd1, 0xe, 0xfff, 0x2, 0xffffffffffffffff, 0x1, 0xffff, 0x1, 0x8, 0x62, 0xfffffffffffffffe, 0xf000000000000000, 0x9, 0x7, 0x9, 0x7, 0x81, 0xffffffffffffffb7, 0x8, 0x5, 0x2, 0x9, 0x2, 0x99, 0xd, 0x7, 0x5a3b, 0x8, 0x50000, 0x0, 0x9, 0x7fffffff, 0x5, 0x6, 0x4, 0xe, 0xffff, 0x10000, 0xe, 0x9, 0xfffffffffffffff9, 0x2, 0x5, 0xfc1, 0xfff, 0x10, 0x7fb0, 0x9, 0x1, 0x5, 0x3, 0xfffffffffffffffa, 0x0, 0x8253, 0x4]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000006040)={r8, 0xffff, 0x1, [0x7fffffffffffffff, 0x2, 0x1, 0xf61, 0xfffffffffffffff8], [0x6, 0x400, 0x8, 0xd800000000000000, 0x7fffffff, 0x4, 0x4, 0x1, 0x2, 0x9, 0x80000001, 0x1ff, 0x3, 0x800, 0x5, 0xff, 0x3f4a, 0xa, 0x5, 0x9cbf, 0x1, 0xfffffffffffffffe, 0x7, 0x2, 0x2, 0x2, 0xffffffffffffff01, 0x1, 0x3, 0xb4c0000000000, 0x5, 0x6, 0x3, 0x4, 0x7, 0x3, 0x9, 0x10, 0x0, 0xb, 0x80, 0x73, 0x5, 0x5, 0x8, 0x1c000, 0x7, 0x525, 0x0, 0xf, 0x8000, 0x4894e478, 0x9, 0x9, 0xe066, 0x5, 0x6, 0x2, 0x5, 0x3, 0x1, 0xfffffffffffffffc, 0x0, 0x3, 0x2, 0x2, 0x7, 0xfff, 0x6, 0x1, 0x5, 0x5, 0xfffffffffffffff9, 0xfc80, 0x4, 0x7, 0xffff, 0x3e, 0xca3, 0x9, 0x2, 0x80000001, 0x81, 0x3, 0x3, 0x8000000000000000, 0x0, 0x40, 0x3, 0x8000, 0x100000001, 0x2, 0x7, 0x81, 0x1ff, 0x9, 0x18, 0x0, 0x7, 0x101, 0xa0, 0x6, 0xe, 0x1, 0x7, 0x0, 0x101, 0x200, 0x5, 0xf61, 0x4e41, 0x1, 0x100000000, 0x5, 0x2, 0xe, 0x3, 0x4, 0x2, 0x5, 0x9]}) (async) r9 = eventfd(0x81) (async, rerun: 64) r10 = syz_open_procfs(0x0, &(0x7f0000006480)='clear_refs\x00') (rerun: 64) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f00000064c0)={r9, 0x9, 0x0, r10}) r11 = getuid() (async) fstat(r7, &(0x7f0000006540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000006500)='./file0\x00', r11, r13) (async) r14 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000065c0), 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r14, 0x65, 0x2, &(0x7f0000006600)=0x80000000, 0x4) (async) getsockopt$IPT_SO_GET_REVISION_MATCH(r14, 0x0, 0x42, &(0x7f0000006640)={'HL\x00'}, &(0x7f0000006680)=0x1e) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r10, 0x54a2) pipe(&(0x7f00000066c0)) (async) getsockopt$inet_IP_XFRM_POLICY(r14, 0x0, 0x11, &(0x7f0000006780)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@private1}}, &(0x7f0000006880)=0xe8) setxattr$system_posix_acl(&(0x7f0000006700)='./file0\x00', &(0x7f0000006740)='system.posix_acl_access\x00', &(0x7f00000068c0)={{}, {0x1, 0x6}, [{0x2, 0x1, r12}, {0x2, 0x2, r11}, {0x2, 0x0, r12}, {0x2, 0x3, r15}], {0x4, 0x6}, [{0x8, 0x6, r13}, {0x8, 0x2, r13}, {0x8, 0x0, r13}, {0x8, 0x3, r13}], {0x10, 0x5}, {0x20, 0x5}}, 0x64, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000006940)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000006980)=0x2c) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-syz_open_procfs-socket$unix-sendfile-openat-eventfd-syz_genetlink_get_family_id$nl80211-socket-setsockopt$MRT6_DEL_MIF-socket$inet-socket$nl_generic-syz_genetlink_get_family_id$wireguard-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$WG_CMD_SET_DEVICE-setsockopt$ARPT_SO_SET_ADD_COUNTERS-socket$inet6-sendto$inet6-socket$inet_udplite-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-ioctl$UFFDIO_ZEROPAGE-syz_genetlink_get_family_id$ethtool-mmap-sendmsg$ETHTOOL_MSG_LINKINFO_SET-sendmsg$NL80211_CMD_CRIT_PROTOCOL_START-ioctl$KVM_IRQFD detailed listing: executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0xff7ffff7) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') r4 = socket$unix(0x1, 0x1, 0x0) sendfile(r4, r3, &(0x7f0000000000)=0x11, 0x7) openat(r3, &(0x7f0000000200)='./file0\x00', 0x40000, 0x281) r5 = eventfd(0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xc8, 0x0, 0xc000000) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x30, r10, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r11}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}]}, 0x30}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) r12 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r12, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r13 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000240)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r1, 0x5bfe5000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000fc160a29aa3d2076d8c7bcfbc60a58f8d945e8678e3a25df16722f9e02d9e013abc196df72e6be93e8603fcf7647e29833ed04fae59add4b715eb765ed7a60d60543ff67888ff430e908594b8b03dbffd1708b61178a622ca91a05feabc0efb7d7d21a41239d079e7dde944046e62a66b0101a743687fe3d3e00b712e170a0e3777621b9ad8cf10336bdc70f19177b3d06e32e5d6ef2fa7ab4010af9ac7b82aecddd212d4132da395a87280f86d763ea", @ANYRES16=r16, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r14, @ANYBLOB], 0x20}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6c}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x124c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x137a}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x631}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x131c}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x5) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000280)={r2, 0x1fe, 0x2, r5}) program crashed: WARNING in kvm_put_kvm bisect: the chunk can be dropped bisect: split chunks (needed=true): <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 1 programs left: executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0xff7ffff7) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') r4 = socket$unix(0x1, 0x1, 0x0) sendfile(r4, r3, &(0x7f0000000000)=0x11, 0x7) openat(r3, &(0x7f0000000200)='./file0\x00', 0x40000, 0x281) r5 = eventfd(0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xc8, 0x0, 0xc000000) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x30, r10, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r11}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}]}, 0x30}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) r12 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r12, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r13 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000240)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r1, 0x5bfe5000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000fc160a29aa3d2076d8c7bcfbc60a58f8d945e8678e3a25df16722f9e02d9e013abc196df72e6be93e8603fcf7647e29833ed04fae59add4b715eb765ed7a60d60543ff67888ff430e908594b8b03dbffd1708b61178a622ca91a05feabc0efb7d7d21a41239d079e7dde944046e62a66b0101a743687fe3d3e00b712e170a0e3777621b9ad8cf10336bdc70f19177b3d06e32e5d6ef2fa7ab4010af9ac7b82aecddd212d4132da395a87280f86d763ea", @ANYRES16=r16, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r14, @ANYBLOB], 0x20}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6c}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x124c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x137a}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x631}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x131c}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x5) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000280)={r2, 0x1fe, 0x2, r5}) bisect: trying to concatenate bisect: concatenate 1 entries testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-syz_open_procfs-socket$unix-sendfile-openat-eventfd-syz_genetlink_get_family_id$nl80211-socket-setsockopt$MRT6_DEL_MIF-socket$inet-socket$nl_generic-syz_genetlink_get_family_id$wireguard-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$WG_CMD_SET_DEVICE-setsockopt$ARPT_SO_SET_ADD_COUNTERS-socket$inet6-sendto$inet6-socket$inet_udplite-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-ioctl$UFFDIO_ZEROPAGE-syz_genetlink_get_family_id$ethtool-mmap-sendmsg$ETHTOOL_MSG_LINKINFO_SET-sendmsg$NL80211_CMD_CRIT_PROTOCOL_START-ioctl$KVM_IRQFD detailed listing: executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0xff7ffff7) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') r4 = socket$unix(0x1, 0x1, 0x0) sendfile(r4, r3, &(0x7f0000000000)=0x11, 0x7) openat(r3, &(0x7f0000000200)='./file0\x00', 0x40000, 0x281) r5 = eventfd(0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xc8, 0x0, 0xc000000) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x30, r10, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r11}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}]}, 0x30}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) r12 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r12, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r13 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000240)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r1, 0x5bfe5000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000fc160a29aa3d2076d8c7bcfbc60a58f8d945e8678e3a25df16722f9e02d9e013abc196df72e6be93e8603fcf7647e29833ed04fae59add4b715eb765ed7a60d60543ff67888ff430e908594b8b03dbffd1708b61178a622ca91a05feabc0efb7d7d21a41239d079e7dde944046e62a66b0101a743687fe3d3e00b712e170a0e3777621b9ad8cf10336bdc70f19177b3d06e32e5d6ef2fa7ab4010af9ac7b82aecddd212d4132da395a87280f86d763ea", @ANYRES16=r16, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r14, @ANYBLOB], 0x20}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6c}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x124c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x137a}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x631}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x131c}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x5) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000280)={r2, 0x1fe, 0x2, r5}) program crashed: WARNING in kvm_put_kvm bisect: concatenation succeeded found reproducer with 30 syscalls minimizing guilty program testing program (duration=49.843111098s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-syz_open_procfs-socket$unix-sendfile-openat-eventfd-syz_genetlink_get_family_id$nl80211-socket-setsockopt$MRT6_DEL_MIF-socket$inet-socket$nl_generic-syz_genetlink_get_family_id$wireguard-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$WG_CMD_SET_DEVICE-setsockopt$ARPT_SO_SET_ADD_COUNTERS-socket$inet6-sendto$inet6-socket$inet_udplite-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-ioctl$UFFDIO_ZEROPAGE-syz_genetlink_get_family_id$ethtool-mmap-sendmsg$ETHTOOL_MSG_LINKINFO_SET-sendmsg$NL80211_CMD_CRIT_PROTOCOL_START detailed listing: executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd(0xff7ffff7) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') r3 = socket$unix(0x1, 0x1, 0x0) sendfile(r3, r2, &(0x7f0000000000)=0x11, 0x7) openat(r2, &(0x7f0000000200)='./file0\x00', 0x40000, 0x281) eventfd(0x2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r7) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x30, r8, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r9}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}]}, 0x30}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) r10 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r10, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000240)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r1, 0x5bfe5000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000fc160a29aa3d2076d8c7bcfbc60a58f8d945e8678e3a25df16722f9e02d9e013abc196df72e6be93e8603fcf7647e29833ed04fae59add4b715eb765ed7a60d60543ff67888ff430e908594b8b03dbffd1708b61178a622ca91a05feabc0efb7d7d21a41239d079e7dde944046e62a66b0101a743687fe3d3e00b712e170a0e3777621b9ad8cf10336bdc70f19177b3d06e32e5d6ef2fa7ab4010af9ac7b82aecddd212d4132da395a87280f86d763ea", @ANYRES16=r14, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r12, @ANYBLOB], 0x20}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6c}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x124c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x137a}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x631}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x131c}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x5) program crashed: WARNING in kvm_put_kvm testing program (duration=49.843111098s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-syz_open_procfs-socket$unix-sendfile-openat-eventfd-syz_genetlink_get_family_id$nl80211-socket-setsockopt$MRT6_DEL_MIF-socket$inet-socket$nl_generic-syz_genetlink_get_family_id$wireguard-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$WG_CMD_SET_DEVICE-setsockopt$ARPT_SO_SET_ADD_COUNTERS-socket$inet6-sendto$inet6-socket$inet_udplite-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-ioctl$UFFDIO_ZEROPAGE-syz_genetlink_get_family_id$ethtool-mmap-sendmsg$ETHTOOL_MSG_LINKINFO_SET detailed listing: executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd(0xff7ffff7) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') r3 = socket$unix(0x1, 0x1, 0x0) sendfile(r3, r2, &(0x7f0000000000)=0x11, 0x7) openat(r2, &(0x7f0000000200)='./file0\x00', 0x40000, 0x281) eventfd(0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x30, r7, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r8}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}]}, 0x30}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) r9 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000240)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r1, 0x5bfe5000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000fc160a29aa3d2076d8c7bcfbc60a58f8d945e8678e3a25df16722f9e02d9e013abc196df72e6be93e8603fcf7647e29833ed04fae59add4b715eb765ed7a60d60543ff67888ff430e908594b8b03dbffd1708b61178a622ca91a05feabc0efb7d7d21a41239d079e7dde944046e62a66b0101a743687fe3d3e00b712e170a0e3777621b9ad8cf10336bdc70f19177b3d06e32e5d6ef2fa7ab4010af9ac7b82aecddd212d4132da395a87280f86d763ea", @ANYRES16=r13, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r11, @ANYBLOB], 0x20}}, 0x0) program crashed: WARNING in kvm_put_kvm testing program (duration=49.843111098s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-syz_open_procfs-socket$unix-sendfile-openat-eventfd-syz_genetlink_get_family_id$nl80211-socket-setsockopt$MRT6_DEL_MIF-socket$inet-socket$nl_generic-syz_genetlink_get_family_id$wireguard-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$WG_CMD_SET_DEVICE-setsockopt$ARPT_SO_SET_ADD_COUNTERS-socket$inet6-sendto$inet6-socket$inet_udplite-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-ioctl$UFFDIO_ZEROPAGE-syz_genetlink_get_family_id$ethtool-mmap detailed listing: executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd(0xff7ffff7) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') r3 = socket$unix(0x1, 0x1, 0x0) sendfile(r3, r2, &(0x7f0000000000)=0x11, 0x7) openat(r2, &(0x7f0000000200)='./file0\x00', 0x40000, 0x281) eventfd(0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x30, r7, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r8}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}]}, 0x30}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) r9 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000240)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r1, 0x5bfe5000) program crashed: WARNING in kvm_put_kvm testing program (duration=49.843111098s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-syz_open_procfs-socket$unix-sendfile-openat-eventfd-syz_genetlink_get_family_id$nl80211-socket-setsockopt$MRT6_DEL_MIF-socket$inet-socket$nl_generic-syz_genetlink_get_family_id$wireguard-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$WG_CMD_SET_DEVICE-setsockopt$ARPT_SO_SET_ADD_COUNTERS-socket$inet6-sendto$inet6-socket$inet_udplite-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-ioctl$UFFDIO_ZEROPAGE-syz_genetlink_get_family_id$ethtool detailed listing: executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd(0xff7ffff7) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') r3 = socket$unix(0x1, 0x1, 0x0) sendfile(r3, r2, &(0x7f0000000000)=0x11, 0x7) openat(r2, &(0x7f0000000200)='./file0\x00', 0x40000, 0x281) eventfd(0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x30, r7, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r8}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}]}, 0x30}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) r9 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000240)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) program crashed: WARNING in kvm_put_kvm testing program (duration=49.843111098s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-syz_open_procfs-socket$unix-sendfile-openat-eventfd-syz_genetlink_get_family_id$nl80211-socket-setsockopt$MRT6_DEL_MIF-socket$inet-socket$nl_generic-syz_genetlink_get_family_id$wireguard-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$WG_CMD_SET_DEVICE-setsockopt$ARPT_SO_SET_ADD_COUNTERS-socket$inet6-sendto$inet6-socket$inet_udplite-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-ioctl$UFFDIO_ZEROPAGE detailed listing: executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd(0xff7ffff7) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') r3 = socket$unix(0x1, 0x1, 0x0) sendfile(r3, r2, &(0x7f0000000000)=0x11, 0x7) openat(r2, &(0x7f0000000200)='./file0\x00', 0x40000, 0x281) eventfd(0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x30, r7, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r8}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}]}, 0x30}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) r9 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000240)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) program crashed: WARNING in kvm_put_kvm testing program (duration=49.843111098s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-syz_open_procfs-socket$unix-sendfile-openat-eventfd-syz_genetlink_get_family_id$nl80211-socket-setsockopt$MRT6_DEL_MIF-socket$inet-socket$nl_generic-syz_genetlink_get_family_id$wireguard-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$WG_CMD_SET_DEVICE-setsockopt$ARPT_SO_SET_ADD_COUNTERS-socket$inet6-sendto$inet6-socket$inet_udplite-ioctl$sock_SIOCGIFINDEX-socket$nl_generic detailed listing: executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd(0xff7ffff7) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') r3 = socket$unix(0x1, 0x1, 0x0) sendfile(r3, r2, &(0x7f0000000000)=0x11, 0x7) openat(r2, &(0x7f0000000200)='./file0\x00', 0x40000, 0x281) eventfd(0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x30, r7, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r8}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}]}, 0x30}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) r9 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) program crashed: WARNING in kvm_put_kvm testing program (duration=49.843111098s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-syz_open_procfs-socket$unix-sendfile-openat-eventfd-syz_genetlink_get_family_id$nl80211-socket-setsockopt$MRT6_DEL_MIF-socket$inet-socket$nl_generic-syz_genetlink_get_family_id$wireguard-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$WG_CMD_SET_DEVICE-setsockopt$ARPT_SO_SET_ADD_COUNTERS-socket$inet6-sendto$inet6-socket$inet_udplite-ioctl$sock_SIOCGIFINDEX detailed listing: executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd(0xff7ffff7) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') r3 = socket$unix(0x1, 0x1, 0x0) sendfile(r3, r2, &(0x7f0000000000)=0x11, 0x7) openat(r2, &(0x7f0000000200)='./file0\x00', 0x40000, 0x281) eventfd(0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x30, r7, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r8}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}]}, 0x30}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) r9 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) program crashed: WARNING in kvm_put_kvm testing program (duration=49.843111098s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-syz_open_procfs-socket$unix-sendfile-openat-eventfd-syz_genetlink_get_family_id$nl80211-socket-setsockopt$MRT6_DEL_MIF-socket$inet-socket$nl_generic-syz_genetlink_get_family_id$wireguard-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$WG_CMD_SET_DEVICE-setsockopt$ARPT_SO_SET_ADD_COUNTERS-socket$inet6-sendto$inet6-socket$inet_udplite detailed listing: executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd(0xff7ffff7) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') r3 = socket$unix(0x1, 0x1, 0x0) sendfile(r3, r2, &(0x7f0000000000)=0x11, 0x7) openat(r2, &(0x7f0000000200)='./file0\x00', 0x40000, 0x281) eventfd(0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x30, r7, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r8}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}]}, 0x30}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) r9 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) program crashed: WARNING in kvm_put_kvm testing program (duration=49.843111098s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-syz_open_procfs-socket$unix-sendfile-openat-eventfd-syz_genetlink_get_family_id$nl80211-socket-setsockopt$MRT6_DEL_MIF-socket$inet-socket$nl_generic-syz_genetlink_get_family_id$wireguard-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$WG_CMD_SET_DEVICE-setsockopt$ARPT_SO_SET_ADD_COUNTERS-socket$inet6-sendto$inet6 detailed listing: executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd(0xff7ffff7) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') r3 = socket$unix(0x1, 0x1, 0x0) sendfile(r3, r2, &(0x7f0000000000)=0x11, 0x7) openat(r2, &(0x7f0000000200)='./file0\x00', 0x40000, 0x281) eventfd(0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x30, r7, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r8}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}]}, 0x30}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) r9 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) program crashed: WARNING in kvm_put_kvm testing program (duration=49.843111098s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-syz_open_procfs-socket$unix-sendfile-openat-eventfd-syz_genetlink_get_family_id$nl80211-socket-setsockopt$MRT6_DEL_MIF-socket$inet-socket$nl_generic-syz_genetlink_get_family_id$wireguard-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$WG_CMD_SET_DEVICE-setsockopt$ARPT_SO_SET_ADD_COUNTERS-socket$inet6 detailed listing: executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd(0xff7ffff7) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') r3 = socket$unix(0x1, 0x1, 0x0) sendfile(r3, r2, &(0x7f0000000000)=0x11, 0x7) openat(r2, &(0x7f0000000200)='./file0\x00', 0x40000, 0x281) eventfd(0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x30, r7, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r8}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}]}, 0x30}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) socket$inet6(0xa, 0x2, 0x0) program crashed: WARNING in kvm_put_kvm testing program (duration=49.843111098s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-syz_open_procfs-socket$unix-sendfile-openat-eventfd-syz_genetlink_get_family_id$nl80211-socket-setsockopt$MRT6_DEL_MIF-socket$inet-socket$nl_generic-syz_genetlink_get_family_id$wireguard-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$WG_CMD_SET_DEVICE-setsockopt$ARPT_SO_SET_ADD_COUNTERS detailed listing: executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd(0xff7ffff7) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') r3 = socket$unix(0x1, 0x1, 0x0) sendfile(r3, r2, &(0x7f0000000000)=0x11, 0x7) openat(r2, &(0x7f0000000200)='./file0\x00', 0x40000, 0x281) eventfd(0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x30, r7, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r8}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}]}, 0x30}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) program crashed: WARNING in kvm_put_kvm testing program (duration=49.843111098s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-syz_open_procfs-socket$unix-sendfile-openat-eventfd-syz_genetlink_get_family_id$nl80211-socket-setsockopt$MRT6_DEL_MIF-socket$inet-socket$nl_generic-syz_genetlink_get_family_id$wireguard-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$WG_CMD_SET_DEVICE detailed listing: executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd(0xff7ffff7) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') r3 = socket$unix(0x1, 0x1, 0x0) sendfile(r3, r2, &(0x7f0000000000)=0x11, 0x7) openat(r2, &(0x7f0000000200)='./file0\x00', 0x40000, 0x281) eventfd(0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x30, r6, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}]}, 0x30}}, 0x0) program crashed: WARNING in kvm_put_kvm testing program (duration=49.843111098s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-syz_open_procfs-socket$unix-sendfile-openat-eventfd-syz_genetlink_get_family_id$nl80211-socket-setsockopt$MRT6_DEL_MIF-socket$inet-socket$nl_generic-syz_genetlink_get_family_id$wireguard-ioctl$ifreq_SIOCGIFINDEX_wireguard detailed listing: executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd(0xff7ffff7) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') r3 = socket$unix(0x1, 0x1, 0x0) sendfile(r3, r2, &(0x7f0000000000)=0x11, 0x7) openat(r2, &(0x7f0000000200)='./file0\x00', 0x40000, 0x281) eventfd(0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000003c0)={'wg2\x00'}) program crashed: WARNING in kvm_put_kvm testing program (duration=49.843111098s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-syz_open_procfs-socket$unix-sendfile-openat-eventfd-syz_genetlink_get_family_id$nl80211-socket-setsockopt$MRT6_DEL_MIF-socket$inet-socket$nl_generic-syz_genetlink_get_family_id$wireguard detailed listing: executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd(0xff7ffff7) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') r3 = socket$unix(0x1, 0x1, 0x0) sendfile(r3, r2, &(0x7f0000000000)=0x11, 0x7) openat(r2, &(0x7f0000000200)='./file0\x00', 0x40000, 0x281) eventfd(0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r5) program crashed: WARNING in kvm_put_kvm testing program (duration=49.843111098s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-syz_open_procfs-socket$unix-sendfile-openat-eventfd-syz_genetlink_get_family_id$nl80211-socket-setsockopt$MRT6_DEL_MIF-socket$inet-socket$nl_generic detailed listing: executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd(0xff7ffff7) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') r3 = socket$unix(0x1, 0x1, 0x0) sendfile(r3, r2, &(0x7f0000000000)=0x11, 0x7) openat(r2, &(0x7f0000000200)='./file0\x00', 0x40000, 0x281) eventfd(0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) program crashed: WARNING in kvm_put_kvm testing program (duration=49.843111098s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-syz_open_procfs-socket$unix-sendfile-openat-eventfd-syz_genetlink_get_family_id$nl80211-socket-setsockopt$MRT6_DEL_MIF-socket$inet detailed listing: executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd(0xff7ffff7) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') r3 = socket$unix(0x1, 0x1, 0x0) sendfile(r3, r2, &(0x7f0000000000)=0x11, 0x7) openat(r2, &(0x7f0000000200)='./file0\x00', 0x40000, 0x281) eventfd(0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) socket$inet(0x2, 0x4000000000000001, 0x0) program crashed: WARNING in kvm_put_kvm testing program (duration=49.843111098s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-syz_open_procfs-socket$unix-sendfile-openat-eventfd-syz_genetlink_get_family_id$nl80211-socket-setsockopt$MRT6_DEL_MIF detailed listing: executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd(0xff7ffff7) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') r3 = socket$unix(0x1, 0x1, 0x0) sendfile(r3, r2, &(0x7f0000000000)=0x11, 0x7) openat(r2, &(0x7f0000000200)='./file0\x00', 0x40000, 0x281) eventfd(0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) program crashed: WARNING in kvm_put_kvm testing program (duration=49.843111098s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-syz_open_procfs-socket$unix-sendfile-openat-eventfd-syz_genetlink_get_family_id$nl80211-socket detailed listing: executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd(0xff7ffff7) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') r3 = socket$unix(0x1, 0x1, 0x0) sendfile(r3, r2, &(0x7f0000000000)=0x11, 0x7) openat(r2, &(0x7f0000000200)='./file0\x00', 0x40000, 0x281) eventfd(0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket(0xa, 0x3, 0x3a) program crashed: WARNING in kvm_put_kvm testing program (duration=49.843111098s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-syz_open_procfs-socket$unix-sendfile-openat-eventfd-syz_genetlink_get_family_id$nl80211 detailed listing: executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd(0xff7ffff7) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') r3 = socket$unix(0x1, 0x1, 0x0) sendfile(r3, r2, &(0x7f0000000000)=0x11, 0x7) openat(r2, &(0x7f0000000200)='./file0\x00', 0x40000, 0x281) eventfd(0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) program crashed: WARNING in kvm_put_kvm testing program (duration=49.843111098s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-syz_open_procfs-socket$unix-sendfile-openat-eventfd detailed listing: executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd(0xff7ffff7) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') r3 = socket$unix(0x1, 0x1, 0x0) sendfile(r3, r2, &(0x7f0000000000)=0x11, 0x7) openat(r2, &(0x7f0000000200)='./file0\x00', 0x40000, 0x281) eventfd(0x2) program crashed: WARNING in kvm_put_kvm testing program (duration=49.843111098s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-syz_open_procfs-socket$unix-sendfile-openat detailed listing: executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd(0xff7ffff7) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') r3 = socket$unix(0x1, 0x1, 0x0) sendfile(r3, r2, &(0x7f0000000000)=0x11, 0x7) openat(r2, &(0x7f0000000200)='./file0\x00', 0x40000, 0x281) program crashed: WARNING in kvm_put_kvm testing program (duration=49.843111098s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-syz_open_procfs-socket$unix-sendfile detailed listing: executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd(0xff7ffff7) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') r3 = socket$unix(0x1, 0x1, 0x0) sendfile(r3, r2, &(0x7f0000000000)=0x11, 0x7) program crashed: WARNING in kvm_put_kvm testing program (duration=49.843111098s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-syz_open_procfs-socket$unix detailed listing: executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd(0xff7ffff7) syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') socket$unix(0x1, 0x1, 0x0) program crashed: WARNING in kvm_put_kvm testing program (duration=49.843111098s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd-syz_open_procfs detailed listing: executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd(0xff7ffff7) syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') program crashed: WARNING in kvm_put_kvm testing program (duration=49.843111098s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-eventfd detailed listing: executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd(0xff7ffff7) program crashed: WARNING in kvm_put_kvm testing program (duration=49.843111098s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP detailed listing: executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) program crashed: WARNING in kvm_put_kvm testing program (duration=49.843111098s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) program did not crash testing program (duration=49.843111098s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$kvm-ioctl$KVM_CREATE_IRQCHIP detailed listing: executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) program did not crash testing program (duration=49.843111098s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP detailed listing: executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) program did not crash testing program (duration=49.843111098s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) program crashed: WARNING in kvm_put_kvm testing program (duration=49.843111098s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) program did not crash extracting C reproducer testing compiled C program (duration=49.843111098s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP program crashed: WARNING in kvm_put_kvm simplifying C reproducer testing compiled C program (duration=49.843111098s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP program crashed: WARNING in kvm_put_kvm testing compiled C program (duration=49.843111098s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP program did not crash testing compiled C program (duration=49.843111098s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP program crashed: WARNING in kvm_put_kvm testing compiled C program (duration=49.843111098s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP program crashed: WARNING in kvm_put_kvm testing compiled C program (duration=49.843111098s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP program crashed: WARNING in kvm_put_kvm testing compiled C program (duration=49.843111098s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP program crashed: WARNING in kvm_put_kvm testing compiled C program (duration=49.843111098s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP program crashed: WARNING in kvm_put_kvm testing program (duration=49.843111098s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) program crashed: WARNING in kvm_put_kvm validation run: crashed=true testing program (duration=49.843111098s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) program crashed: WARNING in kvm_put_kvm validation run: crashed=true testing program (duration=49.843111098s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) program crashed: WARNING in kvm_put_kvm validation run: crashed=true reproducing took 2h22m15.657923409s repro crashed as (corrupted=false): ------------[ cut here ]------------ WARNING: CPU: 1 PID: 375 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 kernel/rcu/srcutree.c:687 Modules linked in: CPU: 1 UID: 0 PID: 375 Comm: syz.2.24 Not tainted 6.12.30-syzkaller-g21ed84930c16 #0 fa4558fba7fa11aa57b2c84caea5bf67b39b1b5f Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 kernel/rcu/srcutree.c:664 Code: 00 48 8b 5d a0 74 08 48 89 df e8 a2 18 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 7f 1a 04 cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 RSP: 0018:ffffc9000108fc88 EFLAGS: 00010202 RAX: 1ffffd1ffff81532 RBX: ffffc900010308e8 RCX: ffffffff816d8c29 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc0a990 RBP: ffffc9000108fcf0 R08: ffffe8ffffc0a997 R09: 1ffffd1ffff81532 R10: dffffc0000000000 R11: fffff91ffff81533 R12: dffffc0000000000 R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc0a990 FS: 0000555558293500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b3265ffff CR3: 0000000115a8a000 CR4: 00000000003526b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: kvm_destroy_vm virt/kvm/kvm_main.c:1362 [inline] kvm_put_kvm+0x1100/0x12b0 virt/kvm/kvm_main.c:1391 kvm_vm_release+0x47/0x70 virt/kvm/kvm_main.c:1414 __fput+0x1fb/0xa00 fs/file_table.c:431 ____fput+0x20/0x30 fs/file_table.c:459 task_work_run+0x1e3/0x250 kernel/task_work.c:240 resume_user_mode_work+0x36/0x50 include/linux/resume_user_mode.h:50 exit_to_user_mode_loop kernel/entry/common.c:114 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x64/0xb0 kernel/entry/common.c:218 do_syscall_64+0x64/0xf0 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f5783f8e929 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fff2349cf48 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 RAX: 0000000000000000 RBX: 000000000000a4fc RCX: 00007f5783f8e929 RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 RBP: 0000000000000000 R08: 0000000000000001 R09: 000000032349d23f R10: 00007f5783e00000 R11: 0000000000000246 R12: 00007f57841b5fac R13: 00007f57841b5fa0 R14: ffffffffffffffff R15: 0000000000000002 ---[ end trace 0000000000000000 ]--- final repro crashed as (corrupted=false): ------------[ cut here ]------------ WARNING: CPU: 1 PID: 375 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 kernel/rcu/srcutree.c:687 Modules linked in: CPU: 1 UID: 0 PID: 375 Comm: syz.2.24 Not tainted 6.12.30-syzkaller-g21ed84930c16 #0 fa4558fba7fa11aa57b2c84caea5bf67b39b1b5f Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 kernel/rcu/srcutree.c:664 Code: 00 48 8b 5d a0 74 08 48 89 df e8 a2 18 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 7f 1a 04 cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 RSP: 0018:ffffc9000108fc88 EFLAGS: 00010202 RAX: 1ffffd1ffff81532 RBX: ffffc900010308e8 RCX: ffffffff816d8c29 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc0a990 RBP: ffffc9000108fcf0 R08: ffffe8ffffc0a997 R09: 1ffffd1ffff81532 R10: dffffc0000000000 R11: fffff91ffff81533 R12: dffffc0000000000 R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc0a990 FS: 0000555558293500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b3265ffff CR3: 0000000115a8a000 CR4: 00000000003526b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: kvm_destroy_vm virt/kvm/kvm_main.c:1362 [inline] kvm_put_kvm+0x1100/0x12b0 virt/kvm/kvm_main.c:1391 kvm_vm_release+0x47/0x70 virt/kvm/kvm_main.c:1414 __fput+0x1fb/0xa00 fs/file_table.c:431 ____fput+0x20/0x30 fs/file_table.c:459 task_work_run+0x1e3/0x250 kernel/task_work.c:240 resume_user_mode_work+0x36/0x50 include/linux/resume_user_mode.h:50 exit_to_user_mode_loop kernel/entry/common.c:114 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x64/0xb0 kernel/entry/common.c:218 do_syscall_64+0x64/0xf0 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f5783f8e929 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fff2349cf48 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 RAX: 0000000000000000 RBX: 000000000000a4fc RCX: 00007f5783f8e929 RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 RBP: 0000000000000000 R08: 0000000000000001 R09: 000000032349d23f R10: 00007f5783e00000 R11: 0000000000000246 R12: 00007f57841b5fac R13: 00007f57841b5fa0 R14: ffffffffffffffff R15: 0000000000000002 ---[ end trace 0000000000000000 ]---