Extracting prog: 3h12m22.150359973s Minimizing prog: 8m35.219317826s Simplifying prog options: 0s Extracting C: 28.398068181s Simplifying C: 5m18.346239732s extracting reproducer from 49 programs testing a last program of every proc single: executing 14 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-openat$tun-ioctl$TUNSETQUEUE-ioctl$KVM_SET_NR_MMU_PAGES-ioctl$KVM_IRQ_LINE_STATUS-socket$nl_audit-ioctl$sock_SIOCETHTOOL-openat$rnullb-openat$sysfs-write$khugepaged_scan-mmap-openat$sysfs-pipe-close-openat$fuse-close_range-splice-openat$cgroup_ro-syz_clone-socket$inet6_tcp-memfd_secret-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$inet6-setsockopt$inet6_tcp_int-sendto$inet6-sendto$inet6-shutdown-madvise-openat$cgroup_ro detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2a001, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000180)={'vcan0\x00', 0x200}) (async) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x4) (async, rerun: 64) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000100)={0x7, 0x93ed}) (async, rerun: 64) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'wg1\x00', 0x0}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xea200, 0x0) (async) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x1a3001, 0x18) write$khugepaged_scan(r5, &(0x7f0000000000), 0x8) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r4, 0xa09ab000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001100)='/sys/power/pm_print_times', 0x200, 0x0) (async, rerun: 32) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) (rerun: 32) close(0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) close_range(r4, r6, 0x0) (async) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x8) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) syz_clone(0x2204000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r8 = memfd_secret(0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000240)={'vxcan1\x00'}) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x4e24, 0x0, @private2, 0x40407}, 0x1c) (async) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r7, &(0x7f0000000380)="e8", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) (async) sendto$inet6(r7, &(0x7f0000000040)="06f3ed2d81f7ecf81fd576bd9c560969cb65f03d2ca954f7f38f17ec", 0x1c, 0x8000, &(0x7f0000000100)={0xa, 0x4e22, 0x9, @remote, 0x6}, 0x1c) shutdown(r7, 0x1) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-syz_open_dev$loop-openat$tun-ioctl$TUNSETIFF-memfd_create-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-dup-ioctl$KVM_SET_CPUID2-ioctl$KVM_SET_DEVICE_ATTR_vcpu-ioctl$KVM_SET_MSRS-ioctl$TUNDETACHFILTER-ioctl$BLKPBSZGET-openat$kvm-ioctl$KVM_CREATE_VM-openat$selinux_avc_cache_threshold-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_CREATE_VCPU-ioctl$KVM_PRE_FAULT_MEMORY-close_range detailed listing: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000000"]) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000180)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000140)=0x18}) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="3b000000e2000000400101c0"]) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000040)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0xf) r9 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x2, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) close_range(r0, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_icmp_raw-add_key$keyring-keyctl$describe-setsockopt$inet6_IPV6_HOPOPTS-connect$inet6-sendmmsg$inet6-sendto$inet6-openat$binderfs-socket$can_bcm-openat$ptmx-openat$snapshot-ioctl$SNAPSHOT_ATOMIC_RESTORE-ioctl$sock_inet_SIOCRTMSG-ioctl$TIOCSETD-close_range detailed listing: executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = add_key$keyring(&(0x7f00000063c0), &(0x7f0000006400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$describe(0x6, r1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="00003393ade938a1f4e4fb79a41770edc1dbca7ec76f4f230634", 0x1a}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f00000001c0)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x35}}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x38a, 0x0, 0x0, 0x0, 0xfffd, &(0x7f0000000180)='syz_tun\x00', 0xf360, 0xffffffff, 0x1}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) close_range(r2, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$packet_fanout-sendto$packet-mkdirat-syz_open_procfs-mount$binderfs-syz_usb_connect-socket$nl_netfilter-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CAP_SPLIT_IRQCHIP-eventfd2-ioctl$KVM_IRQFD-eventfd2-ioctl$KVM_IRQFD-socketpair-ioctl$SIOCSIFMTU-ioctl$KVM_SET_GSI_ROUTING-syz_open_dev$usbfs-syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-mount-read$FUSE detailed listing: executing program 0: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=0']) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000057eb0020fd070400fa8e0102030109021b00020000000009044a0000ff4868000904"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) (async) r3 = eventfd2(0xd90a, 0x80801) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r3, 0x8}) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r4, 0x200, 0x0, r4}) (async, rerun: 64) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) (rerun: 64) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000040)={'ip6gre0\x00', 0x5}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) (async) syz_open_dev$usbfs(0x0, 0x204, 0x2) (async) r6 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000102505a1a440000102030109025c0002010000000904000001020d00000524060001052400a2000d240f01f9fffffffdff08000006241a0000080905810300040000000904010000000000000904010102020d00000905820210000000000905030240"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000002540)={0x20, 0x80, 0x1c, {0x1, 0x9e64, 0x1002, 0xd, 0x400, 0x1, 0x8a82, 0x5, 0x10, 0x8, 0xffff, 0xffff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000c00)={0x14, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) (async) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-openat$tun-ioctl$TUNSETQUEUE-ioctl$KVM_SET_NR_MMU_PAGES-ioctl$KVM_IRQ_LINE_STATUS-socket$nl_audit-ioctl$sock_SIOCETHTOOL-openat$rnullb-openat$sysfs-write$khugepaged_scan-mmap-openat$sysfs-pipe-close-openat$fuse-close_range-splice-openat$cgroup_ro-syz_clone-socket$inet6_tcp-memfd_secret-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$inet6-setsockopt$inet6_tcp_int-sendto$inet6-sendto$inet6-shutdown-madvise-openat$cgroup_ro detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2a001, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000180)={'vcan0\x00', 0x200}) (async) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x4) (async, rerun: 64) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000100)={0x7, 0x93ed}) (async, rerun: 64) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'wg1\x00', 0x0}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xea200, 0x0) (async) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x1a3001, 0x18) write$khugepaged_scan(r5, &(0x7f0000000000), 0x8) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r4, 0xa09ab000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001100)='/sys/power/pm_print_times', 0x200, 0x0) (async, rerun: 32) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) (rerun: 32) close(0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) close_range(r4, r6, 0x0) (async) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x8) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) syz_clone(0x2204000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r8 = memfd_secret(0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000240)={'vxcan1\x00'}) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x4e24, 0x0, @private2, 0x40407}, 0x1c) (async) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r7, &(0x7f0000000380)="e8", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) (async) sendto$inet6(r7, &(0x7f0000000040)="06f3ed2d81f7ecf81fd576bd9c560969cb65f03d2ca954f7f38f17ec", 0x1c, 0x8000, &(0x7f0000000100)={0xa, 0x4e22, 0x9, @remote, 0x6}, 0x1c) shutdown(r7, 0x1) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-syz_open_dev$loop-openat$tun-ioctl$TUNSETIFF-memfd_create-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-dup-ioctl$KVM_SET_CPUID2-ioctl$KVM_SET_DEVICE_ATTR_vcpu-ioctl$KVM_SET_MSRS-ioctl$TUNDETACHFILTER-ioctl$BLKPBSZGET-openat$kvm-ioctl$KVM_CREATE_VM-openat$selinux_avc_cache_threshold-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_CREATE_VCPU-ioctl$KVM_PRE_FAULT_MEMORY-close_range detailed listing: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000000"]) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000180)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000140)=0x18}) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="3b000000e2000000400101c0"]) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000040)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0xf) r9 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x2, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) close_range(r0, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_icmp_raw-add_key$keyring-keyctl$describe-setsockopt$inet6_IPV6_HOPOPTS-connect$inet6-sendmmsg$inet6-sendto$inet6-openat$binderfs-socket$can_bcm-openat$ptmx-openat$snapshot-ioctl$SNAPSHOT_ATOMIC_RESTORE-ioctl$sock_inet_SIOCRTMSG-ioctl$TIOCSETD-close_range detailed listing: executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = add_key$keyring(&(0x7f00000063c0), &(0x7f0000006400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$describe(0x6, r1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="00003393ade938a1f4e4fb79a41770edc1dbca7ec76f4f230634", 0x1a}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f00000001c0)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x35}}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x38a, 0x0, 0x0, 0x0, 0xfffd, &(0x7f0000000180)='syz_tun\x00', 0xf360, 0xffffffff, 0x1}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) close_range(r2, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$packet_fanout-sendto$packet-mkdirat-syz_open_procfs-mount$binderfs-syz_usb_connect-socket$nl_netfilter-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CAP_SPLIT_IRQCHIP-eventfd2-ioctl$KVM_IRQFD-eventfd2-ioctl$KVM_IRQFD-socketpair-ioctl$SIOCSIFMTU-ioctl$KVM_SET_GSI_ROUTING-syz_open_dev$usbfs-syz_usb_connect$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-mount-read$FUSE detailed listing: executing program 0: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=0']) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000057eb0020fd070400fa8e0102030109021b00020000000009044a0000ff4868000904"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) (async) r3 = eventfd2(0xd90a, 0x80801) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r3, 0x8}) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r4, 0x200, 0x0, r4}) (async, rerun: 64) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) (rerun: 64) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000040)={'ip6gre0\x00', 0x5}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) (async) syz_open_dev$usbfs(0x0, 0x204, 0x2) (async) r6 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000102505a1a440000102030109025c0002010000000904000001020d00000524060001052400a2000d240f01f9fffffffdff08000006241a0000080905810300040000000904010000000000000904010102020d00000905820210000000000905030240"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000002540)={0x20, 0x80, 0x1c, {0x1, 0x9e64, 0x1002, 0xd, 0x400, 0x1, 0x8a82, 0x5, 0x10, 0x8, 0xffff, 0xffff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000c00)={0x14, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) (async) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mkdirat-mkdir-mount-fsopen-fsconfig$FSCONFIG_SET_BINARY-fsmount-openat$ttyS3-mkdir-rmdir-openat$cgroup_subtree-write$cgroup_subtree-ioctl$KVM_CREATE_VCPU-mount$overlay-mount-syz_open_procfs-read$FUSE detailed listing: executing program 0: mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xc) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mkdir(0x0, 0x0) rmdir(0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='-pids )'], 0x1f) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000280), 0x800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_follow}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_auto}]}) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='omfs\x00', 0x20004, &(0x7f00000001c0)='\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mkdirat-mkdir-mount-fsopen-fsconfig$FSCONFIG_SET_BINARY-fsmount-openat$ttyS3-mkdir-rmdir-openat$cgroup_subtree-write$cgroup_subtree-ioctl$KVM_CREATE_VCPU-mount$overlay-mount-syz_open_procfs-read$FUSE detailed listing: executing program 0: mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xc) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mkdir(0x0, 0x0) rmdir(0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='-pids )'], 0x1f) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000280), 0x800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_follow}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_auto}]}) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='omfs\x00', 0x20004, &(0x7f00000001c0)='\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$uinput-ioctl$UI_DEV_SETUP-bind$bt_l2cap-mkdirat-newfstatat-mount$bpf-chown-syz_open_procfs-read$FUSE-ioctl$UI_DEV_CREATE-syz_open_dev$evdev-read$FUSE-openat$binderfs-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN-socketpair$unix-connect$unix-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_int-syz_clone3-openat$kvm-madvise detailed listing: executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder0\x00', 0x1002, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{}, 'syz0\x00', 0x10}) (async) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) (rerun: 32) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, 0x0) (async) chown(&(0x7f0000000000)='./file0\x00', r1, 0x0) (async, rerun: 64) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (rerun: 64) read$FUSE(r2, &(0x7f00000029c0)={0x2020}, 0x2020) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async, rerun: 32) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) (async, rerun: 32) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, 0x0}], 0x1, 0xd21c5de18890ad57, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async, rerun: 64) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r8 = openat$cgroup_int(r7, &(0x7f0000000140)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000040), 0x1) (async, rerun: 64) syz_clone3(&(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0}}, 0x58) (rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$uinput-ioctl$UI_DEV_SETUP-bind$bt_l2cap-mkdirat-newfstatat-mount$bpf-chown-syz_open_procfs-read$FUSE-ioctl$UI_DEV_CREATE-syz_open_dev$evdev-read$FUSE-openat$binderfs-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN-socketpair$unix-connect$unix-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_int-syz_clone3-openat$kvm-madvise detailed listing: executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder0\x00', 0x1002, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{}, 'syz0\x00', 0x10}) (async) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) (rerun: 32) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, 0x0) (async) chown(&(0x7f0000000000)='./file0\x00', r1, 0x0) (async, rerun: 64) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (rerun: 64) read$FUSE(r2, &(0x7f00000029c0)={0x2020}, 0x2020) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async, rerun: 32) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) (async, rerun: 32) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, 0x0}], 0x1, 0xd21c5de18890ad57, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async, rerun: 64) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r8 = openat$cgroup_int(r7, &(0x7f0000000140)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000040), 0x1) (async, rerun: 64) syz_clone3(&(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0}}, 0x58) (rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sched_setattr-sendfile-openat$binderfs-socket$inet6_tcp-setsockopt$inet6_tcp_int-ioctl$BINDER_SET_CONTEXT_MGR_EXT-openat$procfs-mmap$binder-io_setup-openat$sndtimer-dup3-eventfd2-ioctl$KVM_GET_STATS_FD_vm-syz_open_dev$ptys-io_submit-ioctl$SNDRV_TIMER_IOCTL_TREAD64-fcntl$getownex-sched_getattr-openat-openat$zero-io_submit-ioctl$EVIOCSKEYCODE_V2-getsockopt$inet6_IPV6_XFRM_POLICY-ioctl$BINDER_WRITE_READ detailed listing: executing program 0: sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000080)=0x2, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38a, 0x3}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) io_setup(0x82, &(0x7f0000000240)=0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x20000) r5 = dup3(r4, r0, 0x0) r6 = eventfd2(0x6, 0x800) r7 = ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) r8 = syz_open_dev$ptys(0xc, 0x3, 0x0) io_submit(r3, 0xa, &(0x7f0000001dc0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x6, r4, &(0x7f0000000680)="7d213a19ee618014bb9051fd679ee6395eb36cbe1d67afaf9da53dc1c1ab1d341c6f7b0ca391b8aa6dfbe5141ef6b2583ca388ef50873bffdcbbb49a75fe2d7f0856cc84cf6a6b321adb4056e1d555893799cb048acfa118afc1221f9ccaa8ecf214d3aad894a314376b09c16e45fa925d5da91d8865d70d5b7e8f4105457ddcd3c255520527b9325b215a7639b31d9e122509d1ce607fa76718bcee5ee9d497ef8ae9fe5e6cca2d831294eb3d189bb004a7c1f72a0e55fcbde1431417bcc0ccd9ef232d8e038ab686ff0e5be17de7f945114785d32690bf", 0xd8, 0x170}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, r2, &(0x7f00000003c0)="6d010439cb1c2625754c3e44237cb440f6fc8a", 0x13, 0x3, 0x0, 0x2, r5}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x2, r4, &(0x7f0000000780)="e9a557f4a271db0881f36a4bba0603a04a0fbbbfe1c4a3a1dbd2d389735f78623b039ae386971b11761ebdcd0445a766b113c6faaed18db98ceb64d26831083c60b16a1dbdcb9297bca2302a618dbaf8bb6b8aaf7101abae81375467ab38fd5f14a30d90bd8a5649d1f6ce54e601a00c3c2b3c43f7b0aab6b429b23316a0f243a8f7accdbf660346000d99e5990600eed835c0cf6533a97fa17ab4a31ec5e25b2decb2289386ac0f2434783b6f6c985b085fc368adce5e9b307a05dd07855278ee8cec08f1e0ca229bc786dbb2e71febc4a67ddd2c533dba19e045f35128efe0f88fc51f8767bd604a00df90c2c1b395446bd79f6e77", 0xf6, 0xeb1, 0x0, 0x0, r2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0xe, r2, &(0x7f0000000dc0)="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", 0x1000, 0x2, 0x0, 0x1, r2}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x6, 0x5, r0, &(0x7f0000000880)="81dc5b6162f5df858471cad5c12e8e4f76fa31e03177d0fbb7ad9e3f1bacd8632923a7ae74cfac83ec71d4269f1e326e2816e0748993bd19767c650653985dae41765b62f848171c2ccc1edd4c235a579dcf62b396eb9af52aefde4c87dd11fcca24eace7aab962f9c27e71796d3b0a7837758ccc8c1a25ce4209427a380f6f0f5dd0f3eb5afce64e328a68c80622bef900e302cc695a8cca9e7ba4b1ce1e5f3a388e7245e82b83a5226c9beeaadea3e623c8a825ca9c0c4c10ec8f53bf75ab3557ab5f81a260136", 0xc8, 0x5, 0x0, 0x2, r6}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0xf, 0x6, r2, &(0x7f00000009c0)="94c9048728f0c54a7e0a02d1aec1b4cf97c9cf66f76c09c375d5b0d4f237ac78d93f5d14b056ec1e191af8b28ee5bb662f762f4190191ef82fdcf1742e6b37418f756157e4bab5554d125dd5e223d13510ef011d189d5a240e7ce04d32f1dcf047f45c656e2d57644e7bb10d4ea4e59bbf97edcc061595a1783558cd0587fac5000ea1408f34e1bb37dbd1939136251b042b862f59070cfdfca600ac4ba32d86b8568f9d5cc23e1711a9d13af62ad9825e66892455684ab25753a857c493ed9bfa3427", 0xc3, 0x5, 0x0, 0x7, r2}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x7, 0xed7d, r7, &(0x7f0000000b00)="be25e8383962690e89b0320f504aa3933c9bc360b85b37a1252ede3283199c5751c045e77067b3578c94eb92796371b0bb947112ad3580448eabd092d9ddfe79da2e9ec0287dd0ea0b067b45f466557119c93be0c7cf7e4629d8c11616b742f2e35954eea7f63e7e519412cf3b55854cdc05e090", 0x74, 0x4, 0x0, 0x4}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x5, 0x7f, r8, &(0x7f0000000bc0)="5402672786ddcd286abf93e840f6d73a82790e96688b6881ad0d92bc3f00d71e12f119311730a8cdc1167b19f6053be527153e7a2a18910a50910624b6a971102610f7dbc0c33201a002e36edb6eaf06ed13d3388704718a11a5f79ccf", 0x5d, 0x5, 0x0, 0x4, r2}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x8, 0x5, r1, &(0x7f0000000c80)="73b7def6a0af29e3ad683995110308af771559", 0x13, 0xe, 0x0, 0x1, r2}, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x5, 0x7, r4, &(0x7f0000000d00)="ba14a0a50d238570c6a575be9dd64511055a3f13b159695b69097d167bb0ee20", 0x20, 0x9, 0x0, 0x0, r2}]) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r4, 0x400454a4, 0x0) fcntl$getownex(r2, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_getattr(r9, &(0x7f00000001c0)={0x38}, 0x38, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x1b8) openat$zero(0xffffffffffffff9c, &(0x7f0000001e40), 0x1, 0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x1, r10, &(0x7f0000000340)="4f1cb55584844614491d4ed6bcba0ff457c1bd31c6fee879333c581c050e2bb6b6250dd29d3e555b7c0f9b345017a2e9dbf0f0f1aa644c7702954fad7ee8e31ddd4267ab", 0x44, 0x4}]) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000040)={0xff, 0xc, 0x8000, 0x1, "7cc8d03db345e5d0126cf62bae535ea62d48bdbab789ba28e4fde34b726db0e3"}) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000580)={{{@in=@broadcast, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x4}, @flat=@weak_binder={0x77622a85, 0xb, 0x2}, @flat=@binder={0x73622a85, 0xb, 0x3}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sched_setattr-sendfile-openat$binderfs-socket$inet6_tcp-setsockopt$inet6_tcp_int-ioctl$BINDER_SET_CONTEXT_MGR_EXT-openat$procfs-mmap$binder-io_setup-openat$sndtimer-dup3-eventfd2-ioctl$KVM_GET_STATS_FD_vm-syz_open_dev$ptys-io_submit-ioctl$SNDRV_TIMER_IOCTL_TREAD64-fcntl$getownex-sched_getattr-openat-openat$zero-io_submit-ioctl$EVIOCSKEYCODE_V2-getsockopt$inet6_IPV6_XFRM_POLICY-ioctl$BINDER_WRITE_READ detailed listing: executing program 0: sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000080)=0x2, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38a, 0x3}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) io_setup(0x82, &(0x7f0000000240)=0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x20000) r5 = dup3(r4, r0, 0x0) r6 = eventfd2(0x6, 0x800) r7 = ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) r8 = syz_open_dev$ptys(0xc, 0x3, 0x0) io_submit(r3, 0xa, &(0x7f0000001dc0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x6, r4, &(0x7f0000000680)="7d213a19ee618014bb9051fd679ee6395eb36cbe1d67afaf9da53dc1c1ab1d341c6f7b0ca391b8aa6dfbe5141ef6b2583ca388ef50873bffdcbbb49a75fe2d7f0856cc84cf6a6b321adb4056e1d555893799cb048acfa118afc1221f9ccaa8ecf214d3aad894a314376b09c16e45fa925d5da91d8865d70d5b7e8f4105457ddcd3c255520527b9325b215a7639b31d9e122509d1ce607fa76718bcee5ee9d497ef8ae9fe5e6cca2d831294eb3d189bb004a7c1f72a0e55fcbde1431417bcc0ccd9ef232d8e038ab686ff0e5be17de7f945114785d32690bf", 0xd8, 0x170}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, r2, &(0x7f00000003c0)="6d010439cb1c2625754c3e44237cb440f6fc8a", 0x13, 0x3, 0x0, 0x2, r5}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x2, r4, &(0x7f0000000780)="e9a557f4a271db0881f36a4bba0603a04a0fbbbfe1c4a3a1dbd2d389735f78623b039ae386971b11761ebdcd0445a766b113c6faaed18db98ceb64d26831083c60b16a1dbdcb9297bca2302a618dbaf8bb6b8aaf7101abae81375467ab38fd5f14a30d90bd8a5649d1f6ce54e601a00c3c2b3c43f7b0aab6b429b23316a0f243a8f7accdbf660346000d99e5990600eed835c0cf6533a97fa17ab4a31ec5e25b2decb2289386ac0f2434783b6f6c985b085fc368adce5e9b307a05dd07855278ee8cec08f1e0ca229bc786dbb2e71febc4a67ddd2c533dba19e045f35128efe0f88fc51f8767bd604a00df90c2c1b395446bd79f6e77", 0xf6, 0xeb1, 0x0, 0x0, r2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0xe, r2, &(0x7f0000000dc0)="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", 0x1000, 0x2, 0x0, 0x1, r2}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x6, 0x5, r0, &(0x7f0000000880)="81dc5b6162f5df858471cad5c12e8e4f76fa31e03177d0fbb7ad9e3f1bacd8632923a7ae74cfac83ec71d4269f1e326e2816e0748993bd19767c650653985dae41765b62f848171c2ccc1edd4c235a579dcf62b396eb9af52aefde4c87dd11fcca24eace7aab962f9c27e71796d3b0a7837758ccc8c1a25ce4209427a380f6f0f5dd0f3eb5afce64e328a68c80622bef900e302cc695a8cca9e7ba4b1ce1e5f3a388e7245e82b83a5226c9beeaadea3e623c8a825ca9c0c4c10ec8f53bf75ab3557ab5f81a260136", 0xc8, 0x5, 0x0, 0x2, r6}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0xf, 0x6, r2, &(0x7f00000009c0)="94c9048728f0c54a7e0a02d1aec1b4cf97c9cf66f76c09c375d5b0d4f237ac78d93f5d14b056ec1e191af8b28ee5bb662f762f4190191ef82fdcf1742e6b37418f756157e4bab5554d125dd5e223d13510ef011d189d5a240e7ce04d32f1dcf047f45c656e2d57644e7bb10d4ea4e59bbf97edcc061595a1783558cd0587fac5000ea1408f34e1bb37dbd1939136251b042b862f59070cfdfca600ac4ba32d86b8568f9d5cc23e1711a9d13af62ad9825e66892455684ab25753a857c493ed9bfa3427", 0xc3, 0x5, 0x0, 0x7, r2}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x7, 0xed7d, r7, &(0x7f0000000b00)="be25e8383962690e89b0320f504aa3933c9bc360b85b37a1252ede3283199c5751c045e77067b3578c94eb92796371b0bb947112ad3580448eabd092d9ddfe79da2e9ec0287dd0ea0b067b45f466557119c93be0c7cf7e4629d8c11616b742f2e35954eea7f63e7e519412cf3b55854cdc05e090", 0x74, 0x4, 0x0, 0x4}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x5, 0x7f, r8, &(0x7f0000000bc0)="5402672786ddcd286abf93e840f6d73a82790e96688b6881ad0d92bc3f00d71e12f119311730a8cdc1167b19f6053be527153e7a2a18910a50910624b6a971102610f7dbc0c33201a002e36edb6eaf06ed13d3388704718a11a5f79ccf", 0x5d, 0x5, 0x0, 0x4, r2}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x8, 0x5, r1, &(0x7f0000000c80)="73b7def6a0af29e3ad683995110308af771559", 0x13, 0xe, 0x0, 0x1, r2}, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x5, 0x7, r4, &(0x7f0000000d00)="ba14a0a50d238570c6a575be9dd64511055a3f13b159695b69097d167bb0ee20", 0x20, 0x9, 0x0, 0x0, r2}]) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r4, 0x400454a4, 0x0) fcntl$getownex(r2, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_getattr(r9, &(0x7f00000001c0)={0x38}, 0x38, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x1b8) openat$zero(0xffffffffffffff9c, &(0x7f0000001e40), 0x1, 0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x1, r10, &(0x7f0000000340)="4f1cb55584844614491d4ed6bcba0ff457c1bd31c6fee879333c581c050e2bb6b6250dd29d3e555b7c0f9b345017a2e9dbf0f0f1aa644c7702954fad7ee8e31ddd4267ab", 0x44, 0x4}]) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000040)={0xff, 0xc, 0x8000, 0x1, "7cc8d03db345e5d0126cf62bae535ea62d48bdbab789ba28e4fde34b726db0e3"}) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000580)={{{@in=@broadcast, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x4}, @flat=@weak_binder={0x77622a85, 0xb, 0x2}, @flat=@binder={0x73622a85, 0xb, 0x3}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) program did not crash single: failed to extract reproducer bisect: bisecting 49 programs with base timeout 6m0s testing program (duration=6m12s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 18, 17, 19, 10, 24, 24, 22, 8, 30, 15, 21, 30, 30, 12, 15, 14, 7, 18, 17, 17, 15, 23, 12, 13, 22, 28, 21, 11, 27, 8, 30, 26, 18, 15, 30, 23, 14, 20, 11, 7, 6, 21, 30, 30, 26, 15, 21, 30] detailed listing: executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f00000013c0)={{}, {0x0, 0x989680}}, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/162) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0x7f, @empty, 0x2}, {0xa, 0x4e20, 0x0, @remote, 0x4}, 0x1, {[0x2, 0x7f, 0x3, 0x7, 0x3, 0xa, 0x0, 0x3]}}, 0x5c) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83\x1b\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x1d\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbzE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\x02\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x02\x16\xf5\xe6\x7f\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\x18g8j\x0eT\xbe\xa1\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35\xef\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00\xfel\xf1\xc8\x0f8\xdb%W\x87\xd0\xbc\xbf\x97\xa9\x97\v\xbe%\x81\xbf[\x05\x9d\xed\'\"( \x15\x8bA\x19\xa8\xbcF%\x17#[\xbb\x99U\x92\'\xb6\xbe6\x8f\xc9%\xd9\xce\x91r\xfch\xf5\xf5*h\x1e\x0e\xbcD\xc4\xb9\x93e\x84\xb11\xae\xb8\x06\x81\x96g\x17h\a\x02\xfe\xa0\x1a\xfd\xb3e8\xa5\xd0\xb1\xa1\x8c\xd2\x9f\xd3\xc3?\xb6\x0e\xfe\x1f\x1bG31\xf9J\xf4\x85\xa9L\x1b\x18\x01A\x18\xae\xc9B\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xb9\xc2\xdd\x9d\x8d5B\xaf\xe2\xf3\t\x97_uaJ|z\xec\x11\xb6\xd2\"U?cH[\xe5\xcf\xe0b&^\xbd\x15\xaecx@`\xe8\x1c\xfe\x9e\x17L\xa0\xe2l\xfa\xf1 \t\x0fG\xcd\xc3\xbc\x96z\x0e\xe9w\xc9y\x11\xf31\x8cc\xe2\xcd+\n\xcb\x05\x7f*2\x1c\xde\xb5\xd53x\xbd\xe5\x157l\xf1\x15y^\xbf4\x05\x94\xda\xd9\x04\x1b\x1dP\x1d\xbb1\xc8<*\xfb\v\b\xaf \xae\xea\xa4\x8b\x18\xefc\x90[\xe4\x8a\x03\xe3\x9e\xb9]\x8a~z\x9e\xc7qLY\xa0\xce\xdd0\a\x19\xe3\xd6\xeeV\x93\b~{\\\xa4\xe1\xc7d\x9c\f\xed\a&m\a\x9f7\x03]C\xed\xb4\x80>?/3\xc2\x14r}\xe0\xdd\xab\xc8\xb1\xb3\xdbu\x86\xa6Xo\xc7\xf4\xcc\xdf\xb9\x92W\x02JL=F\xd6a\xef') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000001480)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\xff\x7f\x00\x00\x00\x00\x00\x00\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x01\x00\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18\xe6\v\x00\x00=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\t\x00\x00\x00\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb0\xad\xc1;\xb2\x8fB.\xb6\xdc\x03\xf4\x02\xe5.@\xc2\x88%\xb5\x8d@\xbdv\x81\xdcvt\xe2\a\xdcnt\xcd\v\xd1\x97K\b\xa5\xf5\x18UO\xe5\xab\xcf\xde\x85*\xbd\xfe_$\xcej\xcb\xd8v\x8e\xdf\xb9\x90d\xb3\x87\x15\xa0R\x97}\xe1\a\x84-x;\x8e\xce\xa9Hl\xda\xc7^\x7fe\xa3\xf4>\xe3\a9\nJ\xa3\x99{\xd0\x1f,/\xf4(I\v\xe0\xcdu\xf4[\xee\xbbk\x95\xd4T\xb8\xbe\xb8Y\xaaw\x98\vH\x0f\xec>7{\xbd\x80\x8b\xa2|\xa6\xe7\xd0\xa8\xa6z\xba\x8d\x96@IG\a\x19uq3x\xd8Z\x8a.\xa8F\xcc\xef\x8fw\xb9X6r\xd9Z\xe9\xe6\xa5\xaa\x84G\xc9\xf2\xae') executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = gettid() r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) listen(r2, 0xa1) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000980)='/sys/power/pm_trace', 0x0, 0x0) read$FUSE(r3, &(0x7f00000009c0)={0x2020}, 0x2020) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$cgroup_ro(r3, &(0x7f0000000100)='io.stat\x00', 0x0, 0x0) connect$802154_dgram(r4, &(0x7f0000000000)={0x2, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x11) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$F2FS_IOC_COMPRESS_FILE(r5, 0xf518, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0xa, 0x2, 0x1b}, @ptr={0x70742a85, 0x2, &(0x7f0000000380)=""/183, 0xb7, 0xffffffffffffffff, 0x2f}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x400}], 0x0, 0x0, 0x0}) executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000005140)={0x0, 0x0, 0x0}, &(0x7f0000005180)=0xc) setfsgid(r1) (async) setfsgid(r1) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) personality(0x5400004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x99b33000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x99b33000) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) personality(0x800000) (async) personality(0x800000) ptrace$poke(0x4, r4, &(0x7f0000001040), 0x282d) (async) ptrace$poke(0x4, r4, &(0x7f0000001040), 0x282d) executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) r1 = getpgrp(0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = open(&(0x7f0000000180)='./file0\x00', 0x501100, 0x1c) kcmp(r0, r1, 0x4, r2, r3) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r4, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x2024000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x120584c, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mmap$usbmon(&(0x7f000083c000/0x1000)=nil, 0x1000, 0xc, 0x11, r3, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) executing program 1: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b00, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x140, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@local, 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@local, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x20, 0x60, "217d66d3"}}]}, 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x0) preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9) ioctl$FIOCLEX(r0, 0x5451) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b00, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x140, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@local, 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@local, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x20, 0x60, "217d66d3"}}]}, 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9) (async) ioctl$FIOCLEX(r0, 0x5451) (async) executing program 1: sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000080)=0x2, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38a, 0x3}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) io_setup(0x82, &(0x7f0000000240)=0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x20000) r5 = dup3(r4, r0, 0x0) r6 = eventfd2(0x6, 0x800) r7 = ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) r8 = syz_open_dev$ptys(0xc, 0x3, 0x0) io_submit(r3, 0xa, &(0x7f0000001dc0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x6, r4, &(0x7f0000000680)="7d213a19ee618014bb9051fd679ee6395eb36cbe1d67afaf9da53dc1c1ab1d341c6f7b0ca391b8aa6dfbe5141ef6b2583ca388ef50873bffdcbbb49a75fe2d7f0856cc84cf6a6b321adb4056e1d555893799cb048acfa118afc1221f9ccaa8ecf214d3aad894a314376b09c16e45fa925d5da91d8865d70d5b7e8f4105457ddcd3c255520527b9325b215a7639b31d9e122509d1ce607fa76718bcee5ee9d497ef8ae9fe5e6cca2d831294eb3d189bb004a7c1f72a0e55fcbde1431417bcc0ccd9ef232d8e038ab686ff0e5be17de7f945114785d32690bf", 0xd8, 0x170}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, r2, &(0x7f00000003c0)="6d010439cb1c2625754c3e44237cb440f6fc8a", 0x13, 0x3, 0x0, 0x2, r5}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x2, r4, &(0x7f0000000780)="e9a557f4a271db0881f36a4bba0603a04a0fbbbfe1c4a3a1dbd2d389735f78623b039ae386971b11761ebdcd0445a766b113c6faaed18db98ceb64d26831083c60b16a1dbdcb9297bca2302a618dbaf8bb6b8aaf7101abae81375467ab38fd5f14a30d90bd8a5649d1f6ce54e601a00c3c2b3c43f7b0aab6b429b23316a0f243a8f7accdbf660346000d99e5990600eed835c0cf6533a97fa17ab4a31ec5e25b2decb2289386ac0f2434783b6f6c985b085fc368adce5e9b307a05dd07855278ee8cec08f1e0ca229bc786dbb2e71febc4a67ddd2c533dba19e045f35128efe0f88fc51f8767bd604a00df90c2c1b395446bd79f6e77", 0xf6, 0xeb1, 0x0, 0x0, r2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0xe, r2, &(0x7f0000000dc0)="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", 0x1000, 0x2, 0x0, 0x1, r2}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x6, 0x5, r0, &(0x7f0000000880)="81dc5b6162f5df858471cad5c12e8e4f76fa31e03177d0fbb7ad9e3f1bacd8632923a7ae74cfac83ec71d4269f1e326e2816e0748993bd19767c650653985dae41765b62f848171c2ccc1edd4c235a579dcf62b396eb9af52aefde4c87dd11fcca24eace7aab962f9c27e71796d3b0a7837758ccc8c1a25ce4209427a380f6f0f5dd0f3eb5afce64e328a68c80622bef900e302cc695a8cca9e7ba4b1ce1e5f3a388e7245e82b83a5226c9beeaadea3e623c8a825ca9c0c4c10ec8f53bf75ab3557ab5f81a260136", 0xc8, 0x5, 0x0, 0x2, r6}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0xf, 0x6, r2, &(0x7f00000009c0)="94c9048728f0c54a7e0a02d1aec1b4cf97c9cf66f76c09c375d5b0d4f237ac78d93f5d14b056ec1e191af8b28ee5bb662f762f4190191ef82fdcf1742e6b37418f756157e4bab5554d125dd5e223d13510ef011d189d5a240e7ce04d32f1dcf047f45c656e2d57644e7bb10d4ea4e59bbf97edcc061595a1783558cd0587fac5000ea1408f34e1bb37dbd1939136251b042b862f59070cfdfca600ac4ba32d86b8568f9d5cc23e1711a9d13af62ad9825e66892455684ab25753a857c493ed9bfa3427", 0xc3, 0x5, 0x0, 0x7, r2}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x7, 0xed7d, r7, &(0x7f0000000b00)="be25e8383962690e89b0320f504aa3933c9bc360b85b37a1252ede3283199c5751c045e77067b3578c94eb92796371b0bb947112ad3580448eabd092d9ddfe79da2e9ec0287dd0ea0b067b45f466557119c93be0c7cf7e4629d8c11616b742f2e35954eea7f63e7e519412cf3b55854cdc05e090", 0x74, 0x4, 0x0, 0x4}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x5, 0x7f, r8, &(0x7f0000000bc0)="5402672786ddcd286abf93e840f6d73a82790e96688b6881ad0d92bc3f00d71e12f119311730a8cdc1167b19f6053be527153e7a2a18910a50910624b6a971102610f7dbc0c33201a002e36edb6eaf06ed13d3388704718a11a5f79ccf", 0x5d, 0x5, 0x0, 0x4, r2}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x8, 0x5, r1, &(0x7f0000000c80)="73b7def6a0af29e3ad683995110308af771559", 0x13, 0xe, 0x0, 0x1, r2}, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x5, 0x7, r4, &(0x7f0000000d00)="ba14a0a50d238570c6a575be9dd64511055a3f13b159695b69097d167bb0ee20", 0x20, 0x9, 0x0, 0x0, r2}]) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r4, 0x400454a4, 0x0) fcntl$getownex(r2, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_getattr(r9, &(0x7f00000001c0)={0x38}, 0x38, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x1b8) openat$zero(0xffffffffffffff9c, &(0x7f0000001e40), 0x1, 0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x1, r10, &(0x7f0000000340)="4f1cb55584844614491d4ed6bcba0ff457c1bd31c6fee879333c581c050e2bb6b6250dd29d3e555b7c0f9b345017a2e9dbf0f0f1aa644c7702954fad7ee8e31ddd4267ab", 0x44, 0x4}]) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000040)={0xff, 0xc, 0x8000, 0x1, "7cc8d03db345e5d0126cf62bae535ea62d48bdbab789ba28e4fde34b726db0e3"}) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000580)={{{@in=@broadcast, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x4}, @flat=@weak_binder={0x77622a85, 0xb, 0x2}, @flat=@binder={0x73622a85, 0xb, 0x3}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) executing program 32: sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000080)=0x2, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38a, 0x3}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) io_setup(0x82, &(0x7f0000000240)=0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x20000) r5 = dup3(r4, r0, 0x0) r6 = eventfd2(0x6, 0x800) r7 = ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) r8 = syz_open_dev$ptys(0xc, 0x3, 0x0) io_submit(r3, 0xa, &(0x7f0000001dc0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x6, r4, &(0x7f0000000680)="7d213a19ee618014bb9051fd679ee6395eb36cbe1d67afaf9da53dc1c1ab1d341c6f7b0ca391b8aa6dfbe5141ef6b2583ca388ef50873bffdcbbb49a75fe2d7f0856cc84cf6a6b321adb4056e1d555893799cb048acfa118afc1221f9ccaa8ecf214d3aad894a314376b09c16e45fa925d5da91d8865d70d5b7e8f4105457ddcd3c255520527b9325b215a7639b31d9e122509d1ce607fa76718bcee5ee9d497ef8ae9fe5e6cca2d831294eb3d189bb004a7c1f72a0e55fcbde1431417bcc0ccd9ef232d8e038ab686ff0e5be17de7f945114785d32690bf", 0xd8, 0x170}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, r2, &(0x7f00000003c0)="6d010439cb1c2625754c3e44237cb440f6fc8a", 0x13, 0x3, 0x0, 0x2, r5}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x2, r4, &(0x7f0000000780)="e9a557f4a271db0881f36a4bba0603a04a0fbbbfe1c4a3a1dbd2d389735f78623b039ae386971b11761ebdcd0445a766b113c6faaed18db98ceb64d26831083c60b16a1dbdcb9297bca2302a618dbaf8bb6b8aaf7101abae81375467ab38fd5f14a30d90bd8a5649d1f6ce54e601a00c3c2b3c43f7b0aab6b429b23316a0f243a8f7accdbf660346000d99e5990600eed835c0cf6533a97fa17ab4a31ec5e25b2decb2289386ac0f2434783b6f6c985b085fc368adce5e9b307a05dd07855278ee8cec08f1e0ca229bc786dbb2e71febc4a67ddd2c533dba19e045f35128efe0f88fc51f8767bd604a00df90c2c1b395446bd79f6e77", 0xf6, 0xeb1, 0x0, 0x0, r2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0xe, r2, &(0x7f0000000dc0)="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", 0x1000, 0x2, 0x0, 0x1, r2}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x6, 0x5, r0, &(0x7f0000000880)="81dc5b6162f5df858471cad5c12e8e4f76fa31e03177d0fbb7ad9e3f1bacd8632923a7ae74cfac83ec71d4269f1e326e2816e0748993bd19767c650653985dae41765b62f848171c2ccc1edd4c235a579dcf62b396eb9af52aefde4c87dd11fcca24eace7aab962f9c27e71796d3b0a7837758ccc8c1a25ce4209427a380f6f0f5dd0f3eb5afce64e328a68c80622bef900e302cc695a8cca9e7ba4b1ce1e5f3a388e7245e82b83a5226c9beeaadea3e623c8a825ca9c0c4c10ec8f53bf75ab3557ab5f81a260136", 0xc8, 0x5, 0x0, 0x2, r6}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0xf, 0x6, r2, &(0x7f00000009c0)="94c9048728f0c54a7e0a02d1aec1b4cf97c9cf66f76c09c375d5b0d4f237ac78d93f5d14b056ec1e191af8b28ee5bb662f762f4190191ef82fdcf1742e6b37418f756157e4bab5554d125dd5e223d13510ef011d189d5a240e7ce04d32f1dcf047f45c656e2d57644e7bb10d4ea4e59bbf97edcc061595a1783558cd0587fac5000ea1408f34e1bb37dbd1939136251b042b862f59070cfdfca600ac4ba32d86b8568f9d5cc23e1711a9d13af62ad9825e66892455684ab25753a857c493ed9bfa3427", 0xc3, 0x5, 0x0, 0x7, r2}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x7, 0xed7d, r7, &(0x7f0000000b00)="be25e8383962690e89b0320f504aa3933c9bc360b85b37a1252ede3283199c5751c045e77067b3578c94eb92796371b0bb947112ad3580448eabd092d9ddfe79da2e9ec0287dd0ea0b067b45f466557119c93be0c7cf7e4629d8c11616b742f2e35954eea7f63e7e519412cf3b55854cdc05e090", 0x74, 0x4, 0x0, 0x4}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x5, 0x7f, r8, &(0x7f0000000bc0)="5402672786ddcd286abf93e840f6d73a82790e96688b6881ad0d92bc3f00d71e12f119311730a8cdc1167b19f6053be527153e7a2a18910a50910624b6a971102610f7dbc0c33201a002e36edb6eaf06ed13d3388704718a11a5f79ccf", 0x5d, 0x5, 0x0, 0x4, r2}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x8, 0x5, r1, &(0x7f0000000c80)="73b7def6a0af29e3ad683995110308af771559", 0x13, 0xe, 0x0, 0x1, r2}, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x5, 0x7, r4, &(0x7f0000000d00)="ba14a0a50d238570c6a575be9dd64511055a3f13b159695b69097d167bb0ee20", 0x20, 0x9, 0x0, 0x0, r2}]) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r4, 0x400454a4, 0x0) fcntl$getownex(r2, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_getattr(r9, &(0x7f00000001c0)={0x38}, 0x38, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x1b8) openat$zero(0xffffffffffffff9c, &(0x7f0000001e40), 0x1, 0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x1, r10, &(0x7f0000000340)="4f1cb55584844614491d4ed6bcba0ff457c1bd31c6fee879333c581c050e2bb6b6250dd29d3e555b7c0f9b345017a2e9dbf0f0f1aa644c7702954fad7ee8e31ddd4267ab", 0x44, 0x4}]) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000040)={0xff, 0xc, 0x8000, 0x1, "7cc8d03db345e5d0126cf62bae535ea62d48bdbab789ba28e4fde34b726db0e3"}) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000580)={{{@in=@broadcast, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x4}, @flat=@weak_binder={0x77622a85, 0xb, 0x2}, @flat=@binder={0x73622a85, 0xb, 0x3}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2d, &(0x7f0000002a00)=0x3, 0x4) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000540)={"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"}) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$sock_int(r3, 0x1, 0x2d, &(0x7f0000002a00)=0x3, 0x4) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000540)={"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"}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) request_key(&(0x7f00000000c0)='big_key\x00', 0x0, 0x0, 0xfffffffffffffff8) r1 = socket$nl_audit(0x10, 0x3, 0x9) flistxattr(r1, &(0x7f0000000180)=""/43, 0x2b) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x4, 0xe5, "8ec3e9c6837abcce3cd4a83041771633623db3e469c09be7a3450dda31156d83f10eb1a8b5b9beae53a8e580b3f686c659670f80b42f2fde9ce91a71a8799ba4cc633cb5ce495a6caf4e71f10a0612e77acc5f8fa80707b1c721431652b68cd75ef438d990cbaf3edcd9fb8045ed0a3449f4fd6a09b45a180603cbfa5cd9bd11ebaf5fef691388779cd3ac9835c1dd3ef0055b30c08a29a7fb43edf18e0e781faa9eacef89b23272db1e69e78c44bf069bd14eebc3690917288e3f94b05cc245a76a5d2ff8b67a30afc477907dbdbb6b21866124b47a56cd6e4ab7cd65d5011091a456a2ca"}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) executing program 4: r0 = syz_clone(0x30204000, &(0x7f0000000280)="a16f87266eb6ef41", 0x8, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="bdc7e3dcf0823c71265863fea46f412389") ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)=0x0) (async) r2 = getpgrp(0x0) (async) r3 = getpid() (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000003c0)={0x0, 0x0}) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000480)={0x10040000, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x21}, &(0x7f00000000c0)=""/244, 0xf4, &(0x7f00000001c0)=""/156, &(0x7f0000000400)=[r0, r1, r2, r3, 0x0, r4], 0x6, {r5}}, 0x58) (async, rerun: 64) r7 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000500)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x11c2, 0x2208, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xfd, 0x0, 0xb, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x3, 0x81, {0x9, 0x21, 0xea9, 0x0, 0x1, {0x22, 0x487}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xe, 0x9, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x8, 0x2, 0x6f}}]}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x179, 0x7, 0x6, 0x3d, 0x8, 0x95}, 0x104, &(0x7f0000000580)={0x5, 0xf, 0x104, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x9, 0xa, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x55, 0xbc}, @generic={0xc6, 0x10, 0x2, "0e65aec7be154dee6a4a35b21230f0177c791071cd74b6dee45f81cf57a03760413e3e615b531ff1678273353ffcf996429be696909582d1bf4ffe13e2a05c675834c17d888a27fe23fa6b73794dd2405400a8cc1e9099ef1a88721cedbd24c0110f1bb2f2a8f184ad929371ac8ad475a438ebd8351d10a3ca96d69337bf3d6ecc78f0b8510dd587ae02cec450d75612702ac74212a2e58b02123b38249af62c6f4ec4d7d184b742fd326295b0bb1cec8b09b03c658f05f0127a2ccdf58eda28c50c95"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x85, 0x0, 0xffff}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "6dd80806cdd76d36a43ff7c65f12e798"}]}, 0x4, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x411}}, {0xc7, &(0x7f0000000740)=@string={0xc7, 0x3, "a84e6e1a1366df5dce4fe2ea68338a72608bbafa114f4d3a931e85daab392f1dee417704122fabb88983791d31bed47167585643a5aebcb26ec2e8e84f8b7399ac6fb8f684cae3d7d64255a790f1a2fbb4e00d10ca3e4661fe2c092bfdde5adb764ce073227b22ccc892290f5abcda32424ce6435b8bb07ae5c0e59662044bc94accdae697f41ffe50078a6b6a6d514a11ee517d7b5f968d0c303f9fc31029ee3c68fb46f5c73975e1fb3499fe78b3b0a5e9112335b37ab45846bd96a57d7da8519ff2b76c"}}, {0x6a, &(0x7f0000000840)=@string={0x6a, 0x3, "7f6ca0d0f120d61c5903703f05786eaddeb7825ec3971041992e8c2b9b342854f55c7290367ca344f64d67cf9f025ac52f07b63b1c945549c2cf19f805a6aa5acbc79c57a76aa03fd135255e671c8ba99fff45b1b211b5117d8411e358e86b182103f5e21e5449f2"}}]}) (rerun: 64) syz_usb_control_io$hid(r7, &(0x7f0000000a80)={0x24, &(0x7f0000000940)={0x20, 0x6, 0x4d, {0x4d, 0x6, "6dc01fbe2e7fe278c6ccae0c43f04ca61937c30845322a61470f1264d83bb1daa4526524dcf293afdaeb4cdc6dbe17a848cb573d9f5552ba283255274eac8f1e26985c337d987559d4b1eb"}}, &(0x7f00000009c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41d}}, &(0x7f0000000a00)={0x0, 0x22, 0xc, {[@global=@item_012={0x2, 0x1, 0x2, "c3f7"}, @local=@item_012={0x0, 0x2, 0x8}, @global=@item_4={0x3, 0x1, 0x0, "69136eb8"}, @main=@item_012={0x1, 0x0, 0x9, "01"}, @global=@item_012={0x0, 0x1, 0x7}]}}, &(0x7f0000000a40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8000, 0x39, 0x1, {0x22, 0x347}}}}, &(0x7f0000000d40)={0x2c, &(0x7f0000000ac0)={0x0, 0x13, 0xe6, "6405d07456523730e9d5ba42976386456cd6306a3b633a179bf56c7473ceeffaef0662dc3aa33854d04ec57e7094f79ee0d9b2a08c1ec7437a2f574e4b039bd76d2ee09a5bea38a76808d1d0ba99a1a513b6cbe5e28debe51417b79797c79a638c2d1c61bcb1abebc7cf5f0b4e13987ab4915e67ba7f1720d7951415c97a9984c463f6abebf3a09fb8fb776d5a141b6acbaf351bba787710c623ce70ebe707c68fa602d3c4d5540ea23f815da85f248423d770fd7665db7ee61446a18800bbf9b6a405ac8c046815499bcc553ec2c3355d08076fc8e5353b8084f0fd2a7823338ac3e8c09caf"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000c40)={0x20, 0x1, 0x93, "46b9e14b7077a11def4d65a3d755f14f92d6c3e514dba6b8bec72bcc01166a1d8bac11e4095340101636ea55e7539fefdeee6fe2b3031af04b974b8ff91949060f4edc4fbb654f61b4cdbb3adc23df929635f159e7daac0f9aab18075c6dc5f61e60fc5e644461f11545ea090433b4828f45ab431f6dd2b45cefad4ffc355ac15756469397fb62f57e39ba86c784c6219ba2c9"}, &(0x7f0000000d00)={0x20, 0x3, 0x1, 0x10}}) (async) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000d80)=0x0) (async) r9 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000dc0), 0x81000) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r9, 0x8982, &(0x7f0000000e00)={0x1, 'geneve0\x00', {}, 0x2}) fcntl$lock(r6, 0x26, &(0x7f0000000e40)={0x2, 0x4, 0x10000, 0x2, r8}) (async, rerun: 64) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000e80)='geneve1\x00', 0x10) (rerun: 64) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000ec0)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x2, 0x4, 0x1}}, 0x26) (async, rerun: 32) faccessat2(0xffffffffffffff9c, &(0x7f0000000f00)='./file0\x00', 0x42, 0x100) (rerun: 32) sched_setaffinity(r3, 0x8, &(0x7f0000000f40)=0x2) (async) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000f80)={0x0}, &(0x7f0000000fc0)=0xc) setpriority(0x0, r11, 0x80000001) (async, rerun: 32) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001000)='./binderfs/custom1\x00', 0x2, 0x0) (async, rerun: 32) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001040)=0x0) ioctl$BINDER_GET_FROZEN_INFO(r12, 0xc00c620f, &(0x7f0000001080)={r13}) (async, rerun: 64) getrusage(0xffffffffffffffff, &(0x7f00000010c0)) (async, rerun: 64) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3) (async) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r10, 0x111, 0x4, 0x1, 0x4) (async, rerun: 32) ptrace$getenv(0x4201, r4, 0x0, &(0x7f0000001180)) (async, rerun: 32) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000011c0)=0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r14, &(0x7f0000001200), 0x5005) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x11) close_range(r0, 0xffffffffffffffff, 0x0) executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_GETDRIVER(r2, 0x8008550e, &(0x7f0000000180)={0x7, "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"}) r3 = fcntl$dupfd(r0, 0x406, r0) r4 = socket(0x18, 0xa, 0x2) getsockname$packet(r4, 0x0, &(0x7f0000000200)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r5) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r7, 0x0, 0xee01) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010002b6fc71fbee0c522a0c00000c00060001"], 0x20}, 0x1, 0x0, 0x0, 0x4085}, 0x4000) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f0000000040)={0x38}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x82, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9"}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r8}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder0\x00', 0x1002, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{}, 'syz0\x00', 0x10}) (async) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) (rerun: 32) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, 0x0) (async) chown(&(0x7f0000000000)='./file0\x00', r1, 0x0) (async, rerun: 64) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (rerun: 64) read$FUSE(r2, &(0x7f00000029c0)={0x2020}, 0x2020) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async, rerun: 32) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) (async, rerun: 32) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, 0x0}], 0x1, 0xd21c5de18890ad57, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async, rerun: 64) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r8 = openat$cgroup_int(r7, &(0x7f0000000140)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000040), 0x1) (async, rerun: 64) syz_clone3(&(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0}}, 0x58) (rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) executing program 33: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder0\x00', 0x1002, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{}, 'syz0\x00', 0x10}) (async) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) (rerun: 32) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, 0x0) (async) chown(&(0x7f0000000000)='./file0\x00', r1, 0x0) (async, rerun: 64) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (rerun: 64) read$FUSE(r2, &(0x7f00000029c0)={0x2020}, 0x2020) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async, rerun: 32) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) (async, rerun: 32) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, 0x0}], 0x1, 0xd21c5de18890ad57, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async, rerun: 64) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r8 = openat$cgroup_int(r7, &(0x7f0000000140)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000040), 0x1) (async, rerun: 64) syz_clone3(&(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0}}, 0x58) (rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) close(r1) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x800, 0x0, @rand_addr=' \x01\x00', 0x2}, 0x1c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@exit_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x2}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@weak_binder={0x77622a85, 0x0, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000102c0)={0x2020, 0x0, 0x0, 0x0}, 0xfffffe5d) syz_fuse_handle_req(r0, &(0x7f000000c280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd02006de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fce05ac686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b451940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306500000000000000007b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9c1ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0ae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a00", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x1, {0x3, 0x0, 0x2, 0x0, 0x7f, 0x7fffffff, {0x0, 0x0, 0xfffffffffffffffd, 0xb, 0xfffffffffffffffc, 0x0, 0x200000, 0x0, 0x6, 0x8000, 0x12000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x8400040, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="99c0c8af1cf730deb6873bac98d7550e3e300f1dc6f5f7d58d3a4e6a7bb30f325c490af45743ec748f57b9bc7c125593036d7fca091b396620598aad878dda172b7967cb0c5ee10ada50f257847c1123f21910b1d9ab8369a3ef4e5c522d4cb896c1a4bfad66840a2e337e832b6b4d30bbb4a203cf454ab4f1ec15f85d164c78c652478011197fa016240141eb017e4ce1354d7cba435b1b48646514d41a11b88c91c6ca8dbe29228a6a6169f3e90a5a2732afd436f4afbf6765090e59dc66ea06aff1c287ac3a44ceb8d9aab372578e331e32d24301376df8d899d2fc9c4b3cb4b38db55a4fa0a36d483738568e9ee7adfaada6fffa10db828c348cd82c147e2182b892d298165bad5b01fc36c75c97d1c06348ed9bd9e6359fa5acc2f9f7f67717edca44bf9c897f3e931308ad4f052229b111e852bdd694c7aa91644012d426ffd83e234f0ac55f892eef1a8f7db772e88d0b84a691d8d469f423db6d0f8ccdc9328144ee178318683e11bd8a1255f23ab5934e4a26f58816795c3d07288e2c8537268c5a225c86f976c3287c4ec38488ed929e9d7b5471f772cf060d8a9920943c684076bf1cdc2d6cccb77b44e0d2e7afd9c01ec54476c3f235502433734626189c76649e524c20c1754fcc26a46e98b6fb9703211304dab8a07e7dd615533dabf9bb7937fffb8f0c8c35f1d104cb49cb2caf9cc7d4eaeb01b5903d900f1ab8d670db7a89f08c486469e49348ef6a713ed9722b01668bf4afe7c631cedcc1dcc3cfb5cd204a38fa40986881944c9f66ee897b430fa2c74519916a337a02446d2ada8fc1f3bf495478258c669a2271f52d8816a523b7bf3beee19a0ef616773a97aa02b485485f10168cfb307c4ebddce7f9763cc4a5bd67d2b9c4cdbc6f9efd2f0dd73abfb54c41d2f56e929a2cfcac4f4142c6c143b510a7fd510394793dec53faf080a755a5634ef74c17317cb231451514c4e0620c2a89bef90333dba177a65d3f4428f377f4461ea09d54ee28e829e8e2c019903f61191f8b9c45ecf6b618c71417a43738051ca4a1fdcab84ba1b9653c16957f6361a3e0a646a95d96911359ead9bf523e4b54f59f9b97b842ca8c0c658b3af0559557bd454a7d4e9e5b34c686ad70cf1e659f62591dbf02faf3ae06d1ec3a1822d1cc3c34b4be49ff2d1b49d81be77debff7d6f1f081b28fcf1142ad4a09c764c7de05051a1e5bca42a87ff202d01d012c03825a8f6a5c7d7db828546dc9bbbe704bcd886f227f365aaa72bb812c643e3507ada6713d2de98500f18609411537df7d336368166c12cd4ea73904c8c21cce400c18dceba0662caf7d7a182587bbf99872a645ca3fe46e5b289042b47f9cb4a3c47490c582616570af5a86539b009f0508325c92c81735f0fb643051c9f89b524419bd95fc975e449b764906b162eabd522b12b96ea4c8809fadbfc3371adcf2d5a5beb277c45456ad377b01d35153180a519d20ededf5a66037104de8611170aa68a6beeece65557cbcaa7c074aad7051edf3033123fa5ed6a7f09ec36a72f5d012e05b98992cb59cbe6a0f0d168edb40dadb01835e0d262f0a45e9129bfb0e6c4e49a904f2de303f92b21938cc5c2a8fe5677d266a49aab38536626d3b5289d255a1b3ec75a5434226fc7b58d89fce1e50ee215174cc22a9ed954545aa7f61c5f9dd1a4d7b7595d0118b3044b5cbbc69acf83e53241fa74f98c26cab78bd526825be1aa61db2dde29c6c8d004619d040014057bf7234564e12f671b86f2dce6bf16c0f5282dc3a1527c0548d2b030b375442f529cb6c9de39370be5117a7da22239e3a7481b919e1ebebc5f409c378e275e8ec6c8f3eba2aa18a0a494295c4f20426ec137c7094349c48a941de72a369643cf58e4a3ff1c6ce26fdef979c67ba61ba9e87fb4f90b2a8115894f984b0f0448d7634f1ba62444a4a5f32e1cbce354a845685aff6ddfc77bde4ee6be166e2c0e61e82fab61aa89a69bf1b2f16524011c1679cd5a53a17c258d7e49a48165d1d919643ef4759d0d3e5645a18c066c01ed290a120860edff3e76caa1d888466e00828d48023e597d2e1984170c94e16e91744bbc0dc47fbad627e1b1bc48aeac7483d4100c8359963c8c0cb354db786c14e6e41348325ec57640bb997dc5121c417c8222fd1736319e082615b7b0f24044ff36b567ada080bb8f87a4aa01a7077edde1ee2ece1ba24905b62a8bd87ed733b6b5dd1ffee04a105151ad857adf75e96fef3597d6bf864ee02a1ed30b6cd16fa399cec9ecb781fc4e850ca44fe92dd1b2943508bef3e626b586361fc5a66aef6f53a894867a9cf5c1da08609d61fd27b72348b5667051cb596560fdc9bdf898fd4ecf84032d743067109b89f68404324f29b87348be218611c42678028393d792a3f7094e4183ad2f27ad8f411419b1065eeae56b50915ecf9f8952bf4c2b0990d2bb2c0538859fc2a549d9b49338e664dbf057b9fdd220fcfb97da596d09c8b34a2e6441a6c85ef11995b036c0864e2afe31d673d13719cb9b638f9a25b0ede554397c5a184ee4a35482d17d4bc1c4293177afdba72da68547137ad18403e8293fbd1b0cf7e26a1a0a17c890d992ddaeaed92384e010b22bd7438a6c39f535df971cf838283b8b96b3db4e8681b101c23f4f97a825ee8de160ff894671221079fbb0c6a6dcb2a386f6226daeed04f9b63847943730923c99560464afbea46be9eeea51f8af34dc60764c8b345f00c8f1e2f1cfa16f10e30f608962049da0ae1bceddb27e723f360f615c728806cb6b3ae1be9d2e93e529a05e44697295bc5f1a605e57c533cc70adb65ea0c1eb5b8cf1c07d1dd68fdf21917497affeb6af4f5f323643f83622609f469f183f2b47222cf23ea4024ee51fa393a69b1c37aeb0583d0791c3730fade36d74ebd60825327b2e5678d5d8476868ba6017b2ecdd3610e63f3b2f967d548837045b297ef986bc394b4175a2336e76cd5ff341fcee79c1c2f60b814a57516dc454099c897a72b80195342f69c744b1ac6b8c40c7c5b03777a6fd3828e17e15860b01314def00f267297ee24925b75ab081fbec8620bbae945745748240e38d47dc7e4424a8135b1e86c1107ffe15077e4958f705cfa361bfabde86226b5f691b04d94b316f524250d79ba56599f5bc45812218f2f63bbee3764417cb88a704a9bee2cb6fbd74826216c4c817ff25d60db4285dba8458dbc144804a4bc046312cfe8e3302e8ff7817a67e0119bc3425c6bfa29bd302d9c523fc8ce586fc14475023e7b036e9b40f432372e255d1df4d6dbf33370111b604365a5cb05a78090eb29315abebd24111003df83801b67a4f1f115ec93346add0eb9e8ce83e0025880c7e95b3c84a1877f3986adcb86322ecd054ee2e4c7760c7f17df04d7d4e6b99347de9d7028cefe1ae2782a465cf67c62801dc853435193faf833575c4b43fc1717811d47f63cf6988b7dc2585346cbad1d148b83a5a87ab7817beea4c0b94c9e2cdd0daa80692e3b057530475b04dbf69a54b4a6e41e84df3177d7857091febdfb330101cecad730577ae75a90821fd080e6da06fdba6636db30f74fcf35f9c2398e8885e82753acd91e5f05b2fcfa7ba8f022bd3b103ce56c924f0414fcb96813847a9663e3dbb84c12b1fcaaf9d728cba957d6d9604156d9be8a6aec67e96ab0d801f938e0376825331eb8f7b097ea56191cc5a3a32734744352e5b6256c1ef3851891055729f0e8fa0dbcd5da3b82ea89bcd6278a3567f845cddec66478f61bc2af7537ff28e1d6953c894e6b625f94c30d6b5389dd521ea561822ba589eca842b5a7fbbf2538bf1f9d8a9332b0d2064b90dc2f925925f9338267cd6a2310fda6ed132ac128940ac4627b191bd41346e0e989f593e0a8aad8f7be5f3c5d4ca6bd6983a6f34507671f9c69d0f63cf6cdaa0b630d79a41ca4bec30b68d9668da875292498336c4e92ec48e7212fbdde67b90ee5702e334e6ab18075cba98ebac94da349a25f453a5f26f8a89360b1118a4513a9fa1fd2032c9d8f6a772b347316e85053ae119662b326300a5d49c8c4bd36b3aa3ec69c5ba039e7cabd6ad367c339594b459b34a1ac5464eea90871d8092d3248cea1b969b9b7526d7e2a4f4db1558d2b61787e679f167b1aeccb3b54f94f42b080a8429e8791aae419df469b90ff71ca9f64a9d12192258cf9c0a78b0284d5ea02c8bddf118d937d8cebb378cb6188158db71182bc970f18a9fc37385fd08ba489273030731f9c4751d2af2be1d4610258e3bed310c52f54b4cb9edd5a7f10bce53aee3d4ace6be7bddd1d4487daf1f1a004122f8a77171652248673a223f8cecd12faedba718109a07dbddabb75639f5eae6948c3ab08db7aa7a0290f7de49768373e76a226ac793a921eac448b46e264c150298e03e82fec96fbb559e0ff5e1e045861a3aa660f40570bf24335bcabc18273757a0f4faac7a7d68c57e5f6845b82809143eb6879eb6260956c83b3a63caa59f57c6ba40d6755530ae7192c568bb2cf482629715782d635fc2cfb487ba0c81077d1a65aa2a4a1b99cb4bdb5256db6a92e248487eba265df9b002b25eb313cb9a6d92f3a6957c87e9df27837bfafb31f09d87a75d57d22f242fb0f55c3a3b20916d5bfa8daa2c42233eeff3fb49c2635cd7882574afa3eb8371000170c7c1a63ad5cd8490f1a6ebf239028b71183f93a1b630ceed4708545742a8f47139ff5b705b21cfcaa157480f4cb94ff59233f470421bb595807d7e456d679018b8aad3ea5864e908d7f7788ec565fee546c18de04e8411f41094324a43a731587918a52eb5dec91972efe3573bb522b3cda04d0de26fa750b445652afca0b3f98e390ccdfc83c940bea9c73eada702dadc60ead76830bd62b289bc869f3477cca781215727e6623dea14b9ae332e0a577323d23c0a1b971080d78097cd60e090ac0a2584582897330e4243de8b84273f48cfaa6735e2b9cb893a7063ff37f93a9281e2abe10439562a0b877eb923dcfe67be64090b88093b2b9e96fc33350b9cf293607676fae0f511b91b9cacbf5ea29c529f9852ae055d5eaddd77a85184e44d8958be6b2721598d0a7bd9554b633d04ad0363a154e645e8cb4a072d92c97584cd20267d951001e2396a54ec5e735f6c678ea8963f2364e5a8ccc10b748418e687e48687bff5761758fc6c6c82341d29a8c680d6ceef64204ecd8e0e91ee179db335d94793fc5ffa2f47f621dae92a7c012077f0664b5de9df948c8762152827f16382b8a7b3bc2c22451125ae2959adec083c92cd4656425ad4dee28ef9c7709a5a29dcfe15438bfe3f46162cc92548d41439c30eb035e9354c99a6c6be8a09ee6f022ef0228f41de6b1ed591fd62f6be76640d791ab1838d6a4a4e6dab960ae8c5e12470323485473861470e8862785d2542bfbe789b1b6fb3cc9e5f1e12b667ed0c2a46559bd9e696bd9f2ccc7edf7f7af6451284792bbc2fab8a4aa89d78253e70be9be290712aef88f6218e1337e829f7aea30ac0a4cdbddc54eece3a2012a163761bcf140bd19a05c397e69d5879289ab756ad3d7e6bb03e1561f46e1d841821a2a59990bb685d19475e87804a922478f5fd287cdd7975b55db2f2a2d450eb79dcd96e2254626d5af185475be9b5d1b107c99cc3505f6c88b95607a371521bbd1b5be7b94525b10f930442c667bda83d98844fca88f0293be6ca26585f55a110bd8c4f6fdfb073f941a9a19beaf4c6d732eb53d419fd640a524d5ea4e317169d4b6fb704c63c3b9d7858c41ebadd25d0fdbb81b30b06df05c2289e346c9ee17d6b56f187dd5e4d3e50c59f67e261cf23efe412ded5494996f599675fffc22a5cfa7f68af84b23ae8cf66480f5cdd2f4af8c8d60e2f082722be01bd80a6975ea0f28e981b79c0696a9cb3916b8dbfabf4127b782ec2e8494357487b3327b13793c2d9af3a48fa45068a789ff81b20e7b97689ea815c06708bac11d30b4e6ab8a10d06fe0bb647cd6213d0115e0963f982b8ff3e54ca212479ce769e2de3ce3b5970fd3fb31c4dcbd90aee74304b38d3f18c0ac0070712b4c0a1811be0799d97efd094e44afacfe74a15d0f4a35980cc917609ea384f743dfa5c56d1c88c4d777e7fe6a780f65e0f89b97ca60b91eb54a86b91c5fa5f9a1a1e2c711f35b9140601cf13ff0cb24b4cf5328c4de70880d8a58c1c8cdbbc29f8f4050e4fa8555163fd14117453bc40681e27f2fb5d1d762737d61531eb3ceffc89557afc53f822be53bb2bfc5c5567696e31466436deccda1e5e6a29b38a2c8c08cabac648d27acbd63a6717521459a5e97024c65bb3a1a77da54752daf777a5cf503216171e5a90a65459195cac4c8e66ac3a240bf37862664418c6a3d974242251e20a3171abc66f9d881449266527e811b514f7a70b68f2af1d3abe1ecd8ce13afe5c91b5645a7697259b7b70652cfb1e280265729d168dedf911c1c36f8444fc0872c9f345faa96be52b3f9bbdce2f80a3b2bb7d5efe7e471ba9f8df63e7c9e0c020175daca96f04524b0b2011aaae226f3787f261529e861edd87fddb8633bf58e4ad3daa909532db8b6c8c3023399da7a9399c1b2995e868e68d51214bba6b8697de75331472a78d1af728788d74e11a99b7301df2bc0f3cdf0862346d2c97d07ad0d4c04a467550f20712d86bdccd6922a8a9a29dbaba4c45ec9b5def9b82d883c61eddfda2fd0ef6d78c315f7536994173f54da5896e2b674864d36f4c686abbcba2521854f5dd33406443dfc0d6e34d97f01d9fd9eb16b6d6326fa97e308ce93ba8de9f2bcc5f5883b964d31659d9f778b19d1ed0ff82a7f882e0f0d80df23350d02a3f2394ec04c70990d298140d677b2cecc8b3a8aa39f660bf369da51fd1968ab9b76f7c87cec646ab3cf1b754f06b4f319d357ac45a531ed4d14b2f3d4fb1248a5123336a69d857e4269c03b4fb3e2e0a3b079f1c14dae0c92b7f906f7036871499a87c90e8ddeb60ab0437119128cacadb7f046d8779924396bae6014f52cb361fc2cf0e489153af2a9fb8e4b88351ac65d662012bae310acc71eb1c1277f90c9fb2cc2ea0022d037c178d7d36a13d4515d3b72efa33c789bbb5ef33ec3a95b4a160b56b87bcb0ce42a093cca099977d7077bf1f90be6cf14ba97b9c2b2012bcf3da400268cb2fd85819a3f6e89cdc4f5c45721e394ffb5e34234870f116d34243722a18de534410479c1332fd27c83291843c5a8fdd3c2db2237b1f3fd927f35c663bbcf45f5c87a74853b91678a1f3ac678cb745ed93d28c77f014e5a6d0a9a7355b1640cab94ad0f07332a3c14f3b183e1c442b2c48dc2823a4757def8328b3a7eccb5baf97aff8ab23422aee948592e1c32589c740d2298bc45729efd4743ae0d25078a78b3cf1b9291e8842b31ed5a5e1ad96466dd9e3eaf79d92f52de14298b2ed6eb7de544369189556ae9322a2881ab3bbf12478bee89d255cacd451b8bc61d12522ac55fe9ccf88ea1d588870b19c9473eaf11dfbd9710d9d7459e1c3e6c7b126a296d8ce18139d45d5c2af77ad2786ee04291e73dbf227bd067adaf1595368f6c6815bd46abd8ae3e66378ccb19d91614326b35db007cffda079e08786616f9bf4211bee8806c8b72ff6c6cc477cf29326cf0506d7d53cf4be57411e78c6e43afe5266e9e651e88d9743ee7aa6b7030ec2abaa23dde2a78274eb8f5fac2a210c34bc1a753d300cf1a9dc4bdb5b5126c1bc6fce4d9ecbf4d8b4a74cf40e6892eccf737cc4e1e0b5c3792072aab4a42ca3977c5d8821f778d0adcc0441090f4a85ed2a9376e69ef2dbc0ff68e9e1b4c6c84f8109d4d3d888cbddc32dcb1e190290a751cf7cf6fa2f4d2776b0d1bd29e84bb865430fe49d1edbb654774a40bfe525c79a1bbcb3be2990ee21bfb825e7f36058ac6249b93525153ee2626244dcc7891b08a535015828c8fa4c8faea9874d9cbe4f3c10c39da9c5799a05d8811d254e11126954f07da769941dea5746a5f22d08e56cc56a2532e9c9ece9a10c49e5bdc2ff281fa9cebdd9d10eb48690970034355d868a315742fe60d98661a4be965653d2f247370fdfce4ba67c149b07baff48626f3ef05d6fe5189d38b1171845861d431616a157e16d7aa754b381c5ae807fa1fff3b5f6c55b9323c8a806cbe4f75ce24c4dfc539b3920e8e5435e4d3b76cec953b61b5c1be25fe9b20fd6ac10765ffe7ab5f71603766063560e8f44a2cad17a7b5b414d231f229cb090a30da190d6f456fc380326608ed4291d2ced552b93a17d05b451501fbdd063576b1355ab3eacf0cb624f8cd4a96185eb7cf798b8ad94c78ed326b5d49c4b054b0f7aad7048134dd8df4c88c61d010bb67415900f3f2e0d42c5fe1a1cc376e1d01ff8cc94c4e0b385d8086a08ac796397c89338e9e7e1720311d08cc453acff0dd9f98ec6b59032f047bc3a2962d8a538ff3620da7d0730a34e070d7f472c2e03760aa2ae206450f845b8149fdcdf697f2e09ab6c562249eeebdd4ca0c4bbc6cc7a6600add2e68ae6449e845d9e829d6e5f09daa7a206052a2fa3d60f25af47916d7f5a6f33e83e91e7274ec5beaac50e61fc6ecde52d4c1880ecefb71eac5865772231713d4d3f5d3bf6119d3f95466535d0b0380c347d77f4b1d3d32d9316332d76734355261764a3a72c111e26ba450c32dba42c4881c3a3ea1a6a97d62da4047f88400a7d10bd880274dd4b4d1cc274f7c665d58b223276fd273e1a954c4b76593b58aa5aebc101ef8e093d822f07b812582441262a6dbbfd1da9ea0edba7748f1c54f18d17735c39988710e25aa89527954c16f1a1f58ef181b4c467b12755248431ece65b2020f570a19d328475a86838aa938c29bb1e77a2de8bc58076c913c76e6b7e42f3bda9b71eae784256647a9a360b5870bc3d879ce43725e3422df65f2d7a954d3d390f7221b6a2c3e299277fa2d2a3272fee570d6663f65cdc26a6838c10fc44ed7061596a5f7260d92b26a2b0133d41f5540152a5c0083d4c311ac80d1b588179cb8febf3bc12d7748068ec410ca9dd32c0bf898bfbd13690f21da83ba3a7fd79d9a6617bcdede5bce8a64959ba86d9510bac219679fbddc0cf16889d5a2c875b369c5eb61344b27838cb85cef927609f12520e4cdaa1da9a1a0ebe97d131f18cbc47d1c70b6ff9579f0c48cae8b81bea9a120e35d2152d69234397de6064ca804216b89eb5cf1e253de634c360f929211e3b1233187e02a36d75fdfd8b461202c3887f4e57ef5d490a02fdae50dd8253c3496d0acbad861b50f2414fc73d49b87878b1ffbddd5de2784dd0dd34aa389b44468fb94ee4a53aed3bd69f07229b6ce703f7e946cc768ae6d213d9ae5aea2fcbbc011d25263fdb402bd375979d238693d85ef0275d769d550bc16b142082b11ca19e10a304a444f4dbd8202a4b3ac4590e854736c0df988d60ea8e68f0bf7e65c95e7f2825525cde1a1887a7fae414481c49612cbf6113917f4f94d1d7a47b0c0a708b4a2977dfeeac0fdbf5108b04463f642c7394e7e6cdf6b3eadf52f59577d7b2689d3813fdd7274d5348f976a3ed0eef5982efd7a261eaa96d698297407e6955d333021b947f783ede1e4cba2b10ad444fb64885bab6c6993f23b5b4cdffe1326a5c3397d1d82657ee3c6751de8d5cd07dec25561b43e63f58416833d7a9fa2c75676e04b306fc7fbcc490cb5991b5e82cecd2594ea226e6692c30ddbae389e183afc743409ead407e58f14da7d882dbb096687ca356db61dfce075a610e30bd96160a9fa493b5383b00625ebcc08ec354b267e63d6c747daac3517a291b6775e83d939c063f10ecfb8aadde2fe0bf33bef289ff7d8381ca2bc4e9ef38169ac10969690c922d598d6aed53506f0bf8fe2d9e219ef847dbed1b84d2424cc3cfca5ffeaa24da0375315691ddcbcf3bd9527f5683f4fca4208108d9214b81500ea5685560b0a7b8ea880399f1decddddd206817e67b5460044737057eebcd7d1efa1ff190e3a0c8745d6b7115427015d1a83dd9568b37de21f140a75752ecf09b92a3931a8f7a5fdbc49fbd0be875ee6199e2458594419a3ac0e0b5eeb1ea94a3e901aaee76c6c3a02371b03e33a14363d839720d104d429b5c915cda4411f0458ca65e1c84cd95972b291c17c0d3d9bf2f7b7373ec18f263936de639fea3035048113858a1d479421385cd5fbd622d1350bcb5b41e82d952ea9b5575dca9ece2dd59e4316440a856f662c9e86f8311748be867e006629deec4a18b70046d11a908a131436693d320fb1767bf969c5b4917011fde42b13aee049a47515c31989a587ba5a8e0d316bca82802bd36939e9a70d228b7734126077f59da3d6debd84e696a928fc569006fe03c479183320ce14a6eb3d977b0967b5f3dbd66aab947c73a4676ed53625e2c7439391dfb40fbdff415936bbcf16508482e22544c67df4334cde4601a14bad818df2c7019c197d9f3a04a30a92c8c5ddf4627640b328275ce346c0adfe9749a8a98f8adb8d16ec1c379ccb438c7b3d4f06c9150ef69ce063496ea7727f214711f57fdb1928f58ec7c35e392a744fa5fac40b6aa19a1ec0f960083f8f4bc3019d0428ca21cb52cc89273c161d4ba1b0a35c56a234a7db3cf0aa1f307849a18d62ac504e92dc5fcd4febb091781d20751cabf68e2e8b203d1325494bce481c227e98e4725813cf0cc584b04a5256354e1e76d11f2f64c2d60a4da3b3549a09ab4726dad2bad78e3d67b078b31880d45ed8b640e8add4602d7404918d8b37b26c8d2f11b8936e6929a4690c96beaf883e0344e5b849f4b4fa0484a76431275dbed0be21f00222a4400ac4cb35fb47b1901101e5e183d96df92f8e5312dd071a1eac8515c69d521032ab3a88af741bd0a66da31f04b9aa96c006457945c2f97a27874ad787ac6decb67e87a1c7fb9c12dd552d545af9b263342ee272359586be51ed15c7ee94b5c05c448080d934637588dab2c1dd1b40dfbb86ef08f452e6a52463352dd2af7233de34a7e15df1f76fdab4410fe028c311545e63714aaecfa151bd6971e254516c5548de709b23fbdd3adc33e0324cf6d1ecd253d7c68e5ceb94b43b056817507c1b9490bba4297e78f5f55fdddb299be22ec78ac4bf1c55c2e4104f324a527399019d860275b8aee692a621a4377bbce81eb15ec38a93e00b42b08370c91183ee5bf737101ea85397c5a47e61f8cecfb78ad6a3edc79c9b5ebf93d58afe14a4a772a01acbea8de67ed012786b707231ce83d702995de5aa0ea7f9f134feb8b95896116f7c3504d95a0eba69602c5e1a6210034ccdb3793739a46b47f465e70330026e23857cd86e5c8c564f9c18a1bced2d3f9b512ec7cbbd1e226a3dad5a222cfbf323ba5c80de23f43b2c5a3cc94c529727935f63cd234e81d0241c29191e51d927ac9c9bbefe65ac15b8d4237c631255b5410e0fe6e70d7a4ef50e120d9fb35b041e69e512300d9ef10add4a0fe29d6cb5a3c133eddafbeba2459e70b77959221a781c4ccc4ccaef8006dd60d572b0ac26e6c1d0bdc4d1652b9", 0x2000, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x90, 0x0, 0x5, {0x5, 0x5, 0x80, 0x9e, 0x50, 0x7, {0x6, 0x6, 0x0, 0x8000000000000000, 0x8, 0x8, 0x100, 0xffff, 0x4, 0xa000, 0x9, r2, 0x0, 0xfffffffc, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1180000, &(0x7f00000023c0)=ANY=[@ANYBLOB="7472615dca03d39d69782c76657273696f6e3d71626b213970323030302ec5516163636573733d", @ANYRESDEC=r2, @ANYBLOB=',fscache,cachetag=!,fowner=', @ANYRESDEC=r3, @ANYBLOB=',fowner=', @ANYRESDEC=r4, @ANYBLOB=',fowner>', @ANYRESDEC=r5, @ANYBLOB=',smackfsdef=,smackfsfloor=,:,\x00']) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x2bc67b5dc0ef3785}) read(r7, 0x0, 0x0) mmap$binder(&(0x7f0000730000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'team_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r3}, 0x10) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x21) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x5, &(0x7f0000000040)=[{0x6, 0x2, 0x4, 0x8}, {0x8000, 0x7, 0x2, 0x5}, {0x0, 0x5, 0xa, 0x9}, {0x5, 0x40, 0x3, 0x9}, {0x401, 0xf9, 0xd, 0x1000}]}) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r0, 0x22e7c000) executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffffffffffb) ioctl$VHOST_VDPA_GET_STATUS(0xffffffffffffffff, 0x8001af71, &(0x7f0000000040)) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') (async) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)='B', 0x1}], 0x100000000000003b, 0x0, 0x0, 0x11000000}, 0x20000001) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000540)) (async) ptrace$cont(0x20, r1, 0x0, 0x0) (async) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r3, 0x407, 0x0) (async) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x1, 0x4, 0x0, 0x0, 0x0, 0x10}}, 0x50) (async) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x2000000) (async) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) tee(r2, r4, 0x47, 0x1) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) executing program 0: mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xc) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mkdir(0x0, 0x0) rmdir(0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='-pids )'], 0x1f) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000280), 0x800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_follow}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_auto}]}) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='omfs\x00', 0x20004, &(0x7f00000001c0)='\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) executing program 34: mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xc) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mkdir(0x0, 0x0) rmdir(0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='-pids )'], 0x1f) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000280), 0x800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_follow}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_auto}]}) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='omfs\x00', 0x20004, &(0x7f00000001c0)='\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x344) ioctl$ASHMEM_GET_NAME(r1, 0x40087708, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000080)={0x14, &(0x7f00000002c0)={0x0, 0x9, 0xcf, {0xcf, 0x23, "2ed8790a049519bd7bb5137597ab7abd83d6fcd13affc30b46bdc57d3730695f116bfd1eb012bf3cab7c0b0a4a3ee23fa0515de95433adf38b1cf3e4e2e277bb8632b6b4202c1b2cb2dda45853b648f99fc55af5319a11d3fff374c3fe74cd77ddd1ad4524c42d00a11b74f9a85783dc148dd2c02298101be2a85c96739bf16f50a292653966a2125f88beccd82f16b588dbd34af4b27b1ebebfc2b8fac3ea1dfb93538dc9577c1edbe502967bbdbc536a419aaf9ec42d612c79c8d2cb495fc0e889a0fcfd41ba47a0603e1cb0"}}, &(0x7f00000003c0)={0x0, 0x3, 0xe7, @string={0xe7, 0x3, "424ae646e7cfa911460408c6ddb8e9fa3c4b329663bb188bd4f34b549d5c7f439c633ca91988159ecf6c590811223d780232c42ea3fd07b677c8dc805a70e770457195fb07323cdb6c7da4a626128b5bf06f8d613cc9b7a3a67db3779066cb1a1282b3fbf4fa5ceb1885776e7dcff37aeed33e35c7790157fcc94c3bc51aa92af99678871a43f16906fbe59452bfb798b3bfe87ee9532d6bc71399f2e2c46d2ce275025444f2680a9cf0aba858fcb49067006e6d145b742da307887b60d8957117c04104bc77c202d933a2932675bba75d703d17f4cbfda59deec03951383766f2a9186f56"}}}, &(0x7f0000000780)={0x44, &(0x7f00000004c0)={0xb388b94bca248dbb, 0x0, 0xef, "ec4fb39cfd067316a1299a6ed1f893f7c7c8f8e19228f51dae9832b1bc0e2c84568835d5e35a1c740fefe329a75acec285a01435f2cf9b357369a43cebd38c7746da289306c39fa8e11202790cbc2f7ee2be8532373a676a1ed15a7bc8a50da96da333337142d30267fa25b0b6956bb8fc2019c6478c0980e68197fb064840991fcd8cbbb404c3cdf9b2ce0cdfdb9c7dcb80457cf020e6216c1a728cf3f32335fe2b914496f804de9da65f52d695b36aeebfac892f10f2e8fe430352f3306a4a9287c190f06f7414e72f8de7f84d1279bc341b61a078681286eaff37e60b4b2538ed5d316e54665a2ce9ea8dc63a16"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0xfc}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000005c0)={0x20, 0x81, 0x3, "166e46"}, &(0x7f0000000600)={0x20, 0x82, 0x1, "da"}, &(0x7f0000000640)={0x20, 0x83, 0x1, 'n'}, &(0x7f0000000680)={0x20, 0x84, 0x4, "845fcf7f"}, &(0x7f0000000740)={0x20, 0x85, 0x3, "3d1a09"}}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x15}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSBRK(r4, 0x5427) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001fc0)={0x14, 0x0, &(0x7f0000000240)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) socket$inet6(0xa, 0x3, 0xfffffffc) io_setup(0x3, 0x0) recvmsg(r0, &(0x7f0000001400)={&(0x7f00000001c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000240)=""/181, 0xb5}], 0x2, &(0x7f0000001340)=""/147, 0x93}, 0x40010040) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'macsec0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x3, 0x40, 0x0, 0x8, 0x9, 0x8, 0x7, 0x6, [0x7fffffff, 0x2, 0x2, 0x7, 0x0, 0x7, 0xe25c, 0x7fff]}}) r1 = gettid() sigaltstack(&(0x7f0000000000)={0x0, 0x180000001, 0xffffffffffffff73}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) io_getevents(r3, 0x823d, 0x1, &(0x7f0000001440)=[{}], &(0x7f0000001480)) tkill(r1, 0x21) pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RLCREATE(r4, &(0x7f0000000680)={0x18, 0xf, 0x1, {{0x2, 0x0, 0x2}, 0x6}}, 0x18) write$P9_RCLUNK(r4, &(0x7f0000000bc0)={0x7, 0x79, 0x1}, 0x7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = fsopen(&(0x7f0000000040)='9p\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='9p\x00', &(0x7f0000000180)='\\.\x00', 0x0) close_range(r5, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x900080, &(0x7f0000000140)=ANY=[]) executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400003900120002002800000219002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x400, 0x70bd27, 0x25dfdbfc, 0xb, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x22040081}, 0x80) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x50, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x3ff}, {0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) getpid() mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x7ffff000) executing program 6: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)={0x2c, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd}, @nested={0xc, 0x1a, 0x0, 0x1, [@nested={0x8, 0x0, 0x0, 0x1, [@nested={0x4, 0x136}]}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x80c0}, 0x4080) (async, rerun: 64) read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) (rerun: 64) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) (async, rerun: 32) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r5, 0x8}) (async) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001100)='/sys/power/pm_print_times', 0x200, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000001140)={0x2020}, 0x2020) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x2df}) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[@uexit={0x0, 0x18, 0x2}, @rdmsr={0x32, 0x18, {0xb15}}, @cpuid={0x14, 0x18, {0x40, 0x6}}, @wr_crn={0x46, 0x20, {0x0, 0x7}}, @cpuid={0x14, 0x18, {0x3, 0x1}}, @cpuid={0x14, 0x18, {0x800}}], 0x98}) ioctl$KVM_RUN(r6, 0xae80, 0x0) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) write(r4, &(0x7f0000000400)="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", 0x1f000) executing program 6: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x64a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) (async, rerun: 64) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (rerun: 64) remap_file_pages(&(0x7f0000a33000/0x2000)=nil, 0x2000, 0x2000004, 0x18b800000000000, 0x1) (async, rerun: 64) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) recvmsg(r1, &(0x7f0000000400)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, 0x80, 0x0}, 0x142) (async) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{0x0, 0x1c}], 0x1}, 0x0) (async) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x82}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/6, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async) r2 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa2) mlock(&(0x7f0000903000/0x4000)=nil, 0x4000) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0xfffffffffffffff5, 0x0, {0x3}}, 0x18) (async) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB]) (async) umount2(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000140)={0x4, &(0x7f0000000440)="6f654c65c7f986ec4f8905b8eaba466f91ecf30fecc110802559413ce4e59651aca589c7e8b01f869d459443be50b1"}) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) (async) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='devices.list\x00', 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000040), 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000340)={'vlan0\x00', 0x400}) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f00000000c0)=0x1) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0xa, 0x8f) r6 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000d40)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x20bc, 0x5500, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0xd0, 0x9, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x20, 0x0, 0xf7}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x81, 0x2, 0xff}}]}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000840)={0x2c, &(0x7f00000001c0)={0x0, 0x24, 0x61, {0x61, 0x22, "efc16576927597daedfbb03ba3b49a8704c213ecd3a4accdd7391105eb236471080bb6e7b43fa415f554818cce96b4222f5750e31221568203eb72ee9b9a2ce9de71ada8eb847a3d24961e8748f05ae7d9b916e6b8edbca79ea0c221873e91"}}, 0x0, &(0x7f0000000780)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x80, 0x30, 0x1}]}}, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) executing program 6: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x402003, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/packet\x00') read$FUSE(r2, &(0x7f0000004180)={0x2020}, 0x2020) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x4c, &(0x7f000002eff0)={0x0, 0x0}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) executing program 6: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010080, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000380)={0x3, 'pim6reg\x00', {0xc5}, 0x9}) (async, rerun: 64) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) connect$unix(r2, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x4}) (async, rerun: 32) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) (rerun: 32) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) (async) mkdir(&(0x7f0000001040)='./file0\x00', 0xc0) (async) getxattr(&(0x7f0000001240)='./file0\x00', 0x0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002080), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r4, 0x80083314, &(0x7f00000020c0)) (async, rerun: 32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000000)={0x2, 0x8, 0x1, 0xfffffffd}, 0x10) (async) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000200)=""/235, 0xeb}], 0x1, 0xfff, 0xfffffffe) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_handle={0x77682a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/163, 0x0, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f00000005c0)=""/190, 0x0, 0x0, 0x40}}, &(0x7f0000000340)={0x0, 0x16, 0x30}}}], 0x0, 0x0, 0x0}) executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) (async, rerun: 64) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x101000) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cpuset\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x2000808, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) signalfd4(r0, &(0x7f0000000000)={[0x99]}, 0x8, 0x800) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async, rerun: 32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000db", @ANYRES16=r5, @ANYBLOB="010025bd7000fddbdf25050000000c00018008000100", @ANYRES32=r7, @ANYBLOB="14000380040004000400050008000200000000000800050010270800"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0x15, 0x0, 0x100, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0x0, 0xff}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0x7, 0x800, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', 0x1, 0x7800, 0xb, 0x80}}) (async, rerun: 64) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000500)=0x14) (rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'ip_vti0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'gretap0\x00', 0x0}) (async) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) (async) r15 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r15, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r15, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$XDP_RX_RING(r15, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async, rerun: 64) setsockopt$XDP_UMEM_FILL_RING(r15, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async, rerun: 64) bind$xdp(r15, &(0x7f0000000100)={0x2c, 0x0, r14}, 0x10) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'bond_slave_0\x00', 0x0}) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000640)={0x27c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x27c}}, 0x48040) executing program 6: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=0']) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000057eb0020fd070400fa8e0102030109021b00020000000009044a0000ff4868000904"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) (async) r3 = eventfd2(0xd90a, 0x80801) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r3, 0x8}) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r4, 0x200, 0x0, r4}) (async, rerun: 64) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) (rerun: 64) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000040)={'ip6gre0\x00', 0x5}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) (async) syz_open_dev$usbfs(0x0, 0x204, 0x2) (async) r6 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000102505a1a440000102030109025c0002010000000904000001020d00000524060001052400a2000d240f01f9fffffffdff08000006241a0000080905810300040000000904010000000000000904010102020d00000905820210000000000905030240"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000002540)={0x20, 0x80, 0x1c, {0x1, 0x9e64, 0x1002, 0xd, 0x400, 0x1, 0x8a82, 0x5, 0x10, 0x8, 0xffff, 0xffff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000c00)={0x14, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) (async) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100033060000000000000000fe800000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x78, 0x0, &(0x7f0000000600)=[@dead_binder_done, @acquire_done={0x40106309, 0x2}, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = add_key$keyring(&(0x7f00000063c0), &(0x7f0000006400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$describe(0x6, r1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="00003393ade938a1f4e4fb79a41770edc1dbca7ec76f4f230634", 0x1a}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f00000001c0)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x35}}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x38a, 0x0, 0x0, 0x0, 0xfffd, &(0x7f0000000180)='syz_tun\x00', 0xf360, 0xffffffff, 0x1}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) close_range(r2, 0xffffffffffffffff, 0x0) executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1d1501, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000180)) (async) r1 = syz_clone(0x10000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x20, r3, 0x1, 0x70bd26, 0x25dedbff, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffff5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) sched_setparam(r1, &(0x7f0000000040)=0xa) (async) prlimit64(r1, 0x9, 0x0, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080003000d000000", 0x24) (async) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r5 = syz_open_procfs(r1, &(0x7f0000000000)='net/ip_tables_matches\x00') r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) (rerun: 32) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40085503, &(0x7f0000000080)=0x2) (async, rerun: 32) r8 = userfaultfd(0x80001) (rerun: 32) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) (rerun: 64) ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) r11 = open(&(0x7f0000000080)='./file1\x00', 0x123b42, 0x1) sendfile(r11, r6, 0x0, 0x80000000) r12 = open(&(0x7f0000000080)='./file1\x00', 0x0, 0x8b50c7eb3b49266e) sendfile(r12, r5, 0x0, 0x80000000) executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xffffffffffffffdc, 0x0, &(0x7f0000000000)=[@register_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000000)={0x1}) r2 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x200, 0xa, 0x0, 0x0, 0x2b}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, {0xeb}, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x2000000, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0xe8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280), 0x8019, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x130, 0x0, 0x4, {0x6, 0x2, 0x0, '\x00', {0x1, 0x4, 0x6, 0xffffffff, 0x0, 0x0, 0x2000, '\x00', 0xffffffffffffffff, 0x28, 0xfff7fffffffffffa, 0xa4, {0x100000000, 0x1fffffe}, {0x1f97, 0x6}, {0x5, 0x26}, {0x6, 0xff}, 0x200007, 0xe19, 0x800, 0x12}}}}) statx(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x100, 0x801, 0x0) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) connect$inet6(r2, &(0x7f00000000c0), 0x1c) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x20a300, 0x0) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f00000001c0)=0x1, 0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x68, 0x0, &(0x7f0000000380)=[@dead_binder_done, @exit_looper, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x15, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x4, 0x8000000000040}, @fd, @fda={0x66646185, 0x9, 0x2, 0x2f}}, &(0x7f0000000480)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) io_setup(0x5, &(0x7f0000000440)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r3, 0x1, &(0x7f00000006c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) r5 = syz_open_dev$mouse(&(0x7f0000000000), 0xffffffff, 0x410400) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x3, r1, &(0x7f00000004c0)="39cd2dc4659a019f4a0c57e0dc60fde8632b7a4fe600a13bd806b568dd90a53f34491de970b0c4fe43dbb8bfdc8e91b68f61ae5174136ef59ad3bb2ff8e736f323f4779959c15e8f6a5582d3364b3facc340d922090139d9ab4b7dc6a693fa5fb7c033bfeef2992c1cf6f17005bb14930d5486b430fa9fe9c5b093cda8cea881bd794949bd3cdcf0e26b5fdc12a4caadb5319bf891cfe87fc24e2005617ab55af008d3fe86d06f9307", 0xa9, 0x8, 0x0, 0x1, r5}]) executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, &(0x7f00000000c0)=""/142, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r1, 0x45809000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x4, 0x52, 0x0, 0x10004}]}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={r4, 0x3, r3, 0xfffffffa}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000300)={r4, 0x1, r1, 0x1}) r5 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='rootcontext', &(0x7f00000001c0)='--^$-\x00_\x8e\xbd\xd8\x10\xd7J\x15\x8cG\x12h\xda\xde2zN-\xb7\xcc\x9b\xa7\x1a2s\xcc\xebq8^Q\x95\x87\xff\xb6\xfd\x89\xcdc\x95\xa3u\xf1w\x7fs\xc0p\xedf\xec\xe1\xd2\xdb\x10n\x88\x9a\r\xe5\x90T\xf3\xbdo\x92\xa5\xb2U0\x97%sl\xd9\xb0\x94\xe4\xef\xacv\xd6\xc3\xaa\xf4|a\xd68\xc4=(\xfcA\x92h\xcan\\D1\xe0\xd9\xac\xd0\xc3MU\xc9\f\xed\xe56\xe1/\xad\xa6j\xb5\xdc\f\x94\x15\xea\x94\x00\x1b', 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000140)="441f08d600270bee724ef54e91eeffbe1e68d5040d73161feeb0f24cb1", 0x1d) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) ioctl$BLKRRPART(r7, 0x125f, 0x0) executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r1 = fsopen(&(0x7f0000001980)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f00000019c0)='uid', &(0x7f0000001a00)='./file0\x00', 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x7d, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x8001, 0x80, 0x5, 0x1}, {0x5, 0x7, 0x2}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000b00)="68ddaa732d69a6f7eb258957fccb89134faf578e9ff0cc38595e4c9c1f2a32ceb6799c682d87e991cd718f04a1487a5d99bef5a95019bdd837d20274d2e98cfbde31b70e45fcc74efe1c42ba121fe280bf8af2c22489537e57dee1cc54c41bd8f9086f9498bc3bcc4f0501f1defec42e4faac1dd0b0b67b797182b6c4ce3ff3da7d4d4a1069cada5b152bbd64335f0254ecbfe43c5d7cd5b8403e53ae4f712b05945b98eb3420bb04c7ecf528693bb9693ada19e3a8f9522ab692a2d78aefa8af8f0e6b3b3af268e535bc4a610f7341e7da01249d929b75acf7c99bd21b2b5e3f210e2798f5636bed013dae7ff0d009ca52fffbd88a3964a60786f8f025e4b8fac68f910cdd4a991a6020fcd5a92bc7747acef6f62d087646d32fc37f6d1cabd609e6f392350ebcc02c341a3ce598522d3963374f5eb522919d029136288fd1c08cadfd7f43a3a6618d6dd5ae6baf5b2f321588e9dfc879e213badc550eb9982777b09d808ca8e5540695200193c820ad6ce1e924cdf342a1ff9feeab68af907798fbc0fa570ef885369090c35b0959baf6e29b86833a14cf3532cd537891f27caa37b10cda2cf6e75ddc11cb13c558cc210be334af3813630bb2c16145cf91ce50099452e0b10e4ce9beb32ab1a8692d2b3cff0e370f87e2219172b7bbcce5d8daca20ce4e047510920000e3a56747839920f72318843b6161fd643c2c56ca396b4c2283f9afef62412c04c934bc1ad4e54eac1acd4447ae3e2f9abf6cb9a5dcbba25aaf4254dc8a081b4eb4b98a11e71ea52be944225f68146444c7780798266feb5927fb3ebd9f7501b07316484f0100b83b7f87a550adddff1c808da6d5d909d9585f844f473c4ab93aa90dafee831ce0aa9c9d402e7b48c06712b4c0a398472364c1a3570029caefd9f3230e792c66e380c296249265a56dedbf5c2ac74cd667c6eb430819f69360d3ff5190adfb2bc669f9a2020264c57aa15e1cc144e9431a457ef86c0d03b32ac0a14d88a48c6a7dda45195c3a7fdfa083715ab572d66a654d68d9116aad0def05a606be11d288cef68e4b13bcc55ef5ae5054c06cebdf221c2b43d388f34e6725cd67e5cff513852fdb8d5bdaa5f4f4038fb8ed5ba9d34079d70d36398d6a88909a32be918fedd03ffd3ac801d45393ed59e007c932f5363e114cb01f50a5b2d445a781d1eb265bc3d3615fd4b5166e01e657cf331580a1b508ba10cfb0dedad4b5ac451b40a7f0df7567fa862a5c1e38a7c5a985e87a1082dfab4a105abf52fd4cab16fded0b7e72b376c5f8ad3c5c15f28304cef5ca6452c4663c961fc38b0c495eb749f9625f51a6b3ccea3db17fb5e2a8e9c815abc956e6a287660909f58c45163d7ea1cb2c3f13724b0dfca3a1c62950ee004d783b6831540", 0x3e6}], 0x1}}], 0x1, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x11) syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb700000001090212"], 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002a2b8d240bb2170200b87010203010902240001a00800040904c81e010103f70909050803ff030406090221072501"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000001100)={0x10, 0x5, [{0x1, 0x0, 0x400}, {0xa4d, 0x0, 0x44f}, {0x3, 0x0, 0x9}, {0x8, 0x0, 0x6}, {0x4, 0x0, 0x8}, {0x0, 0x0, 0xfeb}, {0x1, 0x0, 0x7fffffffffffffff}, {0xec2, 0x0, 0xffffffff}, {0x6, 0x0, 0x2}, {0x5, 0x0, 0x10001}, {0x80000001, 0x0, 0x8}, {0x3, 0x0, 0x2}, {0x3, 0x0, 0x8}, {0x1000, 0x0, 0x1}, {0xe, 0x0, 0xffffffff}, {0x1ff, 0x0, 0x5}]}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000000"]) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000180)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000140)=0x18}) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="3b000000e2000000400101c0"]) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000040)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0xf) r9 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x2, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) close_range(r0, 0xffffffffffffffff, 0x0) executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) (async) r3 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) pselect6(0x40, &(0x7f0000000040)={0x0, 0x9, 0x67, 0x7, 0x401, 0x6, 0x4, 0x1}, &(0x7f0000000080)={0x7, 0x9, 0x9312, 0x8, 0x401, 0x8, 0xffffffff80000001, 0x5}, &(0x7f00000000c0)={0xff, 0x7, 0x80000000000, 0x2, 0x9, 0x43f, 0x1, 0x1}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x5]}, 0x8}) (async) r4 = syz_usb_connect$printer(0x3, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb3, 0x0, 0x8a, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x3, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x6, 0x2, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x80, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x1, 0x4f, 0x1, 0x1, 0xff, 0x5}, 0x1d, &(0x7f0000000240)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x8, 0xf, 0x5, [0x30, 0xffc030, 0x30]}]}, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x438}}, {0xb1, &(0x7f00000002c0)=@string={0xb1, 0x3, "d86d4dcc8bdbaa5ea7e83e6bf300e3af4fa2298398034aa62f151cbf346a334f35d546362379566056ecefbb28e638cd0d1f8404dff7c01ddba4f50b95ee141da042131194d401fecf3ffe899a88793d111464517f87273beb2897569f14180fbdb791dc81ba0742fb91986561dd515136db9faf4df04fdacd4aff9caaf0187422f060e1f538ffaa45ed719519f68a5cf8d625b76c0e40c683a3489d83e46fc075d2a328afcdc1ece7918c0fd16475"}}]}) syz_usb_control_io$printer(r4, &(0x7f0000000480)={0x14, &(0x7f00000003c0)={0x40, 0x4, 0x3e, {0x3e, 0x0, "a087c491926c464206301758dcd52cfd2176fbe0c8e4ff887a1357be5d82f2d6e20b172c44f86dfc91a1aa9c39583b57b3be4475fba55ea00b655082"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40c}}}, &(0x7f0000000680)={0x34, &(0x7f00000004c0)={0x20, 0x17, 0x29, "9f983afd99749a97a52ee6f814c895626069c8fca40aa817d048522aa23f8685289177ccbef9895cf6"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000580)={0x20, 0x0, 0x77, {0x75, "f011f48f96e210f777c7f81acf4147f65d2aebbb38c28b02651bc51f58a7bd17761bcd83fecd3282da1b3d4f73c232743fd8abccad989cd3da9287ad99a4f23bc5114d1b631c42a23183cef1eb109ef69e6bb86c3110274e1e80551ff4f0b989644ca85e074d80a6beef8c894d95b3ae124b2283b9"}}, &(0x7f0000000600)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000640)={0x20, 0x0, 0x1, 0x10}}) (async) syz_usb_control_io(r4, &(0x7f00000008c0)={0x2c, &(0x7f00000006c0)={0x40, 0x3, 0xf3, {0xf3, 0x0, "9f32134f5cf80614183a9ba0c23bc03f8b8ba6591eba8580cc810cb4aa687858b4994146d378da529fd8c89b252ca435406108fe00ec0d058a77cc37cf930e7685f5acac73def1a383140f41e9aebc50d81b55bef450c1c3c68ea56ddeb41c225abfb4a9d0f3a2d9ca1bd91d90103a5f0b5dc98c35771b51ccfce3ae9bd322269f020eac3af640d93a5e61452406afc2f5357466f181a96a0258440456fb317b943c637d5b5a78a6b9ec329d7ccb9ab062528faf872ad92eee5d772ed77633819e31ea99397f17a9c9809562a7d545bb41488b46589d7d5b6516982a0160c632881ae6fa148b649c595e59589053e89ec4"}}, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}, &(0x7f0000000800)={0x0, 0xf, 0x12, {0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x50, 0x0, 0x4}, @ptm_cap={0x3}]}}, &(0x7f0000000840)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa, 0x3, 0x36, 0x3d, "7aadef7e", "b99ff04e"}}, &(0x7f0000000880)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x18, 0x5, 0x64, 0x3, 0xca5, 0x4}}}, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)={0x0, 0xc, 0xc0, "794ce9e2d95a7bc36624052b9ebde1f89402bcef00eb678cf820a2ed8b74b4d2800f8246d6d0bb9b399ab3db20ef55a2d0c1c1afed0253cc9d4d44ae43ac4ca988de6d96cec7ef751d995903fd522680ce72ac4330a5757b48b7eea0981e68c4d06e6fa69e6e4d51df78e0f7636bd2e18c0c98c7c29b6414e805a3bc746b015a33491a041c9e15a64a4d5b3aed373149f1fb2c3223db953868205abaa3159bd0ba939d24a749c1ebc79b2e0cea00430ca88a93814560e0c20afb03161fe8c7ce"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000ac0)={0x20, 0x0, 0x8, {0x400, 0x8, [0xff00]}}, &(0x7f0000000b00)={0x40, 0x7, 0x2, 0x8be}, &(0x7f0000000b40)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000b80)={0x40, 0xb, 0x2, "f3c2"}, &(0x7f0000000bc0)={0x40, 0xf, 0x2}, &(0x7f0000000c00)={0x40, 0x13, 0x6, @random="5b320e1505ad"}, &(0x7f0000000c40)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000c80)={0x40, 0x19, 0x2, '/\''}, &(0x7f0000000cc0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000d00)={0x40, 0x1c, 0x1, 0xc5}, &(0x7f0000000d40)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000d80)={0x40, 0x21, 0x1}}) r5 = syz_usb_connect$cdc_ecm(0x0, 0x76, &(0x7f0000000e80)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x1, 0x1, 0x6, 0xf0, 0xfa, [{{0x9, 0x4, 0x0, 0xcf, 0x2, 0x2, 0x6, 0x0, 0x2, {{0xb, 0x24, 0x6, 0x0, 0x0, "3598325209c7"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x4, 0xdf0, 0x3}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x6, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x8, 0x5, 0x4}}}}}]}}]}}, &(0x7f0000001040)={0xa, &(0x7f0000000f00)={0xa, 0x6, 0x250, 0xa, 0x2, 0x8, 0x10, 0x1}, 0x20, &(0x7f0000000f40)={0x5, 0xf, 0x20, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0xd1, 0x3, 0xf, 0x1, 0xc}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xd, 0x4, 0xfffa}]}, 0x3, [{0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x44e}}, {0x31, &(0x7f0000001000)=@string={0x31, 0x3, "6b742ac5e012846047ea1368d2c58de075f204811da1ca512ee6cdfd3bd1b288f5380cce6ddd240e4feb62cba608d8"}}]}) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000001140)={0x14, &(0x7f0000001080)={0x20, 0x23, 0x53, {0x53, 0x2, "f10dc80c95d5812881058a835e18efee3df1d28a5e5cf00dc06f57b976229edf8786506067ee7233822e3967f06ea74118cc162c88bcbe3b33940e55e9b05555bfdb428e2c0845cf815c958fe4d6511f93"}}, &(0x7f0000001100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001240)={0x1c, &(0x7f0000001180)={0x20, 0x15, 0xe, "bbabdf082930ff213e20217b9f8f"}, &(0x7f00000011c0)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0x4}}) (async) r6 = syz_usb_connect$uac1(0x1, 0xcf, &(0x7f0000001280)={{0x12, 0x1, 0x1d8, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbd, 0x3, 0x1, 0x2c, 0x50, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5a6, 0x7f}, [@selector_unit={0x5, 0x24, 0x5, 0x5, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x94, 0x2, 0x7, 0x44, "96c59d"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xa, 0x4, 0x5, 0x8, "", "5debb7"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x2, 0x79b4, 0x1, "f64d5ec96d9d"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x2, 0xfbe8, 0x7, "03e69f74"}]}, {{0x9, 0x5, 0x1, 0x9, 0x248, 0x70, 0x5, 0xfd, {0x7, 0x25, 0x1, 0x3, 0x7, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0xb63, 0x7, 0x40, 'J'}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x5}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x6, 0x3, 0x8, 0x1, "c167"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x1, 0x4, 0x40, "8586", "54f8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xa, 0x7f, 0x2, {0x7, 0x25, 0x1, 0x1, 0xa, 0x3}}}}}}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x110, 0x9, 0xe, 0x6, 0xff, 0x3}, 0x1d, &(0x7f00000013c0)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x9, 0xff00, 0x7, [0x0, 0x3ff0, 0xe040]}]}, 0x3, [{0xfe, &(0x7f0000001400)=@string={0xfe, 0x3, "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"}}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x340a}}]}) syz_usb_control_io$uac1(r6, &(0x7f00000016c0)={0x14, &(0x7f00000015c0)={0x20, 0x4, 0xa7, {0xa7, 0xe, "9039cc7215c7dfadcfafba8c695e552acfcfe88338a91daaed62803c7837a6b9b0eae01eb7b13badb12ec3627580fa32d7e545cfd6845424d1433d936be38dbdd839d4bcdd54801b642478cefff16c59d52f4945288fb8f61504e4b7aaee6a862fbbcfb057350911f57ab2f83504c788b02dda5b9b9656c32bbd1962b8b5d2916c6f1d0a5d6a1822aa58b5a7fed8cf234cf0ea05f7f56e6b3771d9bb9c9d8bf78fb6ccda34"}}, &(0x7f0000001680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc2a}}}, &(0x7f0000001980)={0x44, &(0x7f0000001700)={0x0, 0x1b, 0x8b, "46e51ab62687a9c570ff34a93c3099e17ec70c31898d4522d554fd16aafd0ff876d9642ed95884b35ba1cdb9c7f97da174ec735b9017660ba39f31f2c8760f2d9001379d67d2b859b09785c744996c3080bb320c60ca4d68802f2d51cb8868321d46d86d6d43132734ffd252a9cb9ef93f2cbe4c4877d3deef42c19dbe228e2714469e6b91de15d0ebd73f"}, &(0x7f00000017c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001800)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001840)={0x20, 0x81, 0x1, "02"}, &(0x7f0000001880)={0x20, 0x82, 0x3, "95bd23"}, &(0x7f00000018c0)={0x20, 0x83, 0x3, "7ef666"}, &(0x7f0000001900)={0x20, 0x84, 0x2, "1600"}, &(0x7f0000001940)={0x20, 0x85, 0x3, "828b86"}}) personality(0x20) (async) fcntl$setpipe(r1, 0x407, 0x100000001) (async) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000001b80)={0x14, &(0x7f0000001a00)={0x40, 0xa, 0xfb, {0xfb, 0x2, "da3b1ee463220591e0c7b7bbe446e44cccf974701b0453b53a35a8c5751883bf40fb50ff05b2a00b278e68d6a3c8b814ba58c77003862914c82a654aff1ecf186996ea3b7974054f79f69837d9197a216284c98fd56862a913ef928c3fe634a380f8cbccedb146db14620fdf56b8bfb34f8625f90cf76599f98839b9c1db6664af61ae2cd31358853d136dca4588df96cb1d68085ea2c20753890cc2e7c5b6f2dd1f61e1b8b332708be580a663a8af254e040df570427964e192a394a5263a44cee6da75dbda02cf3b9eadb9c96553c9d0ede6131d0a16d7af5841b479feca553efd7d3fdda13639c3a2d894cd8c97e0161e136be53cb099a5"}}, &(0x7f0000001b40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001d00)={0x1c, &(0x7f0000001bc0)={0x40, 0x6, 0xad, "286270858a079a3740138a69f83ffeb95c540b85d11d9cfbb7dd3868927a786e6bd7e48e5e6d74f052e38deb3a05fda70e775eff41924065440b490f934a37d78ab8571b84ec831f7643c76ef8574e9e9b6fb8e391ded611a5522e7319da2e84e94944ef78a7e336fb01c6dde6821338efa18461438992e95994cd4e322b9584aabccfdc37cf6bd9765d253a135aad6cdc3998b53b830c825c373f09dc64efba2912f7293eb5b03cc51f6d2098"}, &(0x7f0000001c80)={0x0, 0xa, 0x1}, &(0x7f0000001cc0)={0x0, 0x8, 0x1, 0x2}}) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000001d40)={0x3, 0x2}) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000001d80)) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r7 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000001dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xd, 0xb0, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x2, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x7, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0x0, 0x5}}]}}}]}}]}}, &(0x7f0000002280)={0xa, &(0x7f0000001e00)={0xa, 0x6, 0x310, 0xee, 0x2, 0x9, 0xff, 0xd}, 0xc2, &(0x7f0000001e40)={0x5, 0xf, 0xc2, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0xc, 0x4, 0x7fffff4, 0xf00f, 0xf2ae, [0x5f00, 0xff3f30, 0xc000, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0x87, 0x6, 0x1000, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x1, 0x3, 0x4, 0x1}, @generic={0x49, 0x10, 0xa, "ddc095c3ffd02c187b5fb69154e77d4ee4cb82a262c9f5c78239f6b4a90e5412a0dbb1a1083a27f5f5a7a09a39989c806a15813b5d1f798937ceab6ee44ff788b0a89cc04658"}, @ptm_cap={0x3}, @generic={0x43, 0x10, 0xb, "09ff813a796392eac31b1b6e1ceea522841a5aebd0d5b9348ae7f89264d379001607591a078b99bba4ac5177d8827d8605e38ccce0413195bf7d4bed467186b3"}]}, 0x4, [{0xe3, &(0x7f0000001f40)=@string={0xe3, 0x3, "90df62a5f1a6065f7414c70a7b3fb90126fb6c9eb663ae6565a38013541aa90dc9afe211081d2b4c5be555829bd2bc2183b49e1faf1da565a886f05ff1aff460bc1127d62c3eebee86c332843e3972ad331808f4df9fbef08a48403c19087c67004a80cc9e00163205cd496b9877b31d55c9aa48ae91c38402b219cf906d1a4c6c7d5fb7a94f34567a25194ef7a9aacb570cab19add31d130ba4651755cb555b298b50d832a0d2a236d9b9b1639634a64ef77994c90f6e4d5868df6a6466ad40ae615a0c7c9e6782e38f9984b05d751ee7d339439a917946543be6045db7e4ae5a"}}, {0xe3, &(0x7f0000002040)=@string={0xe3, 0x3, "feaf7882f5754a7034ce4e2839b9af87c8555809bcb38b33e2e7b28da9336e25504a40bd904a92d75ad1f210e375f30c725d6b6e6ec629b64d5b16e1a45d93127e3b7088434348b2e337d7f189ced51c6caf55f0d3dca7487f6bdf3fe332a77bb429e60d4c394d9d4268490a0ae648f008938a73c9cf7ae6f1c1d2aa18ebdac46ef4bc1e6f29420bf84d4300ce63255006250086c18b35a5a6c17819ef1784648150f0e0935596985ba580b674cc67d32cfc812cd9293f67f870e69ab236105391db091d08b39130cd1277c9ffff123ab469dacc345197e6606511855a2904e9a7"}}, {0xc9, &(0x7f0000002140)=@string={0xc9, 0x3, "390c82dfc663d20349d85a6169e92546588f4c33966cd391e28e553b6c2be75c760efa525f854894adb180e61430b4e014efd3a80379bc0d88b0373770f1195015fdfc471ef333dfe62d8d4aa0f7bff09a491412d33484fba6910f7b8e4b1191f3e183a11e30d0152f448ca5e20fea895a4aa2cceac371ac2d7a26944531d276d8bf33145fac11d5a2aff368fb9b6dc03afa3d26cbf8296cb0d7eff668089f3ad34bb99ff3e7cd17b7a23d72d45a609f827e5cb50517f3e2e06b437c5381e5dc44260762c7442d"}}, {0x4, &(0x7f0000002240)=@lang_id={0x4}}]}) syz_usb_control_io$printer(r7, &(0x7f0000002440)={0x14, &(0x7f0000002300)={0x20, 0xd, 0xcc, {0xcc, 0x11, "1b82445f5e6778d9a6a3ffa2a715b0118166515d44cc9aac3512c24acc9d1351e76ea716a0ea0f997ebbdb30a3d795ad2bd1b62a27c9799c2c33e132bbf2278eb7e30f3e955038f6feee787faa8f61734f78cf4c74cbd94fae8911996de05153894b0a6d917886074e517035a152bfa685c95af8ba7964a988cd558deb63cbf5cc848658744aa68a30bb07be3e402289c1e386f895509968507845e515ab433b1d650460d3ca7f701b13fc2a5bb4437bec4fee86020ba21ac7ec564544c8003da9b82bb75312540e18dc"}}, &(0x7f0000002400)={0x0, 0x3, 0x25, @string={0x25, 0x3, "4c62d7776563899815b6d48c2babca2079e35c9ea3e73561948df7a1c1b7fcd8f3d143"}}}, &(0x7f00000026c0)={0x34, &(0x7f0000002480)={0x40, 0xe, 0x2b, "ccf0f445b01d9088add7c66d78263b0139498e4b14d9445939ac50bcea7c6b83a4cea0d57a9f50c5e8f035"}, &(0x7f00000024c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000002500)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000002540)={0x20, 0x0, 0xcb, {0xc9, "aaf2b40758e69d0c650bc1bf251f1de3a7ae998e1e230fe4bd397dfc48a8dd99a1ae8ffe213d7c6c8083dda499ebc7788811aca794bb2d557f5c0477d9eb19d4ac9a3a8bf98fab962194053d592b0d5bd19e6645c434dff1cadfe8c17d3df6044ce94c947b8eb4a93ffd0690a3f8ee980cf3979692586cd1461950a67282e9d82085db93ecb36d06a00384ff52c10efbcb3c72d212a03469a8c500672428429dd781306f37d89774686b46e72bb74587eabb70376f0388cee5f8ed89024c57ffa3ce3cde901e25a4ba"}}, &(0x7f0000002640)={0x20, 0x1, 0x1, 0x7f}, &(0x7f0000002680)={0x20, 0x0, 0x1, 0x31}}) syz_clone(0x20000000, &(0x7f0000002700)="326942e8c91e5f93e34c207a68738dbade57ff2e3f", 0x15, &(0x7f0000002740), &(0x7f0000002780), &(0x7f00000027c0)="00e318c091b499f8ba374a745953a859153f50bab957113fde15dc5851064de281afc1f2a73f4d3aa554431ba1f6d6ee4cdc3b48c43f10a3a4cdcac5507851cefe89c255aebff87c2ad56c2046141158a6f4045072d038256162c1495e7eda855eef8d8d918dd47c18ee30602f20b87c2b6e83f779ae08ca0784f5b4c8e0e05282ff3279d3e9e91ba3763ed792d6adc1d45a0ec1d89b3a727cc8ff5a7ce9a9da8f6489b79f3dc7de25bbc21d10a7f155e44a5b16c253f9f9bc1e6cfebbdf507c2f8b6cff67b4738c698d2f") (async) r8 = syz_usb_connect$cdc_ncm(0x3, 0xd0, &(0x7f00000028c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbe, 0x2, 0x1, 0x8, 0x20, 0x93, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "f8a89a21ad"}, {0x5, 0x24, 0x0, 0xf1cc}, {0xd, 0x24, 0xf, 0x1, 0xbb9c, 0x1, 0x5, 0x73}, {0x6, 0x24, 0x1a, 0x1, 0x28}, [@mbim={0xc, 0x24, 0x1b, 0x401, 0x4, 0x1, 0x9f, 0x6, 0x2}, @country_functional={0x8, 0x24, 0x7, 0x6, 0x8, [0x5]}, @mdlm_detail={0x49, 0x24, 0x13, 0x3, "09839df768059d261cb0b0e360d527ae5d77c99515cd1d13f59aec85378708d35861cca7ca0b10de2168a4177123d3434e6bc2c69581f4484cd22be6089e5c0498d514b635"}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x5d, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x2, 0xf, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x7, 0xe9, 0x44}}}}}}}]}}, &(0x7f0000002d40)={0xa, &(0x7f00000029c0)={0xa, 0x6, 0x201, 0x5, 0x2, 0x9, 0x20, 0x6}, 0x10, &(0x7f0000002a00)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0xb, 0x8, 0x3, 0x8}]}, 0x5, [{0x4, &(0x7f0000002a40)=@lang_id={0x4, 0x3, 0x280a}}, {0xa2, &(0x7f0000002a80)=@string={0xa2, 0x3, "12bb809110c8b0444750fda77c547292a0e40c82d041661be060251da041e60b4cb38133cf610b0e31fa63410ca110690a95ea0e1fc08956661fa729f744666aea5638a4f1c8a4336615715115e153053d9053014d584baa30ca308d60bf9e19e4ceecdd441a5760c369bb99d1671884f78c48cae7ba83725a72a5c3ee947cd1e08b960050caca960a1056dd27ac56b308e93298b0e4536eb15b3d47b653ed80"}}, {0xe2, &(0x7f0000002b40)=@string={0xe2, 0x3, "8639560df7c43e0441b2a1cee2ae908369939965647544ee755249bb84d680c8f469bc610d0cf6c71dc523fd0b2f1876a7e1746450df7a8d0bd0c9bd3a1b4ac053592caaad063dbc66f36008cbf6df3bb373a0560ef85ed75f9dbe94d5db1e74f13771bf6d5edbc471e5135ff55375cebeb8c159de69fda2baba02a7545481dda95e9bf6afa201caed5dab8e7688c37b01d161d3f8913802f150d6336b3eb9b009089a3d7a0f0ecf1125edde01b247a0c151c3d4b7a51e3909c92a37e480099b6b636dacec35aae0c0d2139764ce29f495aaf23c84b4bba3522931ce5a2953b7"}}, {0x4, &(0x7f0000002c40)=@lang_id={0x4, 0x3, 0x100a}}, {0x87, &(0x7f0000002c80)=@string={0x87, 0x3, "0a442db44161bdaead42942c20de74f01d4742383f713a6c09461f167c664e25d7bb919887d429e1d5a418d48d45334d8e85ccb4eb4cec870168ae1c9ad647dd72b6bc6355c61b72d3f7a149673d2a6ec90305abad2b34e935404da2651cf991a1cad59d98caf13fb38f1c8ea38617c2f96492d04f04f6eb6ffd863673b712e253436e59db"}}]}) syz_usb_control_io$cdc_ncm(r8, &(0x7f0000002f00)={0x14, &(0x7f0000002dc0)={0x20, 0x36, 0xbe, {0xbe, 0xa, "0567b464e5ee179c5aed42df410972ab9cab345a867efef7857567bb36cf41b0f58883becb275e215fa6c9969eec19480f85009a8144576972950b25b44d9a8e7c5bca1bf003dadcd17f4d0c11524a21a6de5f4be502f856a1b82436e7f5c74463933c6345387377d646a44010ec708850742e84ece5528653e1a8aa9e71f356432384d28b40be92b8b377e94709c70ec3f1a06084641843383668818f26179a65137d58fdb534a70a73c320c25dc4db59439747f95617e53d6a01b2"}}, &(0x7f0000002ec0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003180)={0x44, &(0x7f0000002f40)={0x20, 0x1, 0x5e, "7f22e086f336512a95c087e0cca8c8ca63c8464160d36e8985d462fc7a622d652c0fc844daa3a8df45c2fca662a083a4b87202b77275a47cd837de51c28c803780c3a1cfaea54270c9049b491cfe6f660ba4772b3ac1317297db84601a0d"}, &(0x7f0000002fc0)={0x0, 0xa, 0x1}, &(0x7f0000003000)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000003040)={0x20, 0x80, 0x1c, {0x3, 0x9, 0x7, 0xc257, 0xff, 0x6, 0x3, 0xffffffff, 0x3, 0x7, 0x5, 0x1}}, &(0x7f0000003080)={0x20, 0x85, 0x4, 0x4d}, &(0x7f00000030c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000003100)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000003140)={0x20, 0x89, 0x2}}) (async) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, &(0x7f0000003200)=0x1, 0x4) (async) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000003240)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x79, 0x1844, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0xc0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0x8001, 0x73, 0x1, {0x22, 0x8fe}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x5, 0xfe}}}}}]}}]}}, &(0x7f0000003580)={0xa, &(0x7f0000003280)={0xa, 0x6, 0x110, 0xe, 0x4, 0x5, 0x40, 0x50}, 0x64, &(0x7f00000032c0)={0x5, 0xf, 0x64, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0xf, 0x9, 0x7, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x20, 0xf9, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "5fa068280d1c75c9f72523f61a3a554c"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0xb, 0x3, 0x1000, 0x4}, @ssp_cap={0x24, 0x10, 0xa, 0x10, 0x6, 0x7ff, 0xf, 0x6, [0xffc000, 0x3fcf, 0x30, 0x18030, 0x0, 0x1feff00]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xa, 0x6, 0x1000}]}, 0x6, [{0xa3, &(0x7f0000003340)=@string={0xa3, 0x3, "ecca7bb588c65fe798fe243110dfd69a9eb93275d2198c5a44911c91ea22bdddba330f3c81d3ec8d10f5b045f89b3ceff4268d0d7cedd6ff69c08ed05d15363c5025330bc103c46e69e79181cb2ec99b977fef65c48049f3b4900a65fffd320bbb11a9bf36031cc2fe67847c97c9d848283421e6adc96fa3a3b8f71ac86935c5b4ee7c46ce3f7f8d3f8617a5cc68b49c754c890f2b101a8df81d9273d484b5a920"}}, {0x4, &(0x7f0000003400)=@lang_id={0x4, 0x3, 0x4001}}, {0x69, &(0x7f0000003440)=@string={0x69, 0x3, "b92fd773659f88803f1d440c0d40ecf4aca7b5673840acce3984d92940725ef0f118fbb9c63797c518556d57b57e6690d773342ee9e7da91c03cedb9a266be21dc8bd82279e702257cfa2ac2ddcc81da7dfe0e15a8a422f6391bdfeac2eb12aefe49387287149a"}}, {0x4, &(0x7f00000034c0)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000003500)=@lang_id={0x4, 0x3, 0x1425}}, {0x4, &(0x7f0000003540)=@lang_id={0x4, 0x3, 0x444}}]}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003640), r2) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r10, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x44000000}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x3c, r11, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) syz_usb_control_io$printer(r4, &(0x7f00000038c0)={0x14, &(0x7f0000003740)={0x40, 0xd, 0x100, {0x100, 0x30, "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"}}, &(0x7f0000003880)={0x0, 0x3, 0xd, @string={0xd, 0x3, "c169645ae7fbaf39c078c3"}}}, &(0x7f0000003ac0)={0x34, &(0x7f0000003900)={0x20, 0x14, 0x72, "8c48608f610528f3de3473ef98ac7da3b87e21984a00623c0335af74e951cdf0e6be9bee1a4b1ecb6a25c36d6de2767f1565d328874979d31bf6dbe36b9d8b28c6c58da95fc9308e10551218f2ecb29ea7d3cce9ac54a5ec0e92f538916e98debab96bce5e4ba34f2a7547e1c8df87ac628e"}, &(0x7f0000003980)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000039c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000003a00)={0x20, 0x0, 0x31, {0x2f, "c65a45a8b1057ef0220c60e115921353b0c1b405caa639ba0bfec4dabafd61b04efc01d87b00816550de8d3df40e04"}}, &(0x7f0000003a40)={0x20, 0x1, 0x1, 0xec}, &(0x7f0000003a80)={0x20, 0x0, 0x1, 0xcc}}) (async) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000004140)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000004100)={&(0x7f0000003f40)={0x1b4, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_MODES_OURS={0xd8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5eac}, @ETHTOOL_A_BITSET_MASK={0xc6, 0x5, "901391fe9f2f4dc71e5aa98e30a04751d7c37ad591784d67226103cdd8841367e0a65d98803d955d0f468f39931ffdcef2bbe165afd46a57e9614e9f1a0793b8816735e3f3c7c66410496b68e8c240820061da57375a1fc21bc33e19b6cb0d6a8b0a03a6cb68230e1fb323f85600b36084d82eaf087dfdc29b2fbc9741e489153b39238a49531aa86bb08b638dbf2252f5db9fbe0b392c1ec098bea002fb7620e839739f4e5908e45e63c07aa232785be56065a6ae074df219de239f06e947ac278a"}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4}, 0x4001) executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2a001, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000180)={'vcan0\x00', 0x200}) (async) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x4) (async, rerun: 64) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000100)={0x7, 0x93ed}) (async, rerun: 64) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'wg1\x00', 0x0}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xea200, 0x0) (async) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x1a3001, 0x18) write$khugepaged_scan(r5, &(0x7f0000000000), 0x8) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r4, 0xa09ab000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001100)='/sys/power/pm_print_times', 0x200, 0x0) (async, rerun: 32) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) (rerun: 32) close(0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) close_range(r4, r6, 0x0) (async) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x8) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) syz_clone(0x2204000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r8 = memfd_secret(0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000240)={'vxcan1\x00'}) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x4e24, 0x0, @private2, 0x40407}, 0x1c) (async) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r7, &(0x7f0000000380)="e8", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) (async) sendto$inet6(r7, &(0x7f0000000040)="06f3ed2d81f7ecf81fd576bd9c560969cb65f03d2ca954f7f38f17ec", 0x1c, 0x8000, &(0x7f0000000100)={0xa, 0x4e22, 0x9, @remote, 0x6}, 0x1c) shutdown(r7, 0x1) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) executing program 35: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=0']) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000057eb0020fd070400fa8e0102030109021b00020000000009044a0000ff4868000904"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) (async) r3 = eventfd2(0xd90a, 0x80801) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r3, 0x8}) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r4, 0x200, 0x0, r4}) (async, rerun: 64) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) (rerun: 64) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000040)={'ip6gre0\x00', 0x5}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) (async) syz_open_dev$usbfs(0x0, 0x204, 0x2) (async) r6 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000102505a1a440000102030109025c0002010000000904000001020d00000524060001052400a2000d240f01f9fffffffdff08000006241a0000080905810300040000000904010000000000000904010102020d00000905820210000000000905030240"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000002540)={0x20, 0x80, 0x1c, {0x1, 0x9e64, 0x1002, 0xd, 0x400, 0x1, 0x8a82, 0x5, 0x10, 0x8, 0xffff, 0xffff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000c00)={0x14, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) (async) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) executing program 36: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = add_key$keyring(&(0x7f00000063c0), &(0x7f0000006400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$describe(0x6, r1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="00003393ade938a1f4e4fb79a41770edc1dbca7ec76f4f230634", 0x1a}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f00000001c0)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x35}}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x38a, 0x0, 0x0, 0x0, 0xfffd, &(0x7f0000000180)='syz_tun\x00', 0xf360, 0xffffffff, 0x1}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) close_range(r2, 0xffffffffffffffff, 0x0) executing program 37: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000000"]) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000180)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000140)=0x18}) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="3b000000e2000000400101c0"]) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000040)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0xf) r9 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x2, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) close_range(r0, 0xffffffffffffffff, 0x0) executing program 38: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2a001, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000180)={'vcan0\x00', 0x200}) (async) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x4) (async, rerun: 64) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000100)={0x7, 0x93ed}) (async, rerun: 64) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'wg1\x00', 0x0}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xea200, 0x0) (async) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x1a3001, 0x18) write$khugepaged_scan(r5, &(0x7f0000000000), 0x8) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r4, 0xa09ab000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001100)='/sys/power/pm_print_times', 0x200, 0x0) (async, rerun: 32) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) (rerun: 32) close(0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) close_range(r4, r6, 0x0) (async) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x8) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) syz_clone(0x2204000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r8 = memfd_secret(0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000240)={'vxcan1\x00'}) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x4e24, 0x0, @private2, 0x40407}, 0x1c) (async) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r7, &(0x7f0000000380)="e8", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) (async) sendto$inet6(r7, &(0x7f0000000040)="06f3ed2d81f7ecf81fd576bd9c560969cb65f03d2ca954f7f38f17ec", 0x1c, 0x8000, &(0x7f0000000100)={0xa, 0x4e22, 0x9, @remote, 0x6}, 0x1c) shutdown(r7, 0x1) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) program crashed: WARNING in kvm_put_kvm bisect: bisecting 49 programs bisect: split chunks (needed=false): <49> bisect: split chunk #0 of len 49 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=6m8s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 17, 17, 15, 23, 12, 13, 22, 28, 21, 11, 27, 8, 30, 26, 18, 15, 30, 23, 14, 20, 11, 7, 6, 21, 30, 30, 26, 15, 21, 30] detailed listing: executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffffffffffb) ioctl$VHOST_VDPA_GET_STATUS(0xffffffffffffffff, 0x8001af71, &(0x7f0000000040)) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') (async) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)='B', 0x1}], 0x100000000000003b, 0x0, 0x0, 0x11000000}, 0x20000001) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000540)) (async) ptrace$cont(0x20, r1, 0x0, 0x0) (async) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r3, 0x407, 0x0) (async) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x1, 0x4, 0x0, 0x0, 0x0, 0x10}}, 0x50) (async) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x2000000) (async) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) tee(r2, r4, 0x47, 0x1) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) executing program 0: mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xc) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mkdir(0x0, 0x0) rmdir(0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='-pids )'], 0x1f) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000280), 0x800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_follow}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_auto}]}) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='omfs\x00', 0x20004, &(0x7f00000001c0)='\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) executing program 34: mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xc) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mkdir(0x0, 0x0) rmdir(0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='-pids )'], 0x1f) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000280), 0x800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_follow}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_auto}]}) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='omfs\x00', 0x20004, &(0x7f00000001c0)='\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x344) ioctl$ASHMEM_GET_NAME(r1, 0x40087708, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000080)={0x14, &(0x7f00000002c0)={0x0, 0x9, 0xcf, {0xcf, 0x23, "2ed8790a049519bd7bb5137597ab7abd83d6fcd13affc30b46bdc57d3730695f116bfd1eb012bf3cab7c0b0a4a3ee23fa0515de95433adf38b1cf3e4e2e277bb8632b6b4202c1b2cb2dda45853b648f99fc55af5319a11d3fff374c3fe74cd77ddd1ad4524c42d00a11b74f9a85783dc148dd2c02298101be2a85c96739bf16f50a292653966a2125f88beccd82f16b588dbd34af4b27b1ebebfc2b8fac3ea1dfb93538dc9577c1edbe502967bbdbc536a419aaf9ec42d612c79c8d2cb495fc0e889a0fcfd41ba47a0603e1cb0"}}, &(0x7f00000003c0)={0x0, 0x3, 0xe7, @string={0xe7, 0x3, "424ae646e7cfa911460408c6ddb8e9fa3c4b329663bb188bd4f34b549d5c7f439c633ca91988159ecf6c590811223d780232c42ea3fd07b677c8dc805a70e770457195fb07323cdb6c7da4a626128b5bf06f8d613cc9b7a3a67db3779066cb1a1282b3fbf4fa5ceb1885776e7dcff37aeed33e35c7790157fcc94c3bc51aa92af99678871a43f16906fbe59452bfb798b3bfe87ee9532d6bc71399f2e2c46d2ce275025444f2680a9cf0aba858fcb49067006e6d145b742da307887b60d8957117c04104bc77c202d933a2932675bba75d703d17f4cbfda59deec03951383766f2a9186f56"}}}, &(0x7f0000000780)={0x44, &(0x7f00000004c0)={0xb388b94bca248dbb, 0x0, 0xef, "ec4fb39cfd067316a1299a6ed1f893f7c7c8f8e19228f51dae9832b1bc0e2c84568835d5e35a1c740fefe329a75acec285a01435f2cf9b357369a43cebd38c7746da289306c39fa8e11202790cbc2f7ee2be8532373a676a1ed15a7bc8a50da96da333337142d30267fa25b0b6956bb8fc2019c6478c0980e68197fb064840991fcd8cbbb404c3cdf9b2ce0cdfdb9c7dcb80457cf020e6216c1a728cf3f32335fe2b914496f804de9da65f52d695b36aeebfac892f10f2e8fe430352f3306a4a9287c190f06f7414e72f8de7f84d1279bc341b61a078681286eaff37e60b4b2538ed5d316e54665a2ce9ea8dc63a16"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0xfc}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000005c0)={0x20, 0x81, 0x3, "166e46"}, &(0x7f0000000600)={0x20, 0x82, 0x1, "da"}, &(0x7f0000000640)={0x20, 0x83, 0x1, 'n'}, &(0x7f0000000680)={0x20, 0x84, 0x4, "845fcf7f"}, &(0x7f0000000740)={0x20, 0x85, 0x3, "3d1a09"}}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x15}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSBRK(r4, 0x5427) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001fc0)={0x14, 0x0, &(0x7f0000000240)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) socket$inet6(0xa, 0x3, 0xfffffffc) io_setup(0x3, 0x0) recvmsg(r0, &(0x7f0000001400)={&(0x7f00000001c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000240)=""/181, 0xb5}], 0x2, &(0x7f0000001340)=""/147, 0x93}, 0x40010040) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'macsec0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x3, 0x40, 0x0, 0x8, 0x9, 0x8, 0x7, 0x6, [0x7fffffff, 0x2, 0x2, 0x7, 0x0, 0x7, 0xe25c, 0x7fff]}}) r1 = gettid() sigaltstack(&(0x7f0000000000)={0x0, 0x180000001, 0xffffffffffffff73}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) io_getevents(r3, 0x823d, 0x1, &(0x7f0000001440)=[{}], &(0x7f0000001480)) tkill(r1, 0x21) pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RLCREATE(r4, &(0x7f0000000680)={0x18, 0xf, 0x1, {{0x2, 0x0, 0x2}, 0x6}}, 0x18) write$P9_RCLUNK(r4, &(0x7f0000000bc0)={0x7, 0x79, 0x1}, 0x7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = fsopen(&(0x7f0000000040)='9p\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='9p\x00', &(0x7f0000000180)='\\.\x00', 0x0) close_range(r5, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x900080, &(0x7f0000000140)=ANY=[]) executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400003900120002002800000219002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x400, 0x70bd27, 0x25dfdbfc, 0xb, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x22040081}, 0x80) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x50, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x3ff}, {0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) getpid() mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x7ffff000) executing program 6: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)={0x2c, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd}, @nested={0xc, 0x1a, 0x0, 0x1, [@nested={0x8, 0x0, 0x0, 0x1, [@nested={0x4, 0x136}]}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x80c0}, 0x4080) (async, rerun: 64) read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) (rerun: 64) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) (async, rerun: 32) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r5, 0x8}) (async) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001100)='/sys/power/pm_print_times', 0x200, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000001140)={0x2020}, 0x2020) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x2df}) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[@uexit={0x0, 0x18, 0x2}, @rdmsr={0x32, 0x18, {0xb15}}, @cpuid={0x14, 0x18, {0x40, 0x6}}, @wr_crn={0x46, 0x20, {0x0, 0x7}}, @cpuid={0x14, 0x18, {0x3, 0x1}}, @cpuid={0x14, 0x18, {0x800}}], 0x98}) ioctl$KVM_RUN(r6, 0xae80, 0x0) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) write(r4, &(0x7f0000000400)="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", 0x1f000) executing program 6: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x64a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) (async, rerun: 64) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (rerun: 64) remap_file_pages(&(0x7f0000a33000/0x2000)=nil, 0x2000, 0x2000004, 0x18b800000000000, 0x1) (async, rerun: 64) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) recvmsg(r1, &(0x7f0000000400)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, 0x80, 0x0}, 0x142) (async) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{0x0, 0x1c}], 0x1}, 0x0) (async) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x82}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/6, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async) r2 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa2) mlock(&(0x7f0000903000/0x4000)=nil, 0x4000) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0xfffffffffffffff5, 0x0, {0x3}}, 0x18) (async) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB]) (async) umount2(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000140)={0x4, &(0x7f0000000440)="6f654c65c7f986ec4f8905b8eaba466f91ecf30fecc110802559413ce4e59651aca589c7e8b01f869d459443be50b1"}) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) (async) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='devices.list\x00', 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000040), 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000340)={'vlan0\x00', 0x400}) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f00000000c0)=0x1) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0xa, 0x8f) r6 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000d40)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x20bc, 0x5500, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0xd0, 0x9, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x20, 0x0, 0xf7}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x81, 0x2, 0xff}}]}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000840)={0x2c, &(0x7f00000001c0)={0x0, 0x24, 0x61, {0x61, 0x22, "efc16576927597daedfbb03ba3b49a8704c213ecd3a4accdd7391105eb236471080bb6e7b43fa415f554818cce96b4222f5750e31221568203eb72ee9b9a2ce9de71ada8eb847a3d24961e8748f05ae7d9b916e6b8edbca79ea0c221873e91"}}, 0x0, &(0x7f0000000780)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x80, 0x30, 0x1}]}}, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) executing program 6: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x402003, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/packet\x00') read$FUSE(r2, &(0x7f0000004180)={0x2020}, 0x2020) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x4c, &(0x7f000002eff0)={0x0, 0x0}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) executing program 6: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010080, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000380)={0x3, 'pim6reg\x00', {0xc5}, 0x9}) (async, rerun: 64) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) connect$unix(r2, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x4}) (async, rerun: 32) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) (rerun: 32) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) (async) mkdir(&(0x7f0000001040)='./file0\x00', 0xc0) (async) getxattr(&(0x7f0000001240)='./file0\x00', 0x0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002080), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r4, 0x80083314, &(0x7f00000020c0)) (async, rerun: 32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000000)={0x2, 0x8, 0x1, 0xfffffffd}, 0x10) (async) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000200)=""/235, 0xeb}], 0x1, 0xfff, 0xfffffffe) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_handle={0x77682a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/163, 0x0, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f00000005c0)=""/190, 0x0, 0x0, 0x40}}, &(0x7f0000000340)={0x0, 0x16, 0x30}}}], 0x0, 0x0, 0x0}) executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) (async, rerun: 64) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x101000) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cpuset\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x2000808, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) signalfd4(r0, &(0x7f0000000000)={[0x99]}, 0x8, 0x800) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async, rerun: 32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000db", @ANYRES16=r5, @ANYBLOB="010025bd7000fddbdf25050000000c00018008000100", @ANYRES32=r7, @ANYBLOB="14000380040004000400050008000200000000000800050010270800"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0x15, 0x0, 0x100, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0x0, 0xff}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0x7, 0x800, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', 0x1, 0x7800, 0xb, 0x80}}) (async, rerun: 64) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000500)=0x14) (rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'ip_vti0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'gretap0\x00', 0x0}) (async) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) (async) r15 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r15, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r15, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$XDP_RX_RING(r15, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async, rerun: 64) setsockopt$XDP_UMEM_FILL_RING(r15, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async, rerun: 64) bind$xdp(r15, &(0x7f0000000100)={0x2c, 0x0, r14}, 0x10) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'bond_slave_0\x00', 0x0}) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000640)={0x27c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x27c}}, 0x48040) executing program 6: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=0']) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000057eb0020fd070400fa8e0102030109021b00020000000009044a0000ff4868000904"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) (async) r3 = eventfd2(0xd90a, 0x80801) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r3, 0x8}) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r4, 0x200, 0x0, r4}) (async, rerun: 64) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) (rerun: 64) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000040)={'ip6gre0\x00', 0x5}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) (async) syz_open_dev$usbfs(0x0, 0x204, 0x2) (async) r6 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000102505a1a440000102030109025c0002010000000904000001020d00000524060001052400a2000d240f01f9fffffffdff08000006241a0000080905810300040000000904010000000000000904010102020d00000905820210000000000905030240"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000002540)={0x20, 0x80, 0x1c, {0x1, 0x9e64, 0x1002, 0xd, 0x400, 0x1, 0x8a82, 0x5, 0x10, 0x8, 0xffff, 0xffff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000c00)={0x14, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) (async) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100033060000000000000000fe800000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x78, 0x0, &(0x7f0000000600)=[@dead_binder_done, @acquire_done={0x40106309, 0x2}, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = add_key$keyring(&(0x7f00000063c0), &(0x7f0000006400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$describe(0x6, r1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="00003393ade938a1f4e4fb79a41770edc1dbca7ec76f4f230634", 0x1a}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f00000001c0)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x35}}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x38a, 0x0, 0x0, 0x0, 0xfffd, &(0x7f0000000180)='syz_tun\x00', 0xf360, 0xffffffff, 0x1}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) close_range(r2, 0xffffffffffffffff, 0x0) executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1d1501, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000180)) (async) r1 = syz_clone(0x10000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x20, r3, 0x1, 0x70bd26, 0x25dedbff, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffff5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) sched_setparam(r1, &(0x7f0000000040)=0xa) (async) prlimit64(r1, 0x9, 0x0, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080003000d000000", 0x24) (async) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r5 = syz_open_procfs(r1, &(0x7f0000000000)='net/ip_tables_matches\x00') r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) (rerun: 32) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40085503, &(0x7f0000000080)=0x2) (async, rerun: 32) r8 = userfaultfd(0x80001) (rerun: 32) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) (rerun: 64) ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) r11 = open(&(0x7f0000000080)='./file1\x00', 0x123b42, 0x1) sendfile(r11, r6, 0x0, 0x80000000) r12 = open(&(0x7f0000000080)='./file1\x00', 0x0, 0x8b50c7eb3b49266e) sendfile(r12, r5, 0x0, 0x80000000) executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xffffffffffffffdc, 0x0, &(0x7f0000000000)=[@register_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000000)={0x1}) r2 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x200, 0xa, 0x0, 0x0, 0x2b}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, {0xeb}, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x2000000, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0xe8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280), 0x8019, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x130, 0x0, 0x4, {0x6, 0x2, 0x0, '\x00', {0x1, 0x4, 0x6, 0xffffffff, 0x0, 0x0, 0x2000, '\x00', 0xffffffffffffffff, 0x28, 0xfff7fffffffffffa, 0xa4, {0x100000000, 0x1fffffe}, {0x1f97, 0x6}, {0x5, 0x26}, {0x6, 0xff}, 0x200007, 0xe19, 0x800, 0x12}}}}) statx(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x100, 0x801, 0x0) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) connect$inet6(r2, &(0x7f00000000c0), 0x1c) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x20a300, 0x0) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f00000001c0)=0x1, 0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x68, 0x0, &(0x7f0000000380)=[@dead_binder_done, @exit_looper, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x15, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x4, 0x8000000000040}, @fd, @fda={0x66646185, 0x9, 0x2, 0x2f}}, &(0x7f0000000480)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) io_setup(0x5, &(0x7f0000000440)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r3, 0x1, &(0x7f00000006c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) r5 = syz_open_dev$mouse(&(0x7f0000000000), 0xffffffff, 0x410400) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x3, r1, &(0x7f00000004c0)="39cd2dc4659a019f4a0c57e0dc60fde8632b7a4fe600a13bd806b568dd90a53f34491de970b0c4fe43dbb8bfdc8e91b68f61ae5174136ef59ad3bb2ff8e736f323f4779959c15e8f6a5582d3364b3facc340d922090139d9ab4b7dc6a693fa5fb7c033bfeef2992c1cf6f17005bb14930d5486b430fa9fe9c5b093cda8cea881bd794949bd3cdcf0e26b5fdc12a4caadb5319bf891cfe87fc24e2005617ab55af008d3fe86d06f9307", 0xa9, 0x8, 0x0, 0x1, r5}]) executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, &(0x7f00000000c0)=""/142, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r1, 0x45809000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x4, 0x52, 0x0, 0x10004}]}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={r4, 0x3, r3, 0xfffffffa}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000300)={r4, 0x1, r1, 0x1}) r5 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='rootcontext', &(0x7f00000001c0)='--^$-\x00_\x8e\xbd\xd8\x10\xd7J\x15\x8cG\x12h\xda\xde2zN-\xb7\xcc\x9b\xa7\x1a2s\xcc\xebq8^Q\x95\x87\xff\xb6\xfd\x89\xcdc\x95\xa3u\xf1w\x7fs\xc0p\xedf\xec\xe1\xd2\xdb\x10n\x88\x9a\r\xe5\x90T\xf3\xbdo\x92\xa5\xb2U0\x97%sl\xd9\xb0\x94\xe4\xef\xacv\xd6\xc3\xaa\xf4|a\xd68\xc4=(\xfcA\x92h\xcan\\D1\xe0\xd9\xac\xd0\xc3MU\xc9\f\xed\xe56\xe1/\xad\xa6j\xb5\xdc\f\x94\x15\xea\x94\x00\x1b', 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000140)="441f08d600270bee724ef54e91eeffbe1e68d5040d73161feeb0f24cb1", 0x1d) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) ioctl$BLKRRPART(r7, 0x125f, 0x0) executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r1 = fsopen(&(0x7f0000001980)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f00000019c0)='uid', &(0x7f0000001a00)='./file0\x00', 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x7d, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x8001, 0x80, 0x5, 0x1}, {0x5, 0x7, 0x2}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000b00)="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", 0x3e6}], 0x1}}], 0x1, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x11) syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb700000001090212"], 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002a2b8d240bb2170200b87010203010902240001a00800040904c81e010103f70909050803ff030406090221072501"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000001100)={0x10, 0x5, [{0x1, 0x0, 0x400}, {0xa4d, 0x0, 0x44f}, {0x3, 0x0, 0x9}, {0x8, 0x0, 0x6}, {0x4, 0x0, 0x8}, {0x0, 0x0, 0xfeb}, {0x1, 0x0, 0x7fffffffffffffff}, {0xec2, 0x0, 0xffffffff}, {0x6, 0x0, 0x2}, {0x5, 0x0, 0x10001}, {0x80000001, 0x0, 0x8}, {0x3, 0x0, 0x2}, {0x3, 0x0, 0x8}, {0x1000, 0x0, 0x1}, {0xe, 0x0, 0xffffffff}, {0x1ff, 0x0, 0x5}]}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000000"]) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000180)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000140)=0x18}) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="3b000000e2000000400101c0"]) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000040)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0xf) r9 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x2, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) close_range(r0, 0xffffffffffffffff, 0x0) executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) (async) r3 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) pselect6(0x40, &(0x7f0000000040)={0x0, 0x9, 0x67, 0x7, 0x401, 0x6, 0x4, 0x1}, &(0x7f0000000080)={0x7, 0x9, 0x9312, 0x8, 0x401, 0x8, 0xffffffff80000001, 0x5}, &(0x7f00000000c0)={0xff, 0x7, 0x80000000000, 0x2, 0x9, 0x43f, 0x1, 0x1}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x5]}, 0x8}) (async) r4 = syz_usb_connect$printer(0x3, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb3, 0x0, 0x8a, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x3, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x6, 0x2, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x80, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x1, 0x4f, 0x1, 0x1, 0xff, 0x5}, 0x1d, &(0x7f0000000240)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x8, 0xf, 0x5, [0x30, 0xffc030, 0x30]}]}, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x438}}, {0xb1, &(0x7f00000002c0)=@string={0xb1, 0x3, "d86d4dcc8bdbaa5ea7e83e6bf300e3af4fa2298398034aa62f151cbf346a334f35d546362379566056ecefbb28e638cd0d1f8404dff7c01ddba4f50b95ee141da042131194d401fecf3ffe899a88793d111464517f87273beb2897569f14180fbdb791dc81ba0742fb91986561dd515136db9faf4df04fdacd4aff9caaf0187422f060e1f538ffaa45ed719519f68a5cf8d625b76c0e40c683a3489d83e46fc075d2a328afcdc1ece7918c0fd16475"}}]}) syz_usb_control_io$printer(r4, &(0x7f0000000480)={0x14, &(0x7f00000003c0)={0x40, 0x4, 0x3e, {0x3e, 0x0, "a087c491926c464206301758dcd52cfd2176fbe0c8e4ff887a1357be5d82f2d6e20b172c44f86dfc91a1aa9c39583b57b3be4475fba55ea00b655082"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40c}}}, &(0x7f0000000680)={0x34, &(0x7f00000004c0)={0x20, 0x17, 0x29, "9f983afd99749a97a52ee6f814c895626069c8fca40aa817d048522aa23f8685289177ccbef9895cf6"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000580)={0x20, 0x0, 0x77, {0x75, "f011f48f96e210f777c7f81acf4147f65d2aebbb38c28b02651bc51f58a7bd17761bcd83fecd3282da1b3d4f73c232743fd8abccad989cd3da9287ad99a4f23bc5114d1b631c42a23183cef1eb109ef69e6bb86c3110274e1e80551ff4f0b989644ca85e074d80a6beef8c894d95b3ae124b2283b9"}}, &(0x7f0000000600)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000640)={0x20, 0x0, 0x1, 0x10}}) (async) syz_usb_control_io(r4, &(0x7f00000008c0)={0x2c, &(0x7f00000006c0)={0x40, 0x3, 0xf3, {0xf3, 0x0, "9f32134f5cf80614183a9ba0c23bc03f8b8ba6591eba8580cc810cb4aa687858b4994146d378da529fd8c89b252ca435406108fe00ec0d058a77cc37cf930e7685f5acac73def1a383140f41e9aebc50d81b55bef450c1c3c68ea56ddeb41c225abfb4a9d0f3a2d9ca1bd91d90103a5f0b5dc98c35771b51ccfce3ae9bd322269f020eac3af640d93a5e61452406afc2f5357466f181a96a0258440456fb317b943c637d5b5a78a6b9ec329d7ccb9ab062528faf872ad92eee5d772ed77633819e31ea99397f17a9c9809562a7d545bb41488b46589d7d5b6516982a0160c632881ae6fa148b649c595e59589053e89ec4"}}, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}, &(0x7f0000000800)={0x0, 0xf, 0x12, {0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x50, 0x0, 0x4}, @ptm_cap={0x3}]}}, &(0x7f0000000840)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa, 0x3, 0x36, 0x3d, "7aadef7e", "b99ff04e"}}, &(0x7f0000000880)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x18, 0x5, 0x64, 0x3, 0xca5, 0x4}}}, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)={0x0, 0xc, 0xc0, "794ce9e2d95a7bc36624052b9ebde1f89402bcef00eb678cf820a2ed8b74b4d2800f8246d6d0bb9b399ab3db20ef55a2d0c1c1afed0253cc9d4d44ae43ac4ca988de6d96cec7ef751d995903fd522680ce72ac4330a5757b48b7eea0981e68c4d06e6fa69e6e4d51df78e0f7636bd2e18c0c98c7c29b6414e805a3bc746b015a33491a041c9e15a64a4d5b3aed373149f1fb2c3223db953868205abaa3159bd0ba939d24a749c1ebc79b2e0cea00430ca88a93814560e0c20afb03161fe8c7ce"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000ac0)={0x20, 0x0, 0x8, {0x400, 0x8, [0xff00]}}, &(0x7f0000000b00)={0x40, 0x7, 0x2, 0x8be}, &(0x7f0000000b40)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000b80)={0x40, 0xb, 0x2, "f3c2"}, &(0x7f0000000bc0)={0x40, 0xf, 0x2}, &(0x7f0000000c00)={0x40, 0x13, 0x6, @random="5b320e1505ad"}, &(0x7f0000000c40)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000c80)={0x40, 0x19, 0x2, '/\''}, &(0x7f0000000cc0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000d00)={0x40, 0x1c, 0x1, 0xc5}, &(0x7f0000000d40)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000d80)={0x40, 0x21, 0x1}}) r5 = syz_usb_connect$cdc_ecm(0x0, 0x76, &(0x7f0000000e80)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x1, 0x1, 0x6, 0xf0, 0xfa, [{{0x9, 0x4, 0x0, 0xcf, 0x2, 0x2, 0x6, 0x0, 0x2, {{0xb, 0x24, 0x6, 0x0, 0x0, "3598325209c7"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x4, 0xdf0, 0x3}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x6, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x8, 0x5, 0x4}}}}}]}}]}}, &(0x7f0000001040)={0xa, &(0x7f0000000f00)={0xa, 0x6, 0x250, 0xa, 0x2, 0x8, 0x10, 0x1}, 0x20, &(0x7f0000000f40)={0x5, 0xf, 0x20, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0xd1, 0x3, 0xf, 0x1, 0xc}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xd, 0x4, 0xfffa}]}, 0x3, [{0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x44e}}, {0x31, &(0x7f0000001000)=@string={0x31, 0x3, "6b742ac5e012846047ea1368d2c58de075f204811da1ca512ee6cdfd3bd1b288f5380cce6ddd240e4feb62cba608d8"}}]}) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000001140)={0x14, &(0x7f0000001080)={0x20, 0x23, 0x53, {0x53, 0x2, "f10dc80c95d5812881058a835e18efee3df1d28a5e5cf00dc06f57b976229edf8786506067ee7233822e3967f06ea74118cc162c88bcbe3b33940e55e9b05555bfdb428e2c0845cf815c958fe4d6511f93"}}, &(0x7f0000001100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001240)={0x1c, &(0x7f0000001180)={0x20, 0x15, 0xe, "bbabdf082930ff213e20217b9f8f"}, &(0x7f00000011c0)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0x4}}) (async) r6 = syz_usb_connect$uac1(0x1, 0xcf, &(0x7f0000001280)={{0x12, 0x1, 0x1d8, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbd, 0x3, 0x1, 0x2c, 0x50, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5a6, 0x7f}, [@selector_unit={0x5, 0x24, 0x5, 0x5, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x94, 0x2, 0x7, 0x44, "96c59d"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xa, 0x4, 0x5, 0x8, "", "5debb7"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x2, 0x79b4, 0x1, "f64d5ec96d9d"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x2, 0xfbe8, 0x7, "03e69f74"}]}, {{0x9, 0x5, 0x1, 0x9, 0x248, 0x70, 0x5, 0xfd, {0x7, 0x25, 0x1, 0x3, 0x7, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0xb63, 0x7, 0x40, 'J'}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x5}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x6, 0x3, 0x8, 0x1, "c167"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x1, 0x4, 0x40, "8586", "54f8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xa, 0x7f, 0x2, {0x7, 0x25, 0x1, 0x1, 0xa, 0x3}}}}}}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x110, 0x9, 0xe, 0x6, 0xff, 0x3}, 0x1d, &(0x7f00000013c0)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x9, 0xff00, 0x7, [0x0, 0x3ff0, 0xe040]}]}, 0x3, [{0xfe, &(0x7f0000001400)=@string={0xfe, 0x3, "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"}}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x340a}}]}) syz_usb_control_io$uac1(r6, &(0x7f00000016c0)={0x14, &(0x7f00000015c0)={0x20, 0x4, 0xa7, {0xa7, 0xe, "9039cc7215c7dfadcfafba8c695e552acfcfe88338a91daaed62803c7837a6b9b0eae01eb7b13badb12ec3627580fa32d7e545cfd6845424d1433d936be38dbdd839d4bcdd54801b642478cefff16c59d52f4945288fb8f61504e4b7aaee6a862fbbcfb057350911f57ab2f83504c788b02dda5b9b9656c32bbd1962b8b5d2916c6f1d0a5d6a1822aa58b5a7fed8cf234cf0ea05f7f56e6b3771d9bb9c9d8bf78fb6ccda34"}}, &(0x7f0000001680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc2a}}}, &(0x7f0000001980)={0x44, &(0x7f0000001700)={0x0, 0x1b, 0x8b, "46e51ab62687a9c570ff34a93c3099e17ec70c31898d4522d554fd16aafd0ff876d9642ed95884b35ba1cdb9c7f97da174ec735b9017660ba39f31f2c8760f2d9001379d67d2b859b09785c744996c3080bb320c60ca4d68802f2d51cb8868321d46d86d6d43132734ffd252a9cb9ef93f2cbe4c4877d3deef42c19dbe228e2714469e6b91de15d0ebd73f"}, &(0x7f00000017c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001800)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001840)={0x20, 0x81, 0x1, "02"}, &(0x7f0000001880)={0x20, 0x82, 0x3, "95bd23"}, &(0x7f00000018c0)={0x20, 0x83, 0x3, "7ef666"}, &(0x7f0000001900)={0x20, 0x84, 0x2, "1600"}, &(0x7f0000001940)={0x20, 0x85, 0x3, "828b86"}}) personality(0x20) (async) fcntl$setpipe(r1, 0x407, 0x100000001) (async) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000001b80)={0x14, &(0x7f0000001a00)={0x40, 0xa, 0xfb, {0xfb, 0x2, "da3b1ee463220591e0c7b7bbe446e44cccf974701b0453b53a35a8c5751883bf40fb50ff05b2a00b278e68d6a3c8b814ba58c77003862914c82a654aff1ecf186996ea3b7974054f79f69837d9197a216284c98fd56862a913ef928c3fe634a380f8cbccedb146db14620fdf56b8bfb34f8625f90cf76599f98839b9c1db6664af61ae2cd31358853d136dca4588df96cb1d68085ea2c20753890cc2e7c5b6f2dd1f61e1b8b332708be580a663a8af254e040df570427964e192a394a5263a44cee6da75dbda02cf3b9eadb9c96553c9d0ede6131d0a16d7af5841b479feca553efd7d3fdda13639c3a2d894cd8c97e0161e136be53cb099a5"}}, &(0x7f0000001b40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001d00)={0x1c, &(0x7f0000001bc0)={0x40, 0x6, 0xad, "286270858a079a3740138a69f83ffeb95c540b85d11d9cfbb7dd3868927a786e6bd7e48e5e6d74f052e38deb3a05fda70e775eff41924065440b490f934a37d78ab8571b84ec831f7643c76ef8574e9e9b6fb8e391ded611a5522e7319da2e84e94944ef78a7e336fb01c6dde6821338efa18461438992e95994cd4e322b9584aabccfdc37cf6bd9765d253a135aad6cdc3998b53b830c825c373f09dc64efba2912f7293eb5b03cc51f6d2098"}, &(0x7f0000001c80)={0x0, 0xa, 0x1}, &(0x7f0000001cc0)={0x0, 0x8, 0x1, 0x2}}) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000001d40)={0x3, 0x2}) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000001d80)) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r7 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000001dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xd, 0xb0, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x2, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x7, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0x0, 0x5}}]}}}]}}]}}, &(0x7f0000002280)={0xa, &(0x7f0000001e00)={0xa, 0x6, 0x310, 0xee, 0x2, 0x9, 0xff, 0xd}, 0xc2, &(0x7f0000001e40)={0x5, 0xf, 0xc2, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0xc, 0x4, 0x7fffff4, 0xf00f, 0xf2ae, [0x5f00, 0xff3f30, 0xc000, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0x87, 0x6, 0x1000, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x1, 0x3, 0x4, 0x1}, @generic={0x49, 0x10, 0xa, "ddc095c3ffd02c187b5fb69154e77d4ee4cb82a262c9f5c78239f6b4a90e5412a0dbb1a1083a27f5f5a7a09a39989c806a15813b5d1f798937ceab6ee44ff788b0a89cc04658"}, @ptm_cap={0x3}, @generic={0x43, 0x10, 0xb, "09ff813a796392eac31b1b6e1ceea522841a5aebd0d5b9348ae7f89264d379001607591a078b99bba4ac5177d8827d8605e38ccce0413195bf7d4bed467186b3"}]}, 0x4, [{0xe3, &(0x7f0000001f40)=@string={0xe3, 0x3, "90df62a5f1a6065f7414c70a7b3fb90126fb6c9eb663ae6565a38013541aa90dc9afe211081d2b4c5be555829bd2bc2183b49e1faf1da565a886f05ff1aff460bc1127d62c3eebee86c332843e3972ad331808f4df9fbef08a48403c19087c67004a80cc9e00163205cd496b9877b31d55c9aa48ae91c38402b219cf906d1a4c6c7d5fb7a94f34567a25194ef7a9aacb570cab19add31d130ba4651755cb555b298b50d832a0d2a236d9b9b1639634a64ef77994c90f6e4d5868df6a6466ad40ae615a0c7c9e6782e38f9984b05d751ee7d339439a917946543be6045db7e4ae5a"}}, {0xe3, &(0x7f0000002040)=@string={0xe3, 0x3, "feaf7882f5754a7034ce4e2839b9af87c8555809bcb38b33e2e7b28da9336e25504a40bd904a92d75ad1f210e375f30c725d6b6e6ec629b64d5b16e1a45d93127e3b7088434348b2e337d7f189ced51c6caf55f0d3dca7487f6bdf3fe332a77bb429e60d4c394d9d4268490a0ae648f008938a73c9cf7ae6f1c1d2aa18ebdac46ef4bc1e6f29420bf84d4300ce63255006250086c18b35a5a6c17819ef1784648150f0e0935596985ba580b674cc67d32cfc812cd9293f67f870e69ab236105391db091d08b39130cd1277c9ffff123ab469dacc345197e6606511855a2904e9a7"}}, {0xc9, &(0x7f0000002140)=@string={0xc9, 0x3, "390c82dfc663d20349d85a6169e92546588f4c33966cd391e28e553b6c2be75c760efa525f854894adb180e61430b4e014efd3a80379bc0d88b0373770f1195015fdfc471ef333dfe62d8d4aa0f7bff09a491412d33484fba6910f7b8e4b1191f3e183a11e30d0152f448ca5e20fea895a4aa2cceac371ac2d7a26944531d276d8bf33145fac11d5a2aff368fb9b6dc03afa3d26cbf8296cb0d7eff668089f3ad34bb99ff3e7cd17b7a23d72d45a609f827e5cb50517f3e2e06b437c5381e5dc44260762c7442d"}}, {0x4, &(0x7f0000002240)=@lang_id={0x4}}]}) syz_usb_control_io$printer(r7, &(0x7f0000002440)={0x14, &(0x7f0000002300)={0x20, 0xd, 0xcc, {0xcc, 0x11, "1b82445f5e6778d9a6a3ffa2a715b0118166515d44cc9aac3512c24acc9d1351e76ea716a0ea0f997ebbdb30a3d795ad2bd1b62a27c9799c2c33e132bbf2278eb7e30f3e955038f6feee787faa8f61734f78cf4c74cbd94fae8911996de05153894b0a6d917886074e517035a152bfa685c95af8ba7964a988cd558deb63cbf5cc848658744aa68a30bb07be3e402289c1e386f895509968507845e515ab433b1d650460d3ca7f701b13fc2a5bb4437bec4fee86020ba21ac7ec564544c8003da9b82bb75312540e18dc"}}, &(0x7f0000002400)={0x0, 0x3, 0x25, @string={0x25, 0x3, "4c62d7776563899815b6d48c2babca2079e35c9ea3e73561948df7a1c1b7fcd8f3d143"}}}, &(0x7f00000026c0)={0x34, &(0x7f0000002480)={0x40, 0xe, 0x2b, "ccf0f445b01d9088add7c66d78263b0139498e4b14d9445939ac50bcea7c6b83a4cea0d57a9f50c5e8f035"}, &(0x7f00000024c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000002500)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000002540)={0x20, 0x0, 0xcb, {0xc9, "aaf2b40758e69d0c650bc1bf251f1de3a7ae998e1e230fe4bd397dfc48a8dd99a1ae8ffe213d7c6c8083dda499ebc7788811aca794bb2d557f5c0477d9eb19d4ac9a3a8bf98fab962194053d592b0d5bd19e6645c434dff1cadfe8c17d3df6044ce94c947b8eb4a93ffd0690a3f8ee980cf3979692586cd1461950a67282e9d82085db93ecb36d06a00384ff52c10efbcb3c72d212a03469a8c500672428429dd781306f37d89774686b46e72bb74587eabb70376f0388cee5f8ed89024c57ffa3ce3cde901e25a4ba"}}, &(0x7f0000002640)={0x20, 0x1, 0x1, 0x7f}, &(0x7f0000002680)={0x20, 0x0, 0x1, 0x31}}) syz_clone(0x20000000, &(0x7f0000002700)="326942e8c91e5f93e34c207a68738dbade57ff2e3f", 0x15, &(0x7f0000002740), &(0x7f0000002780), &(0x7f00000027c0)="00e318c091b499f8ba374a745953a859153f50bab957113fde15dc5851064de281afc1f2a73f4d3aa554431ba1f6d6ee4cdc3b48c43f10a3a4cdcac5507851cefe89c255aebff87c2ad56c2046141158a6f4045072d038256162c1495e7eda855eef8d8d918dd47c18ee30602f20b87c2b6e83f779ae08ca0784f5b4c8e0e05282ff3279d3e9e91ba3763ed792d6adc1d45a0ec1d89b3a727cc8ff5a7ce9a9da8f6489b79f3dc7de25bbc21d10a7f155e44a5b16c253f9f9bc1e6cfebbdf507c2f8b6cff67b4738c698d2f") (async) r8 = syz_usb_connect$cdc_ncm(0x3, 0xd0, &(0x7f00000028c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbe, 0x2, 0x1, 0x8, 0x20, 0x93, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "f8a89a21ad"}, {0x5, 0x24, 0x0, 0xf1cc}, {0xd, 0x24, 0xf, 0x1, 0xbb9c, 0x1, 0x5, 0x73}, {0x6, 0x24, 0x1a, 0x1, 0x28}, [@mbim={0xc, 0x24, 0x1b, 0x401, 0x4, 0x1, 0x9f, 0x6, 0x2}, @country_functional={0x8, 0x24, 0x7, 0x6, 0x8, [0x5]}, @mdlm_detail={0x49, 0x24, 0x13, 0x3, "09839df768059d261cb0b0e360d527ae5d77c99515cd1d13f59aec85378708d35861cca7ca0b10de2168a4177123d3434e6bc2c69581f4484cd22be6089e5c0498d514b635"}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x5d, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x2, 0xf, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x7, 0xe9, 0x44}}}}}}}]}}, &(0x7f0000002d40)={0xa, &(0x7f00000029c0)={0xa, 0x6, 0x201, 0x5, 0x2, 0x9, 0x20, 0x6}, 0x10, &(0x7f0000002a00)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0xb, 0x8, 0x3, 0x8}]}, 0x5, [{0x4, &(0x7f0000002a40)=@lang_id={0x4, 0x3, 0x280a}}, {0xa2, &(0x7f0000002a80)=@string={0xa2, 0x3, "12bb809110c8b0444750fda77c547292a0e40c82d041661be060251da041e60b4cb38133cf610b0e31fa63410ca110690a95ea0e1fc08956661fa729f744666aea5638a4f1c8a4336615715115e153053d9053014d584baa30ca308d60bf9e19e4ceecdd441a5760c369bb99d1671884f78c48cae7ba83725a72a5c3ee947cd1e08b960050caca960a1056dd27ac56b308e93298b0e4536eb15b3d47b653ed80"}}, {0xe2, &(0x7f0000002b40)=@string={0xe2, 0x3, "8639560df7c43e0441b2a1cee2ae908369939965647544ee755249bb84d680c8f469bc610d0cf6c71dc523fd0b2f1876a7e1746450df7a8d0bd0c9bd3a1b4ac053592caaad063dbc66f36008cbf6df3bb373a0560ef85ed75f9dbe94d5db1e74f13771bf6d5edbc471e5135ff55375cebeb8c159de69fda2baba02a7545481dda95e9bf6afa201caed5dab8e7688c37b01d161d3f8913802f150d6336b3eb9b009089a3d7a0f0ecf1125edde01b247a0c151c3d4b7a51e3909c92a37e480099b6b636dacec35aae0c0d2139764ce29f495aaf23c84b4bba3522931ce5a2953b7"}}, {0x4, &(0x7f0000002c40)=@lang_id={0x4, 0x3, 0x100a}}, {0x87, &(0x7f0000002c80)=@string={0x87, 0x3, "0a442db44161bdaead42942c20de74f01d4742383f713a6c09461f167c664e25d7bb919887d429e1d5a418d48d45334d8e85ccb4eb4cec870168ae1c9ad647dd72b6bc6355c61b72d3f7a149673d2a6ec90305abad2b34e935404da2651cf991a1cad59d98caf13fb38f1c8ea38617c2f96492d04f04f6eb6ffd863673b712e253436e59db"}}]}) syz_usb_control_io$cdc_ncm(r8, &(0x7f0000002f00)={0x14, &(0x7f0000002dc0)={0x20, 0x36, 0xbe, {0xbe, 0xa, "0567b464e5ee179c5aed42df410972ab9cab345a867efef7857567bb36cf41b0f58883becb275e215fa6c9969eec19480f85009a8144576972950b25b44d9a8e7c5bca1bf003dadcd17f4d0c11524a21a6de5f4be502f856a1b82436e7f5c74463933c6345387377d646a44010ec708850742e84ece5528653e1a8aa9e71f356432384d28b40be92b8b377e94709c70ec3f1a06084641843383668818f26179a65137d58fdb534a70a73c320c25dc4db59439747f95617e53d6a01b2"}}, &(0x7f0000002ec0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003180)={0x44, &(0x7f0000002f40)={0x20, 0x1, 0x5e, "7f22e086f336512a95c087e0cca8c8ca63c8464160d36e8985d462fc7a622d652c0fc844daa3a8df45c2fca662a083a4b87202b77275a47cd837de51c28c803780c3a1cfaea54270c9049b491cfe6f660ba4772b3ac1317297db84601a0d"}, &(0x7f0000002fc0)={0x0, 0xa, 0x1}, &(0x7f0000003000)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000003040)={0x20, 0x80, 0x1c, {0x3, 0x9, 0x7, 0xc257, 0xff, 0x6, 0x3, 0xffffffff, 0x3, 0x7, 0x5, 0x1}}, &(0x7f0000003080)={0x20, 0x85, 0x4, 0x4d}, &(0x7f00000030c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000003100)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000003140)={0x20, 0x89, 0x2}}) (async) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, &(0x7f0000003200)=0x1, 0x4) (async) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000003240)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x79, 0x1844, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0xc0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0x8001, 0x73, 0x1, {0x22, 0x8fe}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x5, 0xfe}}}}}]}}]}}, &(0x7f0000003580)={0xa, &(0x7f0000003280)={0xa, 0x6, 0x110, 0xe, 0x4, 0x5, 0x40, 0x50}, 0x64, &(0x7f00000032c0)={0x5, 0xf, 0x64, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0xf, 0x9, 0x7, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x20, 0xf9, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "5fa068280d1c75c9f72523f61a3a554c"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0xb, 0x3, 0x1000, 0x4}, @ssp_cap={0x24, 0x10, 0xa, 0x10, 0x6, 0x7ff, 0xf, 0x6, [0xffc000, 0x3fcf, 0x30, 0x18030, 0x0, 0x1feff00]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xa, 0x6, 0x1000}]}, 0x6, [{0xa3, &(0x7f0000003340)=@string={0xa3, 0x3, "ecca7bb588c65fe798fe243110dfd69a9eb93275d2198c5a44911c91ea22bdddba330f3c81d3ec8d10f5b045f89b3ceff4268d0d7cedd6ff69c08ed05d15363c5025330bc103c46e69e79181cb2ec99b977fef65c48049f3b4900a65fffd320bbb11a9bf36031cc2fe67847c97c9d848283421e6adc96fa3a3b8f71ac86935c5b4ee7c46ce3f7f8d3f8617a5cc68b49c754c890f2b101a8df81d9273d484b5a920"}}, {0x4, &(0x7f0000003400)=@lang_id={0x4, 0x3, 0x4001}}, {0x69, &(0x7f0000003440)=@string={0x69, 0x3, "b92fd773659f88803f1d440c0d40ecf4aca7b5673840acce3984d92940725ef0f118fbb9c63797c518556d57b57e6690d773342ee9e7da91c03cedb9a266be21dc8bd82279e702257cfa2ac2ddcc81da7dfe0e15a8a422f6391bdfeac2eb12aefe49387287149a"}}, {0x4, &(0x7f00000034c0)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000003500)=@lang_id={0x4, 0x3, 0x1425}}, {0x4, &(0x7f0000003540)=@lang_id={0x4, 0x3, 0x444}}]}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003640), r2) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r10, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x44000000}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x3c, r11, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) syz_usb_control_io$printer(r4, &(0x7f00000038c0)={0x14, &(0x7f0000003740)={0x40, 0xd, 0x100, {0x100, 0x30, "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"}}, &(0x7f0000003880)={0x0, 0x3, 0xd, @string={0xd, 0x3, "c169645ae7fbaf39c078c3"}}}, &(0x7f0000003ac0)={0x34, &(0x7f0000003900)={0x20, 0x14, 0x72, "8c48608f610528f3de3473ef98ac7da3b87e21984a00623c0335af74e951cdf0e6be9bee1a4b1ecb6a25c36d6de2767f1565d328874979d31bf6dbe36b9d8b28c6c58da95fc9308e10551218f2ecb29ea7d3cce9ac54a5ec0e92f538916e98debab96bce5e4ba34f2a7547e1c8df87ac628e"}, &(0x7f0000003980)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000039c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000003a00)={0x20, 0x0, 0x31, {0x2f, "c65a45a8b1057ef0220c60e115921353b0c1b405caa639ba0bfec4dabafd61b04efc01d87b00816550de8d3df40e04"}}, &(0x7f0000003a40)={0x20, 0x1, 0x1, 0xec}, &(0x7f0000003a80)={0x20, 0x0, 0x1, 0xcc}}) (async) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000004140)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000004100)={&(0x7f0000003f40)={0x1b4, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_MODES_OURS={0xd8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5eac}, @ETHTOOL_A_BITSET_MASK={0xc6, 0x5, "901391fe9f2f4dc71e5aa98e30a04751d7c37ad591784d67226103cdd8841367e0a65d98803d955d0f468f39931ffdcef2bbe165afd46a57e9614e9f1a0793b8816735e3f3c7c66410496b68e8c240820061da57375a1fc21bc33e19b6cb0d6a8b0a03a6cb68230e1fb323f85600b36084d82eaf087dfdc29b2fbc9741e489153b39238a49531aa86bb08b638dbf2252f5db9fbe0b392c1ec098bea002fb7620e839739f4e5908e45e63c07aa232785be56065a6ae074df219de239f06e947ac278a"}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4}, 0x4001) executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2a001, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000180)={'vcan0\x00', 0x200}) (async) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x4) (async, rerun: 64) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000100)={0x7, 0x93ed}) (async, rerun: 64) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'wg1\x00', 0x0}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xea200, 0x0) (async) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x1a3001, 0x18) write$khugepaged_scan(r5, &(0x7f0000000000), 0x8) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r4, 0xa09ab000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001100)='/sys/power/pm_print_times', 0x200, 0x0) (async, rerun: 32) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) (rerun: 32) close(0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) close_range(r4, r6, 0x0) (async) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x8) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) syz_clone(0x2204000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r8 = memfd_secret(0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000240)={'vxcan1\x00'}) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x4e24, 0x0, @private2, 0x40407}, 0x1c) (async) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r7, &(0x7f0000000380)="e8", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) (async) sendto$inet6(r7, &(0x7f0000000040)="06f3ed2d81f7ecf81fd576bd9c560969cb65f03d2ca954f7f38f17ec", 0x1c, 0x8000, &(0x7f0000000100)={0xa, 0x4e22, 0x9, @remote, 0x6}, 0x1c) shutdown(r7, 0x1) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) executing program 35: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=0']) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000057eb0020fd070400fa8e0102030109021b00020000000009044a0000ff4868000904"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) (async) r3 = eventfd2(0xd90a, 0x80801) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r3, 0x8}) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r4, 0x200, 0x0, r4}) (async, rerun: 64) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) (rerun: 64) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000040)={'ip6gre0\x00', 0x5}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) (async) syz_open_dev$usbfs(0x0, 0x204, 0x2) (async) r6 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000102505a1a440000102030109025c0002010000000904000001020d00000524060001052400a2000d240f01f9fffffffdff08000006241a0000080905810300040000000904010000000000000904010102020d00000905820210000000000905030240"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000002540)={0x20, 0x80, 0x1c, {0x1, 0x9e64, 0x1002, 0xd, 0x400, 0x1, 0x8a82, 0x5, 0x10, 0x8, 0xffff, 0xffff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000c00)={0x14, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) (async) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) executing program 36: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = add_key$keyring(&(0x7f00000063c0), &(0x7f0000006400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$describe(0x6, r1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="00003393ade938a1f4e4fb79a41770edc1dbca7ec76f4f230634", 0x1a}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f00000001c0)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x35}}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x38a, 0x0, 0x0, 0x0, 0xfffd, &(0x7f0000000180)='syz_tun\x00', 0xf360, 0xffffffff, 0x1}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) close_range(r2, 0xffffffffffffffff, 0x0) executing program 37: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000000"]) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000180)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000140)=0x18}) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="3b000000e2000000400101c0"]) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000040)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0xf) r9 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x2, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) close_range(r0, 0xffffffffffffffff, 0x0) executing program 38: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2a001, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000180)={'vcan0\x00', 0x200}) (async) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x4) (async, rerun: 64) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000100)={0x7, 0x93ed}) (async, rerun: 64) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'wg1\x00', 0x0}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xea200, 0x0) (async) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x1a3001, 0x18) write$khugepaged_scan(r5, &(0x7f0000000000), 0x8) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r4, 0xa09ab000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001100)='/sys/power/pm_print_times', 0x200, 0x0) (async, rerun: 32) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) (rerun: 32) close(0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) close_range(r4, r6, 0x0) (async) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x8) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) syz_clone(0x2204000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r8 = memfd_secret(0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000240)={'vxcan1\x00'}) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x4e24, 0x0, @private2, 0x40407}, 0x1c) (async) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r7, &(0x7f0000000380)="e8", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) (async) sendto$inet6(r7, &(0x7f0000000040)="06f3ed2d81f7ecf81fd576bd9c560969cb65f03d2ca954f7f38f17ec", 0x1c, 0x8000, &(0x7f0000000100)={0xa, 0x4e22, 0x9, @remote, 0x6}, 0x1c) shutdown(r7, 0x1) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) program crashed: WARNING in kvm_put_kvm bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=6m3s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 30, 23, 14, 20, 11, 7, 6, 21, 30, 30, 26, 15, 21, 30] detailed listing: executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = add_key$keyring(&(0x7f00000063c0), &(0x7f0000006400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$describe(0x6, r1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="00003393ade938a1f4e4fb79a41770edc1dbca7ec76f4f230634", 0x1a}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f00000001c0)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x35}}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x38a, 0x0, 0x0, 0x0, 0xfffd, &(0x7f0000000180)='syz_tun\x00', 0xf360, 0xffffffff, 0x1}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) close_range(r2, 0xffffffffffffffff, 0x0) executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1d1501, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000180)) (async) r1 = syz_clone(0x10000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x20, r3, 0x1, 0x70bd26, 0x25dedbff, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffff5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) sched_setparam(r1, &(0x7f0000000040)=0xa) (async) prlimit64(r1, 0x9, 0x0, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080003000d000000", 0x24) (async) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r5 = syz_open_procfs(r1, &(0x7f0000000000)='net/ip_tables_matches\x00') r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) (rerun: 32) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40085503, &(0x7f0000000080)=0x2) (async, rerun: 32) r8 = userfaultfd(0x80001) (rerun: 32) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) (rerun: 64) ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) r11 = open(&(0x7f0000000080)='./file1\x00', 0x123b42, 0x1) sendfile(r11, r6, 0x0, 0x80000000) r12 = open(&(0x7f0000000080)='./file1\x00', 0x0, 0x8b50c7eb3b49266e) sendfile(r12, r5, 0x0, 0x80000000) executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xffffffffffffffdc, 0x0, &(0x7f0000000000)=[@register_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000000)={0x1}) r2 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x200, 0xa, 0x0, 0x0, 0x2b}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, {0xeb}, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x2000000, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0xe8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280), 0x8019, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x130, 0x0, 0x4, {0x6, 0x2, 0x0, '\x00', {0x1, 0x4, 0x6, 0xffffffff, 0x0, 0x0, 0x2000, '\x00', 0xffffffffffffffff, 0x28, 0xfff7fffffffffffa, 0xa4, {0x100000000, 0x1fffffe}, {0x1f97, 0x6}, {0x5, 0x26}, {0x6, 0xff}, 0x200007, 0xe19, 0x800, 0x12}}}}) statx(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x100, 0x801, 0x0) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) connect$inet6(r2, &(0x7f00000000c0), 0x1c) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x20a300, 0x0) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f00000001c0)=0x1, 0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x68, 0x0, &(0x7f0000000380)=[@dead_binder_done, @exit_looper, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x15, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x4, 0x8000000000040}, @fd, @fda={0x66646185, 0x9, 0x2, 0x2f}}, &(0x7f0000000480)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) io_setup(0x5, &(0x7f0000000440)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r3, 0x1, &(0x7f00000006c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) r5 = syz_open_dev$mouse(&(0x7f0000000000), 0xffffffff, 0x410400) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x3, r1, &(0x7f00000004c0)="39cd2dc4659a019f4a0c57e0dc60fde8632b7a4fe600a13bd806b568dd90a53f34491de970b0c4fe43dbb8bfdc8e91b68f61ae5174136ef59ad3bb2ff8e736f323f4779959c15e8f6a5582d3364b3facc340d922090139d9ab4b7dc6a693fa5fb7c033bfeef2992c1cf6f17005bb14930d5486b430fa9fe9c5b093cda8cea881bd794949bd3cdcf0e26b5fdc12a4caadb5319bf891cfe87fc24e2005617ab55af008d3fe86d06f9307", 0xa9, 0x8, 0x0, 0x1, r5}]) executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, &(0x7f00000000c0)=""/142, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r1, 0x45809000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x4, 0x52, 0x0, 0x10004}]}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={r4, 0x3, r3, 0xfffffffa}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000300)={r4, 0x1, r1, 0x1}) r5 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='rootcontext', &(0x7f00000001c0)='--^$-\x00_\x8e\xbd\xd8\x10\xd7J\x15\x8cG\x12h\xda\xde2zN-\xb7\xcc\x9b\xa7\x1a2s\xcc\xebq8^Q\x95\x87\xff\xb6\xfd\x89\xcdc\x95\xa3u\xf1w\x7fs\xc0p\xedf\xec\xe1\xd2\xdb\x10n\x88\x9a\r\xe5\x90T\xf3\xbdo\x92\xa5\xb2U0\x97%sl\xd9\xb0\x94\xe4\xef\xacv\xd6\xc3\xaa\xf4|a\xd68\xc4=(\xfcA\x92h\xcan\\D1\xe0\xd9\xac\xd0\xc3MU\xc9\f\xed\xe56\xe1/\xad\xa6j\xb5\xdc\f\x94\x15\xea\x94\x00\x1b', 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000140)="441f08d600270bee724ef54e91eeffbe1e68d5040d73161feeb0f24cb1", 0x1d) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) ioctl$BLKRRPART(r7, 0x125f, 0x0) executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r1 = fsopen(&(0x7f0000001980)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f00000019c0)='uid', &(0x7f0000001a00)='./file0\x00', 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x7d, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x8001, 0x80, 0x5, 0x1}, {0x5, 0x7, 0x2}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000b00)="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", 0x3e6}], 0x1}}], 0x1, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x11) syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb700000001090212"], 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002a2b8d240bb2170200b87010203010902240001a00800040904c81e010103f70909050803ff030406090221072501"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000001100)={0x10, 0x5, [{0x1, 0x0, 0x400}, {0xa4d, 0x0, 0x44f}, {0x3, 0x0, 0x9}, {0x8, 0x0, 0x6}, {0x4, 0x0, 0x8}, {0x0, 0x0, 0xfeb}, {0x1, 0x0, 0x7fffffffffffffff}, {0xec2, 0x0, 0xffffffff}, {0x6, 0x0, 0x2}, {0x5, 0x0, 0x10001}, {0x80000001, 0x0, 0x8}, {0x3, 0x0, 0x2}, {0x3, 0x0, 0x8}, {0x1000, 0x0, 0x1}, {0xe, 0x0, 0xffffffff}, {0x1ff, 0x0, 0x5}]}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000000"]) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000180)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000140)=0x18}) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="3b000000e2000000400101c0"]) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000040)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0xf) r9 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x2, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) close_range(r0, 0xffffffffffffffff, 0x0) executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) (async) r3 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) pselect6(0x40, &(0x7f0000000040)={0x0, 0x9, 0x67, 0x7, 0x401, 0x6, 0x4, 0x1}, &(0x7f0000000080)={0x7, 0x9, 0x9312, 0x8, 0x401, 0x8, 0xffffffff80000001, 0x5}, &(0x7f00000000c0)={0xff, 0x7, 0x80000000000, 0x2, 0x9, 0x43f, 0x1, 0x1}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x5]}, 0x8}) (async) r4 = syz_usb_connect$printer(0x3, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb3, 0x0, 0x8a, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x3, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x6, 0x2, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x80, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x1, 0x4f, 0x1, 0x1, 0xff, 0x5}, 0x1d, &(0x7f0000000240)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x8, 0xf, 0x5, [0x30, 0xffc030, 0x30]}]}, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x438}}, {0xb1, &(0x7f00000002c0)=@string={0xb1, 0x3, "d86d4dcc8bdbaa5ea7e83e6bf300e3af4fa2298398034aa62f151cbf346a334f35d546362379566056ecefbb28e638cd0d1f8404dff7c01ddba4f50b95ee141da042131194d401fecf3ffe899a88793d111464517f87273beb2897569f14180fbdb791dc81ba0742fb91986561dd515136db9faf4df04fdacd4aff9caaf0187422f060e1f538ffaa45ed719519f68a5cf8d625b76c0e40c683a3489d83e46fc075d2a328afcdc1ece7918c0fd16475"}}]}) syz_usb_control_io$printer(r4, &(0x7f0000000480)={0x14, &(0x7f00000003c0)={0x40, 0x4, 0x3e, {0x3e, 0x0, "a087c491926c464206301758dcd52cfd2176fbe0c8e4ff887a1357be5d82f2d6e20b172c44f86dfc91a1aa9c39583b57b3be4475fba55ea00b655082"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40c}}}, &(0x7f0000000680)={0x34, &(0x7f00000004c0)={0x20, 0x17, 0x29, "9f983afd99749a97a52ee6f814c895626069c8fca40aa817d048522aa23f8685289177ccbef9895cf6"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000580)={0x20, 0x0, 0x77, {0x75, "f011f48f96e210f777c7f81acf4147f65d2aebbb38c28b02651bc51f58a7bd17761bcd83fecd3282da1b3d4f73c232743fd8abccad989cd3da9287ad99a4f23bc5114d1b631c42a23183cef1eb109ef69e6bb86c3110274e1e80551ff4f0b989644ca85e074d80a6beef8c894d95b3ae124b2283b9"}}, &(0x7f0000000600)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000640)={0x20, 0x0, 0x1, 0x10}}) (async) syz_usb_control_io(r4, &(0x7f00000008c0)={0x2c, &(0x7f00000006c0)={0x40, 0x3, 0xf3, {0xf3, 0x0, "9f32134f5cf80614183a9ba0c23bc03f8b8ba6591eba8580cc810cb4aa687858b4994146d378da529fd8c89b252ca435406108fe00ec0d058a77cc37cf930e7685f5acac73def1a383140f41e9aebc50d81b55bef450c1c3c68ea56ddeb41c225abfb4a9d0f3a2d9ca1bd91d90103a5f0b5dc98c35771b51ccfce3ae9bd322269f020eac3af640d93a5e61452406afc2f5357466f181a96a0258440456fb317b943c637d5b5a78a6b9ec329d7ccb9ab062528faf872ad92eee5d772ed77633819e31ea99397f17a9c9809562a7d545bb41488b46589d7d5b6516982a0160c632881ae6fa148b649c595e59589053e89ec4"}}, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}, &(0x7f0000000800)={0x0, 0xf, 0x12, {0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x50, 0x0, 0x4}, @ptm_cap={0x3}]}}, &(0x7f0000000840)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa, 0x3, 0x36, 0x3d, "7aadef7e", "b99ff04e"}}, &(0x7f0000000880)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x18, 0x5, 0x64, 0x3, 0xca5, 0x4}}}, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)={0x0, 0xc, 0xc0, "794ce9e2d95a7bc36624052b9ebde1f89402bcef00eb678cf820a2ed8b74b4d2800f8246d6d0bb9b399ab3db20ef55a2d0c1c1afed0253cc9d4d44ae43ac4ca988de6d96cec7ef751d995903fd522680ce72ac4330a5757b48b7eea0981e68c4d06e6fa69e6e4d51df78e0f7636bd2e18c0c98c7c29b6414e805a3bc746b015a33491a041c9e15a64a4d5b3aed373149f1fb2c3223db953868205abaa3159bd0ba939d24a749c1ebc79b2e0cea00430ca88a93814560e0c20afb03161fe8c7ce"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000ac0)={0x20, 0x0, 0x8, {0x400, 0x8, [0xff00]}}, &(0x7f0000000b00)={0x40, 0x7, 0x2, 0x8be}, &(0x7f0000000b40)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000b80)={0x40, 0xb, 0x2, "f3c2"}, &(0x7f0000000bc0)={0x40, 0xf, 0x2}, &(0x7f0000000c00)={0x40, 0x13, 0x6, @random="5b320e1505ad"}, &(0x7f0000000c40)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000c80)={0x40, 0x19, 0x2, '/\''}, &(0x7f0000000cc0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000d00)={0x40, 0x1c, 0x1, 0xc5}, &(0x7f0000000d40)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000d80)={0x40, 0x21, 0x1}}) r5 = syz_usb_connect$cdc_ecm(0x0, 0x76, &(0x7f0000000e80)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x1, 0x1, 0x6, 0xf0, 0xfa, [{{0x9, 0x4, 0x0, 0xcf, 0x2, 0x2, 0x6, 0x0, 0x2, {{0xb, 0x24, 0x6, 0x0, 0x0, "3598325209c7"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x4, 0xdf0, 0x3}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x6, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x8, 0x5, 0x4}}}}}]}}]}}, &(0x7f0000001040)={0xa, &(0x7f0000000f00)={0xa, 0x6, 0x250, 0xa, 0x2, 0x8, 0x10, 0x1}, 0x20, &(0x7f0000000f40)={0x5, 0xf, 0x20, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0xd1, 0x3, 0xf, 0x1, 0xc}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xd, 0x4, 0xfffa}]}, 0x3, [{0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x44e}}, {0x31, &(0x7f0000001000)=@string={0x31, 0x3, "6b742ac5e012846047ea1368d2c58de075f204811da1ca512ee6cdfd3bd1b288f5380cce6ddd240e4feb62cba608d8"}}]}) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000001140)={0x14, &(0x7f0000001080)={0x20, 0x23, 0x53, {0x53, 0x2, "f10dc80c95d5812881058a835e18efee3df1d28a5e5cf00dc06f57b976229edf8786506067ee7233822e3967f06ea74118cc162c88bcbe3b33940e55e9b05555bfdb428e2c0845cf815c958fe4d6511f93"}}, &(0x7f0000001100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001240)={0x1c, &(0x7f0000001180)={0x20, 0x15, 0xe, "bbabdf082930ff213e20217b9f8f"}, &(0x7f00000011c0)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0x4}}) (async) r6 = syz_usb_connect$uac1(0x1, 0xcf, &(0x7f0000001280)={{0x12, 0x1, 0x1d8, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbd, 0x3, 0x1, 0x2c, 0x50, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5a6, 0x7f}, [@selector_unit={0x5, 0x24, 0x5, 0x5, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x94, 0x2, 0x7, 0x44, "96c59d"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xa, 0x4, 0x5, 0x8, "", "5debb7"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x2, 0x79b4, 0x1, "f64d5ec96d9d"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x2, 0xfbe8, 0x7, "03e69f74"}]}, {{0x9, 0x5, 0x1, 0x9, 0x248, 0x70, 0x5, 0xfd, {0x7, 0x25, 0x1, 0x3, 0x7, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0xb63, 0x7, 0x40, 'J'}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x5}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x6, 0x3, 0x8, 0x1, "c167"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x1, 0x4, 0x40, "8586", "54f8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xa, 0x7f, 0x2, {0x7, 0x25, 0x1, 0x1, 0xa, 0x3}}}}}}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x110, 0x9, 0xe, 0x6, 0xff, 0x3}, 0x1d, &(0x7f00000013c0)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x9, 0xff00, 0x7, [0x0, 0x3ff0, 0xe040]}]}, 0x3, [{0xfe, &(0x7f0000001400)=@string={0xfe, 0x3, "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"}}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x340a}}]}) syz_usb_control_io$uac1(r6, &(0x7f00000016c0)={0x14, &(0x7f00000015c0)={0x20, 0x4, 0xa7, {0xa7, 0xe, "9039cc7215c7dfadcfafba8c695e552acfcfe88338a91daaed62803c7837a6b9b0eae01eb7b13badb12ec3627580fa32d7e545cfd6845424d1433d936be38dbdd839d4bcdd54801b642478cefff16c59d52f4945288fb8f61504e4b7aaee6a862fbbcfb057350911f57ab2f83504c788b02dda5b9b9656c32bbd1962b8b5d2916c6f1d0a5d6a1822aa58b5a7fed8cf234cf0ea05f7f56e6b3771d9bb9c9d8bf78fb6ccda34"}}, &(0x7f0000001680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc2a}}}, &(0x7f0000001980)={0x44, &(0x7f0000001700)={0x0, 0x1b, 0x8b, "46e51ab62687a9c570ff34a93c3099e17ec70c31898d4522d554fd16aafd0ff876d9642ed95884b35ba1cdb9c7f97da174ec735b9017660ba39f31f2c8760f2d9001379d67d2b859b09785c744996c3080bb320c60ca4d68802f2d51cb8868321d46d86d6d43132734ffd252a9cb9ef93f2cbe4c4877d3deef42c19dbe228e2714469e6b91de15d0ebd73f"}, &(0x7f00000017c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001800)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001840)={0x20, 0x81, 0x1, "02"}, &(0x7f0000001880)={0x20, 0x82, 0x3, "95bd23"}, &(0x7f00000018c0)={0x20, 0x83, 0x3, "7ef666"}, &(0x7f0000001900)={0x20, 0x84, 0x2, "1600"}, &(0x7f0000001940)={0x20, 0x85, 0x3, "828b86"}}) personality(0x20) (async) fcntl$setpipe(r1, 0x407, 0x100000001) (async) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000001b80)={0x14, &(0x7f0000001a00)={0x40, 0xa, 0xfb, {0xfb, 0x2, "da3b1ee463220591e0c7b7bbe446e44cccf974701b0453b53a35a8c5751883bf40fb50ff05b2a00b278e68d6a3c8b814ba58c77003862914c82a654aff1ecf186996ea3b7974054f79f69837d9197a216284c98fd56862a913ef928c3fe634a380f8cbccedb146db14620fdf56b8bfb34f8625f90cf76599f98839b9c1db6664af61ae2cd31358853d136dca4588df96cb1d68085ea2c20753890cc2e7c5b6f2dd1f61e1b8b332708be580a663a8af254e040df570427964e192a394a5263a44cee6da75dbda02cf3b9eadb9c96553c9d0ede6131d0a16d7af5841b479feca553efd7d3fdda13639c3a2d894cd8c97e0161e136be53cb099a5"}}, &(0x7f0000001b40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001d00)={0x1c, &(0x7f0000001bc0)={0x40, 0x6, 0xad, "286270858a079a3740138a69f83ffeb95c540b85d11d9cfbb7dd3868927a786e6bd7e48e5e6d74f052e38deb3a05fda70e775eff41924065440b490f934a37d78ab8571b84ec831f7643c76ef8574e9e9b6fb8e391ded611a5522e7319da2e84e94944ef78a7e336fb01c6dde6821338efa18461438992e95994cd4e322b9584aabccfdc37cf6bd9765d253a135aad6cdc3998b53b830c825c373f09dc64efba2912f7293eb5b03cc51f6d2098"}, &(0x7f0000001c80)={0x0, 0xa, 0x1}, &(0x7f0000001cc0)={0x0, 0x8, 0x1, 0x2}}) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000001d40)={0x3, 0x2}) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000001d80)) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r7 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000001dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xd, 0xb0, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x2, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x7, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0x0, 0x5}}]}}}]}}]}}, &(0x7f0000002280)={0xa, &(0x7f0000001e00)={0xa, 0x6, 0x310, 0xee, 0x2, 0x9, 0xff, 0xd}, 0xc2, &(0x7f0000001e40)={0x5, 0xf, 0xc2, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0xc, 0x4, 0x7fffff4, 0xf00f, 0xf2ae, [0x5f00, 0xff3f30, 0xc000, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0x87, 0x6, 0x1000, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x1, 0x3, 0x4, 0x1}, @generic={0x49, 0x10, 0xa, "ddc095c3ffd02c187b5fb69154e77d4ee4cb82a262c9f5c78239f6b4a90e5412a0dbb1a1083a27f5f5a7a09a39989c806a15813b5d1f798937ceab6ee44ff788b0a89cc04658"}, @ptm_cap={0x3}, @generic={0x43, 0x10, 0xb, "09ff813a796392eac31b1b6e1ceea522841a5aebd0d5b9348ae7f89264d379001607591a078b99bba4ac5177d8827d8605e38ccce0413195bf7d4bed467186b3"}]}, 0x4, [{0xe3, &(0x7f0000001f40)=@string={0xe3, 0x3, "90df62a5f1a6065f7414c70a7b3fb90126fb6c9eb663ae6565a38013541aa90dc9afe211081d2b4c5be555829bd2bc2183b49e1faf1da565a886f05ff1aff460bc1127d62c3eebee86c332843e3972ad331808f4df9fbef08a48403c19087c67004a80cc9e00163205cd496b9877b31d55c9aa48ae91c38402b219cf906d1a4c6c7d5fb7a94f34567a25194ef7a9aacb570cab19add31d130ba4651755cb555b298b50d832a0d2a236d9b9b1639634a64ef77994c90f6e4d5868df6a6466ad40ae615a0c7c9e6782e38f9984b05d751ee7d339439a917946543be6045db7e4ae5a"}}, {0xe3, &(0x7f0000002040)=@string={0xe3, 0x3, "feaf7882f5754a7034ce4e2839b9af87c8555809bcb38b33e2e7b28da9336e25504a40bd904a92d75ad1f210e375f30c725d6b6e6ec629b64d5b16e1a45d93127e3b7088434348b2e337d7f189ced51c6caf55f0d3dca7487f6bdf3fe332a77bb429e60d4c394d9d4268490a0ae648f008938a73c9cf7ae6f1c1d2aa18ebdac46ef4bc1e6f29420bf84d4300ce63255006250086c18b35a5a6c17819ef1784648150f0e0935596985ba580b674cc67d32cfc812cd9293f67f870e69ab236105391db091d08b39130cd1277c9ffff123ab469dacc345197e6606511855a2904e9a7"}}, {0xc9, &(0x7f0000002140)=@string={0xc9, 0x3, "390c82dfc663d20349d85a6169e92546588f4c33966cd391e28e553b6c2be75c760efa525f854894adb180e61430b4e014efd3a80379bc0d88b0373770f1195015fdfc471ef333dfe62d8d4aa0f7bff09a491412d33484fba6910f7b8e4b1191f3e183a11e30d0152f448ca5e20fea895a4aa2cceac371ac2d7a26944531d276d8bf33145fac11d5a2aff368fb9b6dc03afa3d26cbf8296cb0d7eff668089f3ad34bb99ff3e7cd17b7a23d72d45a609f827e5cb50517f3e2e06b437c5381e5dc44260762c7442d"}}, {0x4, &(0x7f0000002240)=@lang_id={0x4}}]}) syz_usb_control_io$printer(r7, &(0x7f0000002440)={0x14, &(0x7f0000002300)={0x20, 0xd, 0xcc, {0xcc, 0x11, "1b82445f5e6778d9a6a3ffa2a715b0118166515d44cc9aac3512c24acc9d1351e76ea716a0ea0f997ebbdb30a3d795ad2bd1b62a27c9799c2c33e132bbf2278eb7e30f3e955038f6feee787faa8f61734f78cf4c74cbd94fae8911996de05153894b0a6d917886074e517035a152bfa685c95af8ba7964a988cd558deb63cbf5cc848658744aa68a30bb07be3e402289c1e386f895509968507845e515ab433b1d650460d3ca7f701b13fc2a5bb4437bec4fee86020ba21ac7ec564544c8003da9b82bb75312540e18dc"}}, &(0x7f0000002400)={0x0, 0x3, 0x25, @string={0x25, 0x3, "4c62d7776563899815b6d48c2babca2079e35c9ea3e73561948df7a1c1b7fcd8f3d143"}}}, &(0x7f00000026c0)={0x34, &(0x7f0000002480)={0x40, 0xe, 0x2b, "ccf0f445b01d9088add7c66d78263b0139498e4b14d9445939ac50bcea7c6b83a4cea0d57a9f50c5e8f035"}, &(0x7f00000024c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000002500)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000002540)={0x20, 0x0, 0xcb, {0xc9, "aaf2b40758e69d0c650bc1bf251f1de3a7ae998e1e230fe4bd397dfc48a8dd99a1ae8ffe213d7c6c8083dda499ebc7788811aca794bb2d557f5c0477d9eb19d4ac9a3a8bf98fab962194053d592b0d5bd19e6645c434dff1cadfe8c17d3df6044ce94c947b8eb4a93ffd0690a3f8ee980cf3979692586cd1461950a67282e9d82085db93ecb36d06a00384ff52c10efbcb3c72d212a03469a8c500672428429dd781306f37d89774686b46e72bb74587eabb70376f0388cee5f8ed89024c57ffa3ce3cde901e25a4ba"}}, &(0x7f0000002640)={0x20, 0x1, 0x1, 0x7f}, &(0x7f0000002680)={0x20, 0x0, 0x1, 0x31}}) syz_clone(0x20000000, &(0x7f0000002700)="326942e8c91e5f93e34c207a68738dbade57ff2e3f", 0x15, &(0x7f0000002740), &(0x7f0000002780), &(0x7f00000027c0)="00e318c091b499f8ba374a745953a859153f50bab957113fde15dc5851064de281afc1f2a73f4d3aa554431ba1f6d6ee4cdc3b48c43f10a3a4cdcac5507851cefe89c255aebff87c2ad56c2046141158a6f4045072d038256162c1495e7eda855eef8d8d918dd47c18ee30602f20b87c2b6e83f779ae08ca0784f5b4c8e0e05282ff3279d3e9e91ba3763ed792d6adc1d45a0ec1d89b3a727cc8ff5a7ce9a9da8f6489b79f3dc7de25bbc21d10a7f155e44a5b16c253f9f9bc1e6cfebbdf507c2f8b6cff67b4738c698d2f") (async) r8 = syz_usb_connect$cdc_ncm(0x3, 0xd0, &(0x7f00000028c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbe, 0x2, 0x1, 0x8, 0x20, 0x93, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "f8a89a21ad"}, {0x5, 0x24, 0x0, 0xf1cc}, {0xd, 0x24, 0xf, 0x1, 0xbb9c, 0x1, 0x5, 0x73}, {0x6, 0x24, 0x1a, 0x1, 0x28}, [@mbim={0xc, 0x24, 0x1b, 0x401, 0x4, 0x1, 0x9f, 0x6, 0x2}, @country_functional={0x8, 0x24, 0x7, 0x6, 0x8, [0x5]}, @mdlm_detail={0x49, 0x24, 0x13, 0x3, "09839df768059d261cb0b0e360d527ae5d77c99515cd1d13f59aec85378708d35861cca7ca0b10de2168a4177123d3434e6bc2c69581f4484cd22be6089e5c0498d514b635"}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x5d, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x2, 0xf, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x7, 0xe9, 0x44}}}}}}}]}}, &(0x7f0000002d40)={0xa, &(0x7f00000029c0)={0xa, 0x6, 0x201, 0x5, 0x2, 0x9, 0x20, 0x6}, 0x10, &(0x7f0000002a00)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0xb, 0x8, 0x3, 0x8}]}, 0x5, [{0x4, &(0x7f0000002a40)=@lang_id={0x4, 0x3, 0x280a}}, {0xa2, &(0x7f0000002a80)=@string={0xa2, 0x3, "12bb809110c8b0444750fda77c547292a0e40c82d041661be060251da041e60b4cb38133cf610b0e31fa63410ca110690a95ea0e1fc08956661fa729f744666aea5638a4f1c8a4336615715115e153053d9053014d584baa30ca308d60bf9e19e4ceecdd441a5760c369bb99d1671884f78c48cae7ba83725a72a5c3ee947cd1e08b960050caca960a1056dd27ac56b308e93298b0e4536eb15b3d47b653ed80"}}, {0xe2, &(0x7f0000002b40)=@string={0xe2, 0x3, "8639560df7c43e0441b2a1cee2ae908369939965647544ee755249bb84d680c8f469bc610d0cf6c71dc523fd0b2f1876a7e1746450df7a8d0bd0c9bd3a1b4ac053592caaad063dbc66f36008cbf6df3bb373a0560ef85ed75f9dbe94d5db1e74f13771bf6d5edbc471e5135ff55375cebeb8c159de69fda2baba02a7545481dda95e9bf6afa201caed5dab8e7688c37b01d161d3f8913802f150d6336b3eb9b009089a3d7a0f0ecf1125edde01b247a0c151c3d4b7a51e3909c92a37e480099b6b636dacec35aae0c0d2139764ce29f495aaf23c84b4bba3522931ce5a2953b7"}}, {0x4, &(0x7f0000002c40)=@lang_id={0x4, 0x3, 0x100a}}, {0x87, &(0x7f0000002c80)=@string={0x87, 0x3, "0a442db44161bdaead42942c20de74f01d4742383f713a6c09461f167c664e25d7bb919887d429e1d5a418d48d45334d8e85ccb4eb4cec870168ae1c9ad647dd72b6bc6355c61b72d3f7a149673d2a6ec90305abad2b34e935404da2651cf991a1cad59d98caf13fb38f1c8ea38617c2f96492d04f04f6eb6ffd863673b712e253436e59db"}}]}) syz_usb_control_io$cdc_ncm(r8, &(0x7f0000002f00)={0x14, &(0x7f0000002dc0)={0x20, 0x36, 0xbe, {0xbe, 0xa, "0567b464e5ee179c5aed42df410972ab9cab345a867efef7857567bb36cf41b0f58883becb275e215fa6c9969eec19480f85009a8144576972950b25b44d9a8e7c5bca1bf003dadcd17f4d0c11524a21a6de5f4be502f856a1b82436e7f5c74463933c6345387377d646a44010ec708850742e84ece5528653e1a8aa9e71f356432384d28b40be92b8b377e94709c70ec3f1a06084641843383668818f26179a65137d58fdb534a70a73c320c25dc4db59439747f95617e53d6a01b2"}}, &(0x7f0000002ec0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003180)={0x44, &(0x7f0000002f40)={0x20, 0x1, 0x5e, "7f22e086f336512a95c087e0cca8c8ca63c8464160d36e8985d462fc7a622d652c0fc844daa3a8df45c2fca662a083a4b87202b77275a47cd837de51c28c803780c3a1cfaea54270c9049b491cfe6f660ba4772b3ac1317297db84601a0d"}, &(0x7f0000002fc0)={0x0, 0xa, 0x1}, &(0x7f0000003000)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000003040)={0x20, 0x80, 0x1c, {0x3, 0x9, 0x7, 0xc257, 0xff, 0x6, 0x3, 0xffffffff, 0x3, 0x7, 0x5, 0x1}}, &(0x7f0000003080)={0x20, 0x85, 0x4, 0x4d}, &(0x7f00000030c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000003100)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000003140)={0x20, 0x89, 0x2}}) (async) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, &(0x7f0000003200)=0x1, 0x4) (async) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000003240)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x79, 0x1844, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0xc0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0x8001, 0x73, 0x1, {0x22, 0x8fe}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x5, 0xfe}}}}}]}}]}}, &(0x7f0000003580)={0xa, &(0x7f0000003280)={0xa, 0x6, 0x110, 0xe, 0x4, 0x5, 0x40, 0x50}, 0x64, &(0x7f00000032c0)={0x5, 0xf, 0x64, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0xf, 0x9, 0x7, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x20, 0xf9, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "5fa068280d1c75c9f72523f61a3a554c"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0xb, 0x3, 0x1000, 0x4}, @ssp_cap={0x24, 0x10, 0xa, 0x10, 0x6, 0x7ff, 0xf, 0x6, [0xffc000, 0x3fcf, 0x30, 0x18030, 0x0, 0x1feff00]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xa, 0x6, 0x1000}]}, 0x6, [{0xa3, &(0x7f0000003340)=@string={0xa3, 0x3, "ecca7bb588c65fe798fe243110dfd69a9eb93275d2198c5a44911c91ea22bdddba330f3c81d3ec8d10f5b045f89b3ceff4268d0d7cedd6ff69c08ed05d15363c5025330bc103c46e69e79181cb2ec99b977fef65c48049f3b4900a65fffd320bbb11a9bf36031cc2fe67847c97c9d848283421e6adc96fa3a3b8f71ac86935c5b4ee7c46ce3f7f8d3f8617a5cc68b49c754c890f2b101a8df81d9273d484b5a920"}}, {0x4, &(0x7f0000003400)=@lang_id={0x4, 0x3, 0x4001}}, {0x69, &(0x7f0000003440)=@string={0x69, 0x3, "b92fd773659f88803f1d440c0d40ecf4aca7b5673840acce3984d92940725ef0f118fbb9c63797c518556d57b57e6690d773342ee9e7da91c03cedb9a266be21dc8bd82279e702257cfa2ac2ddcc81da7dfe0e15a8a422f6391bdfeac2eb12aefe49387287149a"}}, {0x4, &(0x7f00000034c0)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000003500)=@lang_id={0x4, 0x3, 0x1425}}, {0x4, &(0x7f0000003540)=@lang_id={0x4, 0x3, 0x444}}]}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003640), r2) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r10, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x44000000}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x3c, r11, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) syz_usb_control_io$printer(r4, &(0x7f00000038c0)={0x14, &(0x7f0000003740)={0x40, 0xd, 0x100, {0x100, 0x30, "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"}}, &(0x7f0000003880)={0x0, 0x3, 0xd, @string={0xd, 0x3, "c169645ae7fbaf39c078c3"}}}, &(0x7f0000003ac0)={0x34, &(0x7f0000003900)={0x20, 0x14, 0x72, "8c48608f610528f3de3473ef98ac7da3b87e21984a00623c0335af74e951cdf0e6be9bee1a4b1ecb6a25c36d6de2767f1565d328874979d31bf6dbe36b9d8b28c6c58da95fc9308e10551218f2ecb29ea7d3cce9ac54a5ec0e92f538916e98debab96bce5e4ba34f2a7547e1c8df87ac628e"}, &(0x7f0000003980)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000039c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000003a00)={0x20, 0x0, 0x31, {0x2f, "c65a45a8b1057ef0220c60e115921353b0c1b405caa639ba0bfec4dabafd61b04efc01d87b00816550de8d3df40e04"}}, &(0x7f0000003a40)={0x20, 0x1, 0x1, 0xec}, &(0x7f0000003a80)={0x20, 0x0, 0x1, 0xcc}}) (async) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000004140)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000004100)={&(0x7f0000003f40)={0x1b4, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_MODES_OURS={0xd8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5eac}, @ETHTOOL_A_BITSET_MASK={0xc6, 0x5, "901391fe9f2f4dc71e5aa98e30a04751d7c37ad591784d67226103cdd8841367e0a65d98803d955d0f468f39931ffdcef2bbe165afd46a57e9614e9f1a0793b8816735e3f3c7c66410496b68e8c240820061da57375a1fc21bc33e19b6cb0d6a8b0a03a6cb68230e1fb323f85600b36084d82eaf087dfdc29b2fbc9741e489153b39238a49531aa86bb08b638dbf2252f5db9fbe0b392c1ec098bea002fb7620e839739f4e5908e45e63c07aa232785be56065a6ae074df219de239f06e947ac278a"}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4}, 0x4001) executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2a001, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000180)={'vcan0\x00', 0x200}) (async) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x4) (async, rerun: 64) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000100)={0x7, 0x93ed}) (async, rerun: 64) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'wg1\x00', 0x0}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xea200, 0x0) (async) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x1a3001, 0x18) write$khugepaged_scan(r5, &(0x7f0000000000), 0x8) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r4, 0xa09ab000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001100)='/sys/power/pm_print_times', 0x200, 0x0) (async, rerun: 32) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) (rerun: 32) close(0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) close_range(r4, r6, 0x0) (async) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x8) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) syz_clone(0x2204000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r8 = memfd_secret(0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000240)={'vxcan1\x00'}) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x4e24, 0x0, @private2, 0x40407}, 0x1c) (async) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r7, &(0x7f0000000380)="e8", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) (async) sendto$inet6(r7, &(0x7f0000000040)="06f3ed2d81f7ecf81fd576bd9c560969cb65f03d2ca954f7f38f17ec", 0x1c, 0x8000, &(0x7f0000000100)={0xa, 0x4e22, 0x9, @remote, 0x6}, 0x1c) shutdown(r7, 0x1) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) executing program 35: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=0']) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000057eb0020fd070400fa8e0102030109021b00020000000009044a0000ff4868000904"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) (async) r3 = eventfd2(0xd90a, 0x80801) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r3, 0x8}) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r4, 0x200, 0x0, r4}) (async, rerun: 64) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) (rerun: 64) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000040)={'ip6gre0\x00', 0x5}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) (async) syz_open_dev$usbfs(0x0, 0x204, 0x2) (async) r6 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000102505a1a440000102030109025c0002010000000904000001020d00000524060001052400a2000d240f01f9fffffffdff08000006241a0000080905810300040000000904010000000000000904010102020d00000905820210000000000905030240"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000002540)={0x20, 0x80, 0x1c, {0x1, 0x9e64, 0x1002, 0xd, 0x400, 0x1, 0x8a82, 0x5, 0x10, 0x8, 0xffff, 0xffff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000c00)={0x14, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) (async) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) executing program 36: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = add_key$keyring(&(0x7f00000063c0), &(0x7f0000006400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$describe(0x6, r1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="00003393ade938a1f4e4fb79a41770edc1dbca7ec76f4f230634", 0x1a}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f00000001c0)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x35}}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x38a, 0x0, 0x0, 0x0, 0xfffd, &(0x7f0000000180)='syz_tun\x00', 0xf360, 0xffffffff, 0x1}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) close_range(r2, 0xffffffffffffffff, 0x0) executing program 37: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000000"]) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000180)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000140)=0x18}) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="3b000000e2000000400101c0"]) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000040)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0xf) r9 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x2, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) close_range(r0, 0xffffffffffffffff, 0x0) executing program 38: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2a001, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000180)={'vcan0\x00', 0x200}) (async) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x4) (async, rerun: 64) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000100)={0x7, 0x93ed}) (async, rerun: 64) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'wg1\x00', 0x0}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xea200, 0x0) (async) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x1a3001, 0x18) write$khugepaged_scan(r5, &(0x7f0000000000), 0x8) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r4, 0xa09ab000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001100)='/sys/power/pm_print_times', 0x200, 0x0) (async, rerun: 32) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) (rerun: 32) close(0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) close_range(r4, r6, 0x0) (async) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x8) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) syz_clone(0x2204000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r8 = memfd_secret(0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000240)={'vxcan1\x00'}) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x4e24, 0x0, @private2, 0x40407}, 0x1c) (async) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r7, &(0x7f0000000380)="e8", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) (async) sendto$inet6(r7, &(0x7f0000000040)="06f3ed2d81f7ecf81fd576bd9c560969cb65f03d2ca954f7f38f17ec", 0x1c, 0x8000, &(0x7f0000000100)={0xa, 0x4e22, 0x9, @remote, 0x6}, 0x1c) shutdown(r7, 0x1) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) program did not crash bisect: testing without sub-chunk 3/3 testing program (duration=6m4s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 17, 17, 15, 23, 12, 13, 22, 28, 21, 11, 27, 8, 30, 26, 18] detailed listing: executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffffffffffb) ioctl$VHOST_VDPA_GET_STATUS(0xffffffffffffffff, 0x8001af71, &(0x7f0000000040)) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') (async) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)='B', 0x1}], 0x100000000000003b, 0x0, 0x0, 0x11000000}, 0x20000001) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000540)) (async) ptrace$cont(0x20, r1, 0x0, 0x0) (async) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r3, 0x407, 0x0) (async) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x1, 0x4, 0x0, 0x0, 0x0, 0x10}}, 0x50) (async) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x2000000) (async) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) tee(r2, r4, 0x47, 0x1) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) executing program 0: mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xc) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mkdir(0x0, 0x0) rmdir(0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='-pids )'], 0x1f) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000280), 0x800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_follow}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_auto}]}) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='omfs\x00', 0x20004, &(0x7f00000001c0)='\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) executing program 34: mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xc) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mkdir(0x0, 0x0) rmdir(0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='-pids )'], 0x1f) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000280), 0x800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_follow}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_auto}]}) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='omfs\x00', 0x20004, &(0x7f00000001c0)='\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x344) ioctl$ASHMEM_GET_NAME(r1, 0x40087708, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000080)={0x14, &(0x7f00000002c0)={0x0, 0x9, 0xcf, {0xcf, 0x23, "2ed8790a049519bd7bb5137597ab7abd83d6fcd13affc30b46bdc57d3730695f116bfd1eb012bf3cab7c0b0a4a3ee23fa0515de95433adf38b1cf3e4e2e277bb8632b6b4202c1b2cb2dda45853b648f99fc55af5319a11d3fff374c3fe74cd77ddd1ad4524c42d00a11b74f9a85783dc148dd2c02298101be2a85c96739bf16f50a292653966a2125f88beccd82f16b588dbd34af4b27b1ebebfc2b8fac3ea1dfb93538dc9577c1edbe502967bbdbc536a419aaf9ec42d612c79c8d2cb495fc0e889a0fcfd41ba47a0603e1cb0"}}, &(0x7f00000003c0)={0x0, 0x3, 0xe7, @string={0xe7, 0x3, "424ae646e7cfa911460408c6ddb8e9fa3c4b329663bb188bd4f34b549d5c7f439c633ca91988159ecf6c590811223d780232c42ea3fd07b677c8dc805a70e770457195fb07323cdb6c7da4a626128b5bf06f8d613cc9b7a3a67db3779066cb1a1282b3fbf4fa5ceb1885776e7dcff37aeed33e35c7790157fcc94c3bc51aa92af99678871a43f16906fbe59452bfb798b3bfe87ee9532d6bc71399f2e2c46d2ce275025444f2680a9cf0aba858fcb49067006e6d145b742da307887b60d8957117c04104bc77c202d933a2932675bba75d703d17f4cbfda59deec03951383766f2a9186f56"}}}, &(0x7f0000000780)={0x44, &(0x7f00000004c0)={0xb388b94bca248dbb, 0x0, 0xef, "ec4fb39cfd067316a1299a6ed1f893f7c7c8f8e19228f51dae9832b1bc0e2c84568835d5e35a1c740fefe329a75acec285a01435f2cf9b357369a43cebd38c7746da289306c39fa8e11202790cbc2f7ee2be8532373a676a1ed15a7bc8a50da96da333337142d30267fa25b0b6956bb8fc2019c6478c0980e68197fb064840991fcd8cbbb404c3cdf9b2ce0cdfdb9c7dcb80457cf020e6216c1a728cf3f32335fe2b914496f804de9da65f52d695b36aeebfac892f10f2e8fe430352f3306a4a9287c190f06f7414e72f8de7f84d1279bc341b61a078681286eaff37e60b4b2538ed5d316e54665a2ce9ea8dc63a16"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0xfc}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000005c0)={0x20, 0x81, 0x3, "166e46"}, &(0x7f0000000600)={0x20, 0x82, 0x1, "da"}, &(0x7f0000000640)={0x20, 0x83, 0x1, 'n'}, &(0x7f0000000680)={0x20, 0x84, 0x4, "845fcf7f"}, &(0x7f0000000740)={0x20, 0x85, 0x3, "3d1a09"}}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x15}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSBRK(r4, 0x5427) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001fc0)={0x14, 0x0, &(0x7f0000000240)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) socket$inet6(0xa, 0x3, 0xfffffffc) io_setup(0x3, 0x0) recvmsg(r0, &(0x7f0000001400)={&(0x7f00000001c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000240)=""/181, 0xb5}], 0x2, &(0x7f0000001340)=""/147, 0x93}, 0x40010040) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'macsec0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x3, 0x40, 0x0, 0x8, 0x9, 0x8, 0x7, 0x6, [0x7fffffff, 0x2, 0x2, 0x7, 0x0, 0x7, 0xe25c, 0x7fff]}}) r1 = gettid() sigaltstack(&(0x7f0000000000)={0x0, 0x180000001, 0xffffffffffffff73}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) io_getevents(r3, 0x823d, 0x1, &(0x7f0000001440)=[{}], &(0x7f0000001480)) tkill(r1, 0x21) pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RLCREATE(r4, &(0x7f0000000680)={0x18, 0xf, 0x1, {{0x2, 0x0, 0x2}, 0x6}}, 0x18) write$P9_RCLUNK(r4, &(0x7f0000000bc0)={0x7, 0x79, 0x1}, 0x7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = fsopen(&(0x7f0000000040)='9p\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='9p\x00', &(0x7f0000000180)='\\.\x00', 0x0) close_range(r5, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x900080, &(0x7f0000000140)=ANY=[]) executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400003900120002002800000219002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x400, 0x70bd27, 0x25dfdbfc, 0xb, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x22040081}, 0x80) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x50, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x3ff}, {0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) getpid() mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x7ffff000) executing program 6: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)={0x2c, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd}, @nested={0xc, 0x1a, 0x0, 0x1, [@nested={0x8, 0x0, 0x0, 0x1, [@nested={0x4, 0x136}]}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x80c0}, 0x4080) (async, rerun: 64) read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) (rerun: 64) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) (async, rerun: 32) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r5, 0x8}) (async) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001100)='/sys/power/pm_print_times', 0x200, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000001140)={0x2020}, 0x2020) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x2df}) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[@uexit={0x0, 0x18, 0x2}, @rdmsr={0x32, 0x18, {0xb15}}, @cpuid={0x14, 0x18, {0x40, 0x6}}, @wr_crn={0x46, 0x20, {0x0, 0x7}}, @cpuid={0x14, 0x18, {0x3, 0x1}}, @cpuid={0x14, 0x18, {0x800}}], 0x98}) ioctl$KVM_RUN(r6, 0xae80, 0x0) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) write(r4, &(0x7f0000000400)="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", 0x1f000) executing program 6: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x64a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) (async, rerun: 64) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (rerun: 64) remap_file_pages(&(0x7f0000a33000/0x2000)=nil, 0x2000, 0x2000004, 0x18b800000000000, 0x1) (async, rerun: 64) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) recvmsg(r1, &(0x7f0000000400)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, 0x80, 0x0}, 0x142) (async) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{0x0, 0x1c}], 0x1}, 0x0) (async) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x82}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/6, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async) r2 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa2) mlock(&(0x7f0000903000/0x4000)=nil, 0x4000) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0xfffffffffffffff5, 0x0, {0x3}}, 0x18) (async) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB]) (async) umount2(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000140)={0x4, &(0x7f0000000440)="6f654c65c7f986ec4f8905b8eaba466f91ecf30fecc110802559413ce4e59651aca589c7e8b01f869d459443be50b1"}) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) (async) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='devices.list\x00', 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000040), 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000340)={'vlan0\x00', 0x400}) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f00000000c0)=0x1) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0xa, 0x8f) r6 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000d40)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x20bc, 0x5500, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0xd0, 0x9, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x20, 0x0, 0xf7}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x81, 0x2, 0xff}}]}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000840)={0x2c, &(0x7f00000001c0)={0x0, 0x24, 0x61, {0x61, 0x22, "efc16576927597daedfbb03ba3b49a8704c213ecd3a4accdd7391105eb236471080bb6e7b43fa415f554818cce96b4222f5750e31221568203eb72ee9b9a2ce9de71ada8eb847a3d24961e8748f05ae7d9b916e6b8edbca79ea0c221873e91"}}, 0x0, &(0x7f0000000780)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x80, 0x30, 0x1}]}}, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) executing program 6: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x402003, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/packet\x00') read$FUSE(r2, &(0x7f0000004180)={0x2020}, 0x2020) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x4c, &(0x7f000002eff0)={0x0, 0x0}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) executing program 6: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010080, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000380)={0x3, 'pim6reg\x00', {0xc5}, 0x9}) (async, rerun: 64) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) connect$unix(r2, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x4}) (async, rerun: 32) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) (rerun: 32) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) (async) mkdir(&(0x7f0000001040)='./file0\x00', 0xc0) (async) getxattr(&(0x7f0000001240)='./file0\x00', 0x0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002080), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r4, 0x80083314, &(0x7f00000020c0)) (async, rerun: 32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000000)={0x2, 0x8, 0x1, 0xfffffffd}, 0x10) (async) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000200)=""/235, 0xeb}], 0x1, 0xfff, 0xfffffffe) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_handle={0x77682a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/163, 0x0, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f00000005c0)=""/190, 0x0, 0x0, 0x40}}, &(0x7f0000000340)={0x0, 0x16, 0x30}}}], 0x0, 0x0, 0x0}) executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) (async, rerun: 64) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x101000) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cpuset\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x2000808, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) signalfd4(r0, &(0x7f0000000000)={[0x99]}, 0x8, 0x800) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async, rerun: 32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000db", @ANYRES16=r5, @ANYBLOB="010025bd7000fddbdf25050000000c00018008000100", @ANYRES32=r7, @ANYBLOB="14000380040004000400050008000200000000000800050010270800"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0x15, 0x0, 0x100, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0x0, 0xff}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0x7, 0x800, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', 0x1, 0x7800, 0xb, 0x80}}) (async, rerun: 64) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000500)=0x14) (rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'ip_vti0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'gretap0\x00', 0x0}) (async) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) (async) r15 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r15, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r15, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$XDP_RX_RING(r15, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async, rerun: 64) setsockopt$XDP_UMEM_FILL_RING(r15, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async, rerun: 64) bind$xdp(r15, &(0x7f0000000100)={0x2c, 0x0, r14}, 0x10) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'bond_slave_0\x00', 0x0}) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000640)={0x27c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x27c}}, 0x48040) executing program 6: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=0']) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000057eb0020fd070400fa8e0102030109021b00020000000009044a0000ff4868000904"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) (async) r3 = eventfd2(0xd90a, 0x80801) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r3, 0x8}) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r4, 0x200, 0x0, r4}) (async, rerun: 64) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) (rerun: 64) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000040)={'ip6gre0\x00', 0x5}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) (async) syz_open_dev$usbfs(0x0, 0x204, 0x2) (async) r6 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000102505a1a440000102030109025c0002010000000904000001020d00000524060001052400a2000d240f01f9fffffffdff08000006241a0000080905810300040000000904010000000000000904010102020d00000905820210000000000905030240"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000002540)={0x20, 0x80, 0x1c, {0x1, 0x9e64, 0x1002, 0xd, 0x400, 0x1, 0x8a82, 0x5, 0x10, 0x8, 0xffff, 0xffff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000c00)={0x14, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) (async) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100033060000000000000000fe800000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x78, 0x0, &(0x7f0000000600)=[@dead_binder_done, @acquire_done={0x40106309, 0x2}, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) program crashed: WARNING in kvm_put_kvm bisect: the chunk can be dropped bisect: split chunks (needed=true): <17> bisect: split chunk #0 of len 17 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m2s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [28, 21, 11, 27, 8, 30, 26, 18] detailed listing: executing program 6: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x64a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) (async, rerun: 64) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (rerun: 64) remap_file_pages(&(0x7f0000a33000/0x2000)=nil, 0x2000, 0x2000004, 0x18b800000000000, 0x1) (async, rerun: 64) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) recvmsg(r1, &(0x7f0000000400)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, 0x80, 0x0}, 0x142) (async) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{0x0, 0x1c}], 0x1}, 0x0) (async) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x82}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/6, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async) r2 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa2) mlock(&(0x7f0000903000/0x4000)=nil, 0x4000) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0xfffffffffffffff5, 0x0, {0x3}}, 0x18) (async) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB]) (async) umount2(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000140)={0x4, &(0x7f0000000440)="6f654c65c7f986ec4f8905b8eaba466f91ecf30fecc110802559413ce4e59651aca589c7e8b01f869d459443be50b1"}) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) (async) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='devices.list\x00', 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000040), 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000340)={'vlan0\x00', 0x400}) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f00000000c0)=0x1) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0xa, 0x8f) r6 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000d40)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x20bc, 0x5500, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0xd0, 0x9, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x20, 0x0, 0xf7}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x81, 0x2, 0xff}}]}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000840)={0x2c, &(0x7f00000001c0)={0x0, 0x24, 0x61, {0x61, 0x22, "efc16576927597daedfbb03ba3b49a8704c213ecd3a4accdd7391105eb236471080bb6e7b43fa415f554818cce96b4222f5750e31221568203eb72ee9b9a2ce9de71ada8eb847a3d24961e8748f05ae7d9b916e6b8edbca79ea0c221873e91"}}, 0x0, &(0x7f0000000780)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x80, 0x30, 0x1}]}}, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) executing program 6: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x402003, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/packet\x00') read$FUSE(r2, &(0x7f0000004180)={0x2020}, 0x2020) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x4c, &(0x7f000002eff0)={0x0, 0x0}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) executing program 6: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010080, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000380)={0x3, 'pim6reg\x00', {0xc5}, 0x9}) (async, rerun: 64) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) connect$unix(r2, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x4}) (async, rerun: 32) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) (rerun: 32) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) (async) mkdir(&(0x7f0000001040)='./file0\x00', 0xc0) (async) getxattr(&(0x7f0000001240)='./file0\x00', 0x0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002080), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r4, 0x80083314, &(0x7f00000020c0)) (async, rerun: 32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000000)={0x2, 0x8, 0x1, 0xfffffffd}, 0x10) (async) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000200)=""/235, 0xeb}], 0x1, 0xfff, 0xfffffffe) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_handle={0x77682a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/163, 0x0, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f00000005c0)=""/190, 0x0, 0x0, 0x40}}, &(0x7f0000000340)={0x0, 0x16, 0x30}}}], 0x0, 0x0, 0x0}) executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) (async, rerun: 64) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x101000) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cpuset\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x2000808, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) signalfd4(r0, &(0x7f0000000000)={[0x99]}, 0x8, 0x800) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async, rerun: 32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000db", @ANYRES16=r5, @ANYBLOB="010025bd7000fddbdf25050000000c00018008000100", @ANYRES32=r7, @ANYBLOB="14000380040004000400050008000200000000000800050010270800"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0x15, 0x0, 0x100, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0x0, 0xff}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0x7, 0x800, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', 0x1, 0x7800, 0xb, 0x80}}) (async, rerun: 64) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000500)=0x14) (rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'ip_vti0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'gretap0\x00', 0x0}) (async) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) (async) r15 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r15, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r15, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$XDP_RX_RING(r15, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async, rerun: 64) setsockopt$XDP_UMEM_FILL_RING(r15, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async, rerun: 64) bind$xdp(r15, &(0x7f0000000100)={0x2c, 0x0, r14}, 0x10) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'bond_slave_0\x00', 0x0}) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000640)={0x27c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x27c}}, 0x48040) executing program 6: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=0']) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000057eb0020fd070400fa8e0102030109021b00020000000009044a0000ff4868000904"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) (async) r3 = eventfd2(0xd90a, 0x80801) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r3, 0x8}) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r4, 0x200, 0x0, r4}) (async, rerun: 64) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) (rerun: 64) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000040)={'ip6gre0\x00', 0x5}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) (async) syz_open_dev$usbfs(0x0, 0x204, 0x2) (async) r6 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000102505a1a440000102030109025c0002010000000904000001020d00000524060001052400a2000d240f01f9fffffffdff08000006241a0000080905810300040000000904010000000000000904010102020d00000905820210000000000905030240"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000002540)={0x20, 0x80, 0x1c, {0x1, 0x9e64, 0x1002, 0xd, 0x400, 0x1, 0x8a82, 0x5, 0x10, 0x8, 0xffff, 0xffff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000c00)={0x14, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) (async) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100033060000000000000000fe800000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x78, 0x0, &(0x7f0000000600)=[@dead_binder_done, @acquire_done={0x40106309, 0x2}, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m2s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18, 17, 17, 15, 23, 12, 13, 22] detailed listing: executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffffffffffb) ioctl$VHOST_VDPA_GET_STATUS(0xffffffffffffffff, 0x8001af71, &(0x7f0000000040)) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') (async) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)='B', 0x1}], 0x100000000000003b, 0x0, 0x0, 0x11000000}, 0x20000001) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000540)) (async) ptrace$cont(0x20, r1, 0x0, 0x0) (async) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r3, 0x407, 0x0) (async) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x1, 0x4, 0x0, 0x0, 0x0, 0x10}}, 0x50) (async) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x2000000) (async) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) tee(r2, r4, 0x47, 0x1) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) executing program 0: mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xc) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mkdir(0x0, 0x0) rmdir(0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='-pids )'], 0x1f) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000280), 0x800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_follow}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_auto}]}) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='omfs\x00', 0x20004, &(0x7f00000001c0)='\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) executing program 34: mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xc) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mkdir(0x0, 0x0) rmdir(0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='-pids )'], 0x1f) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000280), 0x800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_follow}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_auto}]}) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='omfs\x00', 0x20004, &(0x7f00000001c0)='\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x344) ioctl$ASHMEM_GET_NAME(r1, 0x40087708, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000080)={0x14, &(0x7f00000002c0)={0x0, 0x9, 0xcf, {0xcf, 0x23, "2ed8790a049519bd7bb5137597ab7abd83d6fcd13affc30b46bdc57d3730695f116bfd1eb012bf3cab7c0b0a4a3ee23fa0515de95433adf38b1cf3e4e2e277bb8632b6b4202c1b2cb2dda45853b648f99fc55af5319a11d3fff374c3fe74cd77ddd1ad4524c42d00a11b74f9a85783dc148dd2c02298101be2a85c96739bf16f50a292653966a2125f88beccd82f16b588dbd34af4b27b1ebebfc2b8fac3ea1dfb93538dc9577c1edbe502967bbdbc536a419aaf9ec42d612c79c8d2cb495fc0e889a0fcfd41ba47a0603e1cb0"}}, &(0x7f00000003c0)={0x0, 0x3, 0xe7, @string={0xe7, 0x3, "424ae646e7cfa911460408c6ddb8e9fa3c4b329663bb188bd4f34b549d5c7f439c633ca91988159ecf6c590811223d780232c42ea3fd07b677c8dc805a70e770457195fb07323cdb6c7da4a626128b5bf06f8d613cc9b7a3a67db3779066cb1a1282b3fbf4fa5ceb1885776e7dcff37aeed33e35c7790157fcc94c3bc51aa92af99678871a43f16906fbe59452bfb798b3bfe87ee9532d6bc71399f2e2c46d2ce275025444f2680a9cf0aba858fcb49067006e6d145b742da307887b60d8957117c04104bc77c202d933a2932675bba75d703d17f4cbfda59deec03951383766f2a9186f56"}}}, &(0x7f0000000780)={0x44, &(0x7f00000004c0)={0xb388b94bca248dbb, 0x0, 0xef, "ec4fb39cfd067316a1299a6ed1f893f7c7c8f8e19228f51dae9832b1bc0e2c84568835d5e35a1c740fefe329a75acec285a01435f2cf9b357369a43cebd38c7746da289306c39fa8e11202790cbc2f7ee2be8532373a676a1ed15a7bc8a50da96da333337142d30267fa25b0b6956bb8fc2019c6478c0980e68197fb064840991fcd8cbbb404c3cdf9b2ce0cdfdb9c7dcb80457cf020e6216c1a728cf3f32335fe2b914496f804de9da65f52d695b36aeebfac892f10f2e8fe430352f3306a4a9287c190f06f7414e72f8de7f84d1279bc341b61a078681286eaff37e60b4b2538ed5d316e54665a2ce9ea8dc63a16"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0xfc}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000005c0)={0x20, 0x81, 0x3, "166e46"}, &(0x7f0000000600)={0x20, 0x82, 0x1, "da"}, &(0x7f0000000640)={0x20, 0x83, 0x1, 'n'}, &(0x7f0000000680)={0x20, 0x84, 0x4, "845fcf7f"}, &(0x7f0000000740)={0x20, 0x85, 0x3, "3d1a09"}}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x15}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSBRK(r4, 0x5427) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001fc0)={0x14, 0x0, &(0x7f0000000240)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) socket$inet6(0xa, 0x3, 0xfffffffc) io_setup(0x3, 0x0) recvmsg(r0, &(0x7f0000001400)={&(0x7f00000001c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000240)=""/181, 0xb5}], 0x2, &(0x7f0000001340)=""/147, 0x93}, 0x40010040) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'macsec0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x3, 0x40, 0x0, 0x8, 0x9, 0x8, 0x7, 0x6, [0x7fffffff, 0x2, 0x2, 0x7, 0x0, 0x7, 0xe25c, 0x7fff]}}) r1 = gettid() sigaltstack(&(0x7f0000000000)={0x0, 0x180000001, 0xffffffffffffff73}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) io_getevents(r3, 0x823d, 0x1, &(0x7f0000001440)=[{}], &(0x7f0000001480)) tkill(r1, 0x21) pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RLCREATE(r4, &(0x7f0000000680)={0x18, 0xf, 0x1, {{0x2, 0x0, 0x2}, 0x6}}, 0x18) write$P9_RCLUNK(r4, &(0x7f0000000bc0)={0x7, 0x79, 0x1}, 0x7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = fsopen(&(0x7f0000000040)='9p\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='9p\x00', &(0x7f0000000180)='\\.\x00', 0x0) close_range(r5, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x900080, &(0x7f0000000140)=ANY=[]) executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400003900120002002800000219002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x400, 0x70bd27, 0x25dfdbfc, 0xb, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x22040081}, 0x80) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x50, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x3ff}, {0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) getpid() mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x7ffff000) executing program 6: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)={0x2c, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd}, @nested={0xc, 0x1a, 0x0, 0x1, [@nested={0x8, 0x0, 0x0, 0x1, [@nested={0x4, 0x136}]}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x80c0}, 0x4080) (async, rerun: 64) read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) (rerun: 64) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) (async, rerun: 32) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r5, 0x8}) (async) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001100)='/sys/power/pm_print_times', 0x200, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000001140)={0x2020}, 0x2020) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x2df}) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[@uexit={0x0, 0x18, 0x2}, @rdmsr={0x32, 0x18, {0xb15}}, @cpuid={0x14, 0x18, {0x40, 0x6}}, @wr_crn={0x46, 0x20, {0x0, 0x7}}, @cpuid={0x14, 0x18, {0x3, 0x1}}, @cpuid={0x14, 0x18, {0x800}}], 0x98}) ioctl$KVM_RUN(r6, 0xae80, 0x0) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) write(r4, &(0x7f0000000400)="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", 0x1f000) program did not crash bisect: split chunks (needed=true): <9>, <8> bisect: split chunk #0 of len 9 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m3s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [23, 12, 13, 22, 28, 21, 11, 27, 8, 30, 26, 18] detailed listing: executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) socket$inet6(0xa, 0x3, 0xfffffffc) io_setup(0x3, 0x0) recvmsg(r0, &(0x7f0000001400)={&(0x7f00000001c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000240)=""/181, 0xb5}], 0x2, &(0x7f0000001340)=""/147, 0x93}, 0x40010040) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'macsec0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x3, 0x40, 0x0, 0x8, 0x9, 0x8, 0x7, 0x6, [0x7fffffff, 0x2, 0x2, 0x7, 0x0, 0x7, 0xe25c, 0x7fff]}}) r1 = gettid() sigaltstack(&(0x7f0000000000)={0x0, 0x180000001, 0xffffffffffffff73}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) io_getevents(r3, 0x823d, 0x1, &(0x7f0000001440)=[{}], &(0x7f0000001480)) tkill(r1, 0x21) pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RLCREATE(r4, &(0x7f0000000680)={0x18, 0xf, 0x1, {{0x2, 0x0, 0x2}, 0x6}}, 0x18) write$P9_RCLUNK(r4, &(0x7f0000000bc0)={0x7, 0x79, 0x1}, 0x7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = fsopen(&(0x7f0000000040)='9p\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='9p\x00', &(0x7f0000000180)='\\.\x00', 0x0) close_range(r5, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x900080, &(0x7f0000000140)=ANY=[]) executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400003900120002002800000219002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x400, 0x70bd27, 0x25dfdbfc, 0xb, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x22040081}, 0x80) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x50, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x3ff}, {0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) getpid() mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x7ffff000) executing program 6: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)={0x2c, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd}, @nested={0xc, 0x1a, 0x0, 0x1, [@nested={0x8, 0x0, 0x0, 0x1, [@nested={0x4, 0x136}]}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x80c0}, 0x4080) (async, rerun: 64) read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) (rerun: 64) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) (async, rerun: 32) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r5, 0x8}) (async) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001100)='/sys/power/pm_print_times', 0x200, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000001140)={0x2020}, 0x2020) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x2df}) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[@uexit={0x0, 0x18, 0x2}, @rdmsr={0x32, 0x18, {0xb15}}, @cpuid={0x14, 0x18, {0x40, 0x6}}, @wr_crn={0x46, 0x20, {0x0, 0x7}}, @cpuid={0x14, 0x18, {0x3, 0x1}}, @cpuid={0x14, 0x18, {0x800}}], 0x98}) ioctl$KVM_RUN(r6, 0xae80, 0x0) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) write(r4, &(0x7f0000000400)="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", 0x1f000) executing program 6: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x64a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) (async, rerun: 64) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (rerun: 64) remap_file_pages(&(0x7f0000a33000/0x2000)=nil, 0x2000, 0x2000004, 0x18b800000000000, 0x1) (async, rerun: 64) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) recvmsg(r1, &(0x7f0000000400)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, 0x80, 0x0}, 0x142) (async) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{0x0, 0x1c}], 0x1}, 0x0) (async) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x82}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/6, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async) r2 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa2) mlock(&(0x7f0000903000/0x4000)=nil, 0x4000) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0xfffffffffffffff5, 0x0, {0x3}}, 0x18) (async) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB]) (async) umount2(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000140)={0x4, &(0x7f0000000440)="6f654c65c7f986ec4f8905b8eaba466f91ecf30fecc110802559413ce4e59651aca589c7e8b01f869d459443be50b1"}) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) (async) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='devices.list\x00', 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000040), 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000340)={'vlan0\x00', 0x400}) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f00000000c0)=0x1) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0xa, 0x8f) r6 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000d40)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x20bc, 0x5500, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0xd0, 0x9, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x20, 0x0, 0xf7}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x81, 0x2, 0xff}}]}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000840)={0x2c, &(0x7f00000001c0)={0x0, 0x24, 0x61, {0x61, 0x22, "efc16576927597daedfbb03ba3b49a8704c213ecd3a4accdd7391105eb236471080bb6e7b43fa415f554818cce96b4222f5750e31221568203eb72ee9b9a2ce9de71ada8eb847a3d24961e8748f05ae7d9b916e6b8edbca79ea0c221873e91"}}, 0x0, &(0x7f0000000780)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x80, 0x30, 0x1}]}}, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) executing program 6: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x402003, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/packet\x00') read$FUSE(r2, &(0x7f0000004180)={0x2020}, 0x2020) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x4c, &(0x7f000002eff0)={0x0, 0x0}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) executing program 6: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010080, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000380)={0x3, 'pim6reg\x00', {0xc5}, 0x9}) (async, rerun: 64) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) connect$unix(r2, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x4}) (async, rerun: 32) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) (rerun: 32) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) (async) mkdir(&(0x7f0000001040)='./file0\x00', 0xc0) (async) getxattr(&(0x7f0000001240)='./file0\x00', 0x0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002080), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r4, 0x80083314, &(0x7f00000020c0)) (async, rerun: 32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000000)={0x2, 0x8, 0x1, 0xfffffffd}, 0x10) (async) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000200)=""/235, 0xeb}], 0x1, 0xfff, 0xfffffffe) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_handle={0x77682a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/163, 0x0, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f00000005c0)=""/190, 0x0, 0x0, 0x40}}, &(0x7f0000000340)={0x0, 0x16, 0x30}}}], 0x0, 0x0, 0x0}) executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) (async, rerun: 64) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x101000) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cpuset\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x2000808, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) signalfd4(r0, &(0x7f0000000000)={[0x99]}, 0x8, 0x800) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async, rerun: 32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000db", @ANYRES16=r5, @ANYBLOB="010025bd7000fddbdf25050000000c00018008000100", @ANYRES32=r7, @ANYBLOB="14000380040004000400050008000200000000000800050010270800"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0x15, 0x0, 0x100, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0x0, 0xff}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0x7, 0x800, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', 0x1, 0x7800, 0xb, 0x80}}) (async, rerun: 64) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000500)=0x14) (rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'ip_vti0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'gretap0\x00', 0x0}) (async) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) (async) r15 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r15, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r15, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$XDP_RX_RING(r15, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async, rerun: 64) setsockopt$XDP_UMEM_FILL_RING(r15, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async, rerun: 64) bind$xdp(r15, &(0x7f0000000100)={0x2c, 0x0, r14}, 0x10) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'bond_slave_0\x00', 0x0}) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000640)={0x27c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x27c}}, 0x48040) executing program 6: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=0']) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000057eb0020fd070400fa8e0102030109021b00020000000009044a0000ff4868000904"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) (async) r3 = eventfd2(0xd90a, 0x80801) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r3, 0x8}) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r4, 0x200, 0x0, r4}) (async, rerun: 64) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) (rerun: 64) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000040)={'ip6gre0\x00', 0x5}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) (async) syz_open_dev$usbfs(0x0, 0x204, 0x2) (async) r6 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000102505a1a440000102030109025c0002010000000904000001020d00000524060001052400a2000d240f01f9fffffffdff08000006241a0000080905810300040000000904010000000000000904010102020d00000905820210000000000905030240"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000002540)={0x20, 0x80, 0x1c, {0x1, 0x9e64, 0x1002, 0xd, 0x400, 0x1, 0x8a82, 0x5, 0x10, 0x8, 0xffff, 0xffff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000c00)={0x14, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) (async) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100033060000000000000000fe800000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x78, 0x0, &(0x7f0000000600)=[@dead_binder_done, @acquire_done={0x40106309, 0x2}, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) program crashed: WARNING in kvm_put_kvm bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #1 of len 8 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m2s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [23, 12, 13, 22, 8, 30, 26, 18] detailed listing: executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) socket$inet6(0xa, 0x3, 0xfffffffc) io_setup(0x3, 0x0) recvmsg(r0, &(0x7f0000001400)={&(0x7f00000001c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000240)=""/181, 0xb5}], 0x2, &(0x7f0000001340)=""/147, 0x93}, 0x40010040) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'macsec0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x3, 0x40, 0x0, 0x8, 0x9, 0x8, 0x7, 0x6, [0x7fffffff, 0x2, 0x2, 0x7, 0x0, 0x7, 0xe25c, 0x7fff]}}) r1 = gettid() sigaltstack(&(0x7f0000000000)={0x0, 0x180000001, 0xffffffffffffff73}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) io_getevents(r3, 0x823d, 0x1, &(0x7f0000001440)=[{}], &(0x7f0000001480)) tkill(r1, 0x21) pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RLCREATE(r4, &(0x7f0000000680)={0x18, 0xf, 0x1, {{0x2, 0x0, 0x2}, 0x6}}, 0x18) write$P9_RCLUNK(r4, &(0x7f0000000bc0)={0x7, 0x79, 0x1}, 0x7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = fsopen(&(0x7f0000000040)='9p\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='9p\x00', &(0x7f0000000180)='\\.\x00', 0x0) close_range(r5, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x900080, &(0x7f0000000140)=ANY=[]) executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400003900120002002800000219002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x400, 0x70bd27, 0x25dfdbfc, 0xb, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x22040081}, 0x80) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x50, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x3ff}, {0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) getpid() mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x7ffff000) executing program 6: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)={0x2c, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd}, @nested={0xc, 0x1a, 0x0, 0x1, [@nested={0x8, 0x0, 0x0, 0x1, [@nested={0x4, 0x136}]}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x80c0}, 0x4080) (async, rerun: 64) read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) (rerun: 64) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) (async, rerun: 32) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r5, 0x8}) (async) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001100)='/sys/power/pm_print_times', 0x200, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000001140)={0x2020}, 0x2020) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x2df}) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[@uexit={0x0, 0x18, 0x2}, @rdmsr={0x32, 0x18, {0xb15}}, @cpuid={0x14, 0x18, {0x40, 0x6}}, @wr_crn={0x46, 0x20, {0x0, 0x7}}, @cpuid={0x14, 0x18, {0x3, 0x1}}, @cpuid={0x14, 0x18, {0x800}}], 0x98}) ioctl$KVM_RUN(r6, 0xae80, 0x0) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) write(r4, &(0x7f0000000400)="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", 0x1f000) executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) (async, rerun: 64) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x101000) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cpuset\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x2000808, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) signalfd4(r0, &(0x7f0000000000)={[0x99]}, 0x8, 0x800) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async, rerun: 32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000db", @ANYRES16=r5, @ANYBLOB="010025bd7000fddbdf25050000000c00018008000100", @ANYRES32=r7, @ANYBLOB="14000380040004000400050008000200000000000800050010270800"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0x15, 0x0, 0x100, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0x0, 0xff}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0x7, 0x800, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', 0x1, 0x7800, 0xb, 0x80}}) (async, rerun: 64) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000500)=0x14) (rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'ip_vti0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'gretap0\x00', 0x0}) (async) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) (async) r15 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r15, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r15, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$XDP_RX_RING(r15, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async, rerun: 64) setsockopt$XDP_UMEM_FILL_RING(r15, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async, rerun: 64) bind$xdp(r15, &(0x7f0000000100)={0x2c, 0x0, r14}, 0x10) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'bond_slave_0\x00', 0x0}) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000640)={0x27c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x27c}}, 0x48040) executing program 6: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=0']) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000057eb0020fd070400fa8e0102030109021b00020000000009044a0000ff4868000904"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) (async) r3 = eventfd2(0xd90a, 0x80801) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r3, 0x8}) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r4, 0x200, 0x0, r4}) (async, rerun: 64) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) (rerun: 64) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000040)={'ip6gre0\x00', 0x5}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) (async) syz_open_dev$usbfs(0x0, 0x204, 0x2) (async) r6 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000102505a1a440000102030109025c0002010000000904000001020d00000524060001052400a2000d240f01f9fffffffdff08000006241a0000080905810300040000000904010000000000000904010102020d00000905820210000000000905030240"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000002540)={0x20, 0x80, 0x1c, {0x1, 0x9e64, 0x1002, 0xd, 0x400, 0x1, 0x8a82, 0x5, 0x10, 0x8, 0xffff, 0xffff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000c00)={0x14, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) (async) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100033060000000000000000fe800000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x78, 0x0, &(0x7f0000000600)=[@dead_binder_done, @acquire_done={0x40106309, 0x2}, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) program crashed: WARNING in kvm_put_kvm bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <4>, <4> bisect: split chunk #0 of len 4 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 22, 8, 30, 26, 18] detailed listing: executing program 6: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)={0x2c, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd}, @nested={0xc, 0x1a, 0x0, 0x1, [@nested={0x8, 0x0, 0x0, 0x1, [@nested={0x4, 0x136}]}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x80c0}, 0x4080) (async, rerun: 64) read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) (rerun: 64) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) (async, rerun: 32) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r5, 0x8}) (async) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001100)='/sys/power/pm_print_times', 0x200, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000001140)={0x2020}, 0x2020) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x2df}) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[@uexit={0x0, 0x18, 0x2}, @rdmsr={0x32, 0x18, {0xb15}}, @cpuid={0x14, 0x18, {0x40, 0x6}}, @wr_crn={0x46, 0x20, {0x0, 0x7}}, @cpuid={0x14, 0x18, {0x3, 0x1}}, @cpuid={0x14, 0x18, {0x800}}], 0x98}) ioctl$KVM_RUN(r6, 0xae80, 0x0) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) write(r4, &(0x7f0000000400)="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", 0x1f000) executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) (async, rerun: 64) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x101000) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cpuset\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x2000808, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) signalfd4(r0, &(0x7f0000000000)={[0x99]}, 0x8, 0x800) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async, rerun: 32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000db", @ANYRES16=r5, @ANYBLOB="010025bd7000fddbdf25050000000c00018008000100", @ANYRES32=r7, @ANYBLOB="14000380040004000400050008000200000000000800050010270800"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0x15, 0x0, 0x100, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0x0, 0xff}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0x7, 0x800, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', 0x1, 0x7800, 0xb, 0x80}}) (async, rerun: 64) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000500)=0x14) (rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'ip_vti0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'gretap0\x00', 0x0}) (async) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) (async) r15 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r15, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r15, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$XDP_RX_RING(r15, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async, rerun: 64) setsockopt$XDP_UMEM_FILL_RING(r15, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async, rerun: 64) bind$xdp(r15, &(0x7f0000000100)={0x2c, 0x0, r14}, 0x10) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'bond_slave_0\x00', 0x0}) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000640)={0x27c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x27c}}, 0x48040) executing program 6: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=0']) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000057eb0020fd070400fa8e0102030109021b00020000000009044a0000ff4868000904"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) (async) r3 = eventfd2(0xd90a, 0x80801) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r3, 0x8}) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r4, 0x200, 0x0, r4}) (async, rerun: 64) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) (rerun: 64) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000040)={'ip6gre0\x00', 0x5}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) (async) syz_open_dev$usbfs(0x0, 0x204, 0x2) (async) r6 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000102505a1a440000102030109025c0002010000000904000001020d00000524060001052400a2000d240f01f9fffffffdff08000006241a0000080905810300040000000904010000000000000904010102020d00000905820210000000000905030240"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000002540)={0x20, 0x80, 0x1c, {0x1, 0x9e64, 0x1002, 0xd, 0x400, 0x1, 0x8a82, 0x5, 0x10, 0x8, 0xffff, 0xffff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000c00)={0x14, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) (async) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100033060000000000000000fe800000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x78, 0x0, &(0x7f0000000600)=[@dead_binder_done, @acquire_done={0x40106309, 0x2}, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) program crashed: WARNING in kvm_put_kvm bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #1 of len 4 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 22, 26, 18] detailed listing: executing program 6: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)={0x2c, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd}, @nested={0xc, 0x1a, 0x0, 0x1, [@nested={0x8, 0x0, 0x0, 0x1, [@nested={0x4, 0x136}]}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x80c0}, 0x4080) (async, rerun: 64) read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) (rerun: 64) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) (async, rerun: 32) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r5, 0x8}) (async) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001100)='/sys/power/pm_print_times', 0x200, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000001140)={0x2020}, 0x2020) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x2df}) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[@uexit={0x0, 0x18, 0x2}, @rdmsr={0x32, 0x18, {0xb15}}, @cpuid={0x14, 0x18, {0x40, 0x6}}, @wr_crn={0x46, 0x20, {0x0, 0x7}}, @cpuid={0x14, 0x18, {0x3, 0x1}}, @cpuid={0x14, 0x18, {0x800}}], 0x98}) ioctl$KVM_RUN(r6, 0xae80, 0x0) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) write(r4, &(0x7f0000000400)="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", 0x1f000) executing program 6: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=0']) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000057eb0020fd070400fa8e0102030109021b00020000000009044a0000ff4868000904"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) (async) r3 = eventfd2(0xd90a, 0x80801) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r3, 0x8}) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r4, 0x200, 0x0, r4}) (async, rerun: 64) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) (rerun: 64) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000040)={'ip6gre0\x00', 0x5}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) (async) syz_open_dev$usbfs(0x0, 0x204, 0x2) (async) r6 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000102505a1a440000102030109025c0002010000000904000001020d00000524060001052400a2000d240f01f9fffffffdff08000006241a0000080905810300040000000904010000000000000904010102020d00000905820210000000000905030240"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000002540)={0x20, 0x80, 0x1c, {0x1, 0x9e64, 0x1002, 0xd, 0x400, 0x1, 0x8a82, 0x5, 0x10, 0x8, 0xffff, 0xffff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000c00)={0x14, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) (async) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100033060000000000000000fe800000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x78, 0x0, &(0x7f0000000600)=[@dead_binder_done, @acquire_done={0x40106309, 0x2}, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) program crashed: WARNING in kvm_put_kvm bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <2>, <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [22, 26, 18] detailed listing: executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001100)='/sys/power/pm_print_times', 0x200, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000001140)={0x2020}, 0x2020) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x2df}) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[@uexit={0x0, 0x18, 0x2}, @rdmsr={0x32, 0x18, {0xb15}}, @cpuid={0x14, 0x18, {0x40, 0x6}}, @wr_crn={0x46, 0x20, {0x0, 0x7}}, @cpuid={0x14, 0x18, {0x3, 0x1}}, @cpuid={0x14, 0x18, {0x800}}], 0x98}) ioctl$KVM_RUN(r6, 0xae80, 0x0) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) write(r4, &(0x7f0000000400)="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", 0x1f000) executing program 6: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=0']) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000057eb0020fd070400fa8e0102030109021b00020000000009044a0000ff4868000904"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) (async) r3 = eventfd2(0xd90a, 0x80801) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r3, 0x8}) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r4, 0x200, 0x0, r4}) (async, rerun: 64) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) (rerun: 64) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000040)={'ip6gre0\x00', 0x5}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) (async) syz_open_dev$usbfs(0x0, 0x204, 0x2) (async) r6 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000102505a1a440000102030109025c0002010000000904000001020d00000524060001052400a2000d240f01f9fffffffdff08000006241a0000080905810300040000000904010000000000000904010102020d00000905820210000000000905030240"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000002540)={0x20, 0x80, 0x1c, {0x1, 0x9e64, 0x1002, 0xd, 0x400, 0x1, 0x8a82, 0x5, 0x10, 0x8, 0xffff, 0xffff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000c00)={0x14, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) (async) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100033060000000000000000fe800000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x78, 0x0, &(0x7f0000000600)=[@dead_binder_done, @acquire_done={0x40106309, 0x2}, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 26, 18] detailed listing: executing program 6: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)={0x2c, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd}, @nested={0xc, 0x1a, 0x0, 0x1, [@nested={0x8, 0x0, 0x0, 0x1, [@nested={0x4, 0x136}]}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x80c0}, 0x4080) (async, rerun: 64) read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) (rerun: 64) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) (async, rerun: 32) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r5, 0x8}) (async) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) executing program 6: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=0']) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000057eb0020fd070400fa8e0102030109021b00020000000009044a0000ff4868000904"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) (async) r3 = eventfd2(0xd90a, 0x80801) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r3, 0x8}) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r4, 0x200, 0x0, r4}) (async, rerun: 64) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) (rerun: 64) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000040)={'ip6gre0\x00', 0x5}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) (async) syz_open_dev$usbfs(0x0, 0x204, 0x2) (async) r6 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000102505a1a440000102030109025c0002010000000904000001020d00000524060001052400a2000d240f01f9fffffffdff08000006241a0000080905810300040000000904010000000000000904010102020d00000905820210000000000905030240"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000002540)={0x20, 0x80, 0x1c, {0x1, 0x9e64, 0x1002, 0xd, 0x400, 0x1, 0x8a82, 0x5, 0x10, 0x8, 0xffff, 0xffff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000c00)={0x14, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) (async) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100033060000000000000000fe800000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x78, 0x0, &(0x7f0000000600)=[@dead_binder_done, @acquire_done={0x40106309, 0x2}, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) program crashed: WARNING in kvm_put_kvm bisect: the chunk can be dropped bisect: split chunk #1 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 18] detailed listing: executing program 6: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)={0x2c, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd}, @nested={0xc, 0x1a, 0x0, 0x1, [@nested={0x8, 0x0, 0x0, 0x1, [@nested={0x4, 0x136}]}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x80c0}, 0x4080) (async, rerun: 64) read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) (rerun: 64) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) (async, rerun: 32) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r5, 0x8}) (async) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100033060000000000000000fe800000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x78, 0x0, &(0x7f0000000600)=[@dead_binder_done, @acquire_done={0x40106309, 0x2}, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) program crashed: WARNING in kvm_put_kvm bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <1>, <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: split chunk #1 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 2 programs left: executing program 6: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)={0x2c, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd}, @nested={0xc, 0x1a, 0x0, 0x1, [@nested={0x8, 0x0, 0x0, 0x1, [@nested={0x4, 0x136}]}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x80c0}, 0x4080) (async, rerun: 64) read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) (rerun: 64) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) (async, rerun: 32) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r5, 0x8}) (async) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100033060000000000000000fe800000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x78, 0x0, &(0x7f0000000600)=[@dead_binder_done, @acquire_done={0x40106309, 0x2}, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) bisect: trying to concatenate bisect: concatenate 2 entries minimizing program #0 before concatenation testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 18] detailed listing: executing program 0: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)={0x2c, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd}, @nested={0xc, 0x1a, 0x0, 0x1, [@nested={0x8, 0x0, 0x0, 0x1, [@nested={0x4, 0x136}]}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x80c0}, 0x4080) (async, rerun: 64) read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) (rerun: 64) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) (async, rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r4, 0x8}) (async) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, 0x0) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100033060000000000000000fe800000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x78, 0x0, &(0x7f0000000600)=[@dead_binder_done, @acquire_done={0x40106309, 0x2}, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) program crashed: WARNING in kvm_put_kvm testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 18] detailed listing: executing program 0: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)={0x2c, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd}, @nested={0xc, 0x1a, 0x0, 0x1, [@nested={0x8, 0x0, 0x0, 0x1, [@nested={0x4, 0x136}]}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x80c0}, 0x4080) (async, rerun: 64) read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) (rerun: 64) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) (async, rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r4, 0x8}) (async) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100033060000000000000000fe800000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x78, 0x0, &(0x7f0000000600)=[@dead_binder_done, @acquire_done={0x40106309, 0x2}, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) program crashed: WARNING in kvm_put_kvm testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 18] detailed listing: executing program 0: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)={0x2c, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd}, @nested={0xc, 0x1a, 0x0, 0x1, [@nested={0x8, 0x0, 0x0, 0x1, [@nested={0x4, 0x136}]}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x80c0}, 0x4080) (async, rerun: 64) read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) (rerun: 64) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) (async, rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, 0x0) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100033060000000000000000fe800000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x78, 0x0, &(0x7f0000000600)=[@dead_binder_done, @acquire_done={0x40106309, 0x2}, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 18] detailed listing: executing program 0: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)={0x2c, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd}, @nested={0xc, 0x1a, 0x0, 0x1, [@nested={0x8, 0x0, 0x0, 0x1, [@nested={0x4, 0x136}]}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x80c0}, 0x4080) (async, rerun: 64) read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) (rerun: 64) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) (async, rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r4, 0x8}) (async) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100033060000000000000000fe800000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x78, 0x0, &(0x7f0000000600)=[@dead_binder_done, @acquire_done={0x40106309, 0x2}, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 18] detailed listing: executing program 0: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)={0x2c, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd}, @nested={0xc, 0x1a, 0x0, 0x1, [@nested={0x8, 0x0, 0x0, 0x1, [@nested={0x4, 0x136}]}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x80c0}, 0x4080) (async, rerun: 64) read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) (rerun: 64) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) (async, rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, 0xffffffffffffffff, 0x8}) (async) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100033060000000000000000fe800000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x78, 0x0, &(0x7f0000000600)=[@dead_binder_done, @acquire_done={0x40106309, 0x2}, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 18] detailed listing: executing program 0: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)={0x2c, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd}, @nested={0xc, 0x1a, 0x0, 0x1, [@nested={0x8, 0x0, 0x0, 0x1, [@nested={0x4, 0x136}]}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x80c0}, 0x4080) (async, rerun: 64) read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) (rerun: 64) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) (async, rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r2, 0x8}) (async) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100033060000000000000000fe800000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x78, 0x0, &(0x7f0000000600)=[@dead_binder_done, @acquire_done={0x40106309, 0x2}, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 18] detailed listing: executing program 0: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)={0x2c, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd}, @nested={0xc, 0x1a, 0x0, 0x1, [@nested={0x8, 0x0, 0x0, 0x1, [@nested={0x4, 0x136}]}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x80c0}, 0x4080) (async, rerun: 64) read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) (rerun: 64) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) (async, rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (rerun: 32) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r3, 0x8}) (async) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100033060000000000000000fe800000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x78, 0x0, &(0x7f0000000600)=[@dead_binder_done, @acquire_done={0x40106309, 0x2}, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 18] detailed listing: executing program 0: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)={0x2c, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd}, @nested={0xc, 0x1a, 0x0, 0x1, [@nested={0x8, 0x0, 0x0, 0x1, [@nested={0x4, 0x136}]}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x80c0}, 0x4080) (async, rerun: 64) read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) (rerun: 64) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r4, 0x8}) (async) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100033060000000000000000fe800000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x78, 0x0, &(0x7f0000000600)=[@dead_binder_done, @acquire_done={0x40106309, 0x2}, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) program crashed: WARNING in kvm_put_kvm testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 18] detailed listing: executing program 0: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)={0x2c, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd}, @nested={0xc, 0x1a, 0x0, 0x1, [@nested={0x8, 0x0, 0x0, 0x1, [@nested={0x4, 0x136}]}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x80c0}, 0x4080) (async, rerun: 64) read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) (rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r4, 0x8}) (async) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100033060000000000000000fe800000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x78, 0x0, &(0x7f0000000600)=[@dead_binder_done, @acquire_done={0x40106309, 0x2}, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) program crashed: WARNING in kvm_put_kvm testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 18] detailed listing: executing program 0: openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)={0x2c, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd}, @nested={0xc, 0x1a, 0x0, 0x1, [@nested={0x8, 0x0, 0x0, 0x1, [@nested={0x4, 0x136}]}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x80c0}, 0x4080) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r3, 0x8}) (async) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100033060000000000000000fe800000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x78, 0x0, &(0x7f0000000600)=[@dead_binder_done, @acquire_done={0x40106309, 0x2}, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) program crashed: WARNING in kvm_put_kvm testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 18] detailed listing: executing program 0: openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r2, 0x8}) (async) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100033060000000000000000fe800000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x78, 0x0, &(0x7f0000000600)=[@dead_binder_done, @acquire_done={0x40106309, 0x2}, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) program crashed: WARNING in kvm_put_kvm testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 18] detailed listing: executing program 0: openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r2, 0x8}) (async) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100033060000000000000000fe800000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x78, 0x0, &(0x7f0000000600)=[@dead_binder_done, @acquire_done={0x40106309, 0x2}, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) program crashed: WARNING in kvm_put_kvm testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 18] detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r2, 0x8}) (async) executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100033060000000000000000fe800000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x78, 0x0, &(0x7f0000000600)=[@dead_binder_done, @acquire_done={0x40106309, 0x2}, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) program crashed: WARNING in kvm_put_kvm minimized 13 calls -> 5 calls minimizing program #1 before concatenation testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 17] detailed listing: executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r2, 0x8}) (async) executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100033060000000000000000fe800000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x78, 0x0, &(0x7f0000000600)=[@dead_binder_done, @acquire_done={0x40106309, 0x2}, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) program crashed: WARNING in kvm_put_kvm testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 16] detailed listing: executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r2, 0x8}) (async) executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100033060000000000000000fe800000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) program crashed: WARNING in kvm_put_kvm testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 15] detailed listing: executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r2, 0x8}) (async) executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100033060000000000000000fe800000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) program crashed: WARNING in kvm_put_kvm testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14] detailed listing: executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r2, 0x8}) (async) executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100033060000000000000000fe800000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) program crashed: WARNING in kvm_put_kvm testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 13] detailed listing: executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r2, 0x8}) (async) executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100033060000000000000000fe800000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) socket$inet6_tcp(0xa, 0x1, 0x0) program crashed: WARNING in kvm_put_kvm testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 12] detailed listing: executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r2, 0x8}) (async) executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100033060000000000000000fe800000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) program crashed: WARNING in kvm_put_kvm testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 11] detailed listing: executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r2, 0x8}) (async) executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100033060000000000000000fe800000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) program crashed: WARNING in kvm_put_kvm testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 10] detailed listing: executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r2, 0x8}) (async) executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100033060000000000000000fe800000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) program crashed: WARNING in kvm_put_kvm testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 9] detailed listing: executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r2, 0x8}) (async) executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100033060000000000000000fe800000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) program crashed: WARNING in kvm_put_kvm testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 8] detailed listing: executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r2, 0x8}) (async) executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(0x0, 0x0) program crashed: WARNING in kvm_put_kvm testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 7] detailed listing: executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r2, 0x8}) (async) executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) program crashed: WARNING in kvm_put_kvm testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 6] detailed listing: executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r2, 0x8}) (async) executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x2) program crashed: WARNING in kvm_put_kvm testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5] detailed listing: executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r2, 0x8}) (async) executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x7) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5] detailed listing: executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r2, 0x8}) (async) executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0x2) program crashed: WARNING in kvm_put_kvm testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 4] detailed listing: executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r2, 0x8}) (async) executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) ftruncate(0xffffffffffffffff, 0x2) program crashed: WARNING in kvm_put_kvm testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 3] detailed listing: executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r2, 0x8}) (async) executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ftruncate(0xffffffffffffffff, 0x2) program crashed: WARNING in kvm_put_kvm testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 2] detailed listing: executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r2, 0x8}) (async) executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2) program crashed: WARNING in kvm_put_kvm testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 1] detailed listing: executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r2, 0x8}) (async) executing program 0: ftruncate(0xffffffffffffffff, 0x2) program crashed: WARNING in kvm_put_kvm minimized 18 calls -> 1 calls testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-ioctl$KVM_IOEVENTFD-ftruncate detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r2, 0x8}) (async) ftruncate(0xffffffffffffffff, 0x2) program crashed: WARNING in kvm_put_kvm bisect: concatenation succeeded found reproducer with 6 syscalls minimizing guilty program testing program (duration=49.462491376s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-ioctl$KVM_IOEVENTFD detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r2, 0x8}) (async) program crashed: WARNING in kvm_put_kvm testing program (duration=49.462491376s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) program did not crash testing program (duration=49.462491376s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_IOEVENTFD detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r2, 0x8}) (async) program did not crash testing program (duration=49.462491376s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_HYPERV_EVENTFD-ioctl$KVM_IOEVENTFD detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, 0xffffffffffffffff, 0x8}) (async) program did not crash testing program (duration=49.462491376s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-eventfd2-ioctl$KVM_HYPERV_EVENTFD-ioctl$KVM_IOEVENTFD detailed listing: executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r0, 0x8}) (async) program did not crash testing program (duration=49.462491376s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-ioctl$KVM_IOEVENTFD detailed listing: executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r1, 0x8}) (async) program did not crash testing program (duration=49.462491376s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-ioctl$KVM_IOEVENTFD detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r2, 0x8}) program crashed: WARNING in kvm_put_kvm testing program (duration=49.462491376s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-ioctl$KVM_IOEVENTFD detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r2, 0x8}) program did not crash testing program (duration=49.462491376s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-ioctl$KVM_IOEVENTFD detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=49.462491376s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-ioctl$KVM_IOEVENTFD program crashed: WARNING in kvm_put_kvm simplifying C reproducer testing compiled C program (duration=49.462491376s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-ioctl$KVM_IOEVENTFD program crashed: WARNING in kvm_put_kvm testing compiled C program (duration=49.462491376s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-ioctl$KVM_IOEVENTFD program did not crash testing compiled C program (duration=49.462491376s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-ioctl$KVM_IOEVENTFD program crashed: WARNING in kvm_put_kvm testing compiled C program (duration=49.462491376s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-ioctl$KVM_IOEVENTFD program crashed: WARNING in kvm_put_kvm testing compiled C program (duration=49.462491376s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-ioctl$KVM_IOEVENTFD program crashed: WARNING in kvm_put_kvm testing compiled C program (duration=49.462491376s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-ioctl$KVM_IOEVENTFD program crashed: WARNING in kvm_put_kvm testing compiled C program (duration=49.462491376s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-ioctl$KVM_IOEVENTFD program crashed: WARNING in kvm_put_kvm testing program (duration=49.462491376s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-ioctl$KVM_IOEVENTFD detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r2, 0x8}) program crashed: WARNING in kvm_put_kvm validation run: crashed=true testing program (duration=49.462491376s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-ioctl$KVM_IOEVENTFD detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r2, 0x8}) program crashed: WARNING in kvm_put_kvm validation run: crashed=true testing program (duration=49.462491376s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-ioctl$KVM_IOEVENTFD detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r2, 0x8}) program crashed: WARNING in kvm_put_kvm validation run: crashed=true reproducing took 3h28m35.001289259s repro crashed as (corrupted=false): ------------[ cut here ]------------ WARNING: CPU: 0 PID: 419 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 kernel/rcu/srcutree.c:687 Modules linked in: CPU: 0 UID: 0 PID: 419 Comm: syz.2.55 Not tainted 6.12.38-syzkaller-g3f3a5c5e782d #0 c9247809a66a5ebb3467d1c2e99b1dedbd707993 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 kernel/rcu/srcutree.c:664 Code: 00 48 8b 5d a0 74 08 48 89 df e8 12 43 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 RSP: 0018:ffffc9000112fc88 EFLAGS: 00010202 RAX: 1ffffd1ffff812aa RBX: ffffc90003e0a8e8 RCX: ffffffff816dc249 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc09550 RBP: ffffc9000112fcf0 R08: ffffe8ffffc09557 R09: 1ffffd1ffff812aa R10: dffffc0000000000 R11: fffff91ffff812ab R12: dffffc0000000000 R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc09550 FS: 000055559153a500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 0000000111248000 CR4: 00000000003526b0 Call Trace: kvm_destroy_vm virt/kvm/kvm_main.c:1362 [inline] kvm_put_kvm+0x1100/0x12b0 virt/kvm/kvm_main.c:1391 kvm_vm_release+0x47/0x70 virt/kvm/kvm_main.c:1414 __fput+0x1fb/0xa00 fs/file_table.c:429 ____fput+0x20/0x30 fs/file_table.c:457 task_work_run+0x1e0/0x250 kernel/task_work.c:240 resume_user_mode_work+0x36/0x50 include/linux/resume_user_mode.h:50 exit_to_user_mode_loop kernel/entry/common.c:114 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x64/0xb0 kernel/entry/common.c:218 do_syscall_64+0x64/0xf0 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f3bab18ebe9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffd278bf918 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 RAX: 0000000000000000 RBX: 00000000000093cb RCX: 00007f3bab18ebe9 RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 RBP: 0000000000000000 R08: 0000000000000001 R09: 00000005278bfc0f R10: 0000001b33020000 R11: 0000000000000246 R12: 00007f3bab3b5fac R13: 00007f3bab3b5fa0 R14: ffffffffffffffff R15: 0000000000000003 ---[ end trace 0000000000000000 ]--- final repro crashed as (corrupted=false): ------------[ cut here ]------------ WARNING: CPU: 0 PID: 419 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 kernel/rcu/srcutree.c:687 Modules linked in: CPU: 0 UID: 0 PID: 419 Comm: syz.2.55 Not tainted 6.12.38-syzkaller-g3f3a5c5e782d #0 c9247809a66a5ebb3467d1c2e99b1dedbd707993 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 kernel/rcu/srcutree.c:664 Code: 00 48 8b 5d a0 74 08 48 89 df e8 12 43 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 RSP: 0018:ffffc9000112fc88 EFLAGS: 00010202 RAX: 1ffffd1ffff812aa RBX: ffffc90003e0a8e8 RCX: ffffffff816dc249 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc09550 RBP: ffffc9000112fcf0 R08: ffffe8ffffc09557 R09: 1ffffd1ffff812aa R10: dffffc0000000000 R11: fffff91ffff812ab R12: dffffc0000000000 R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc09550 FS: 000055559153a500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 0000000111248000 CR4: 00000000003526b0 Call Trace: kvm_destroy_vm virt/kvm/kvm_main.c:1362 [inline] kvm_put_kvm+0x1100/0x12b0 virt/kvm/kvm_main.c:1391 kvm_vm_release+0x47/0x70 virt/kvm/kvm_main.c:1414 __fput+0x1fb/0xa00 fs/file_table.c:429 ____fput+0x20/0x30 fs/file_table.c:457 task_work_run+0x1e0/0x250 kernel/task_work.c:240 resume_user_mode_work+0x36/0x50 include/linux/resume_user_mode.h:50 exit_to_user_mode_loop kernel/entry/common.c:114 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x64/0xb0 kernel/entry/common.c:218 do_syscall_64+0x64/0xf0 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f3bab18ebe9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffd278bf918 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 RAX: 0000000000000000 RBX: 00000000000093cb RCX: 00007f3bab18ebe9 RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 RBP: 0000000000000000 R08: 0000000000000001 R09: 00000005278bfc0f R10: 0000001b33020000 R11: 0000000000000246 R12: 00007f3bab3b5fac R13: 00007f3bab3b5fa0 R14: ffffffffffffffff R15: 0000000000000003 ---[ end trace 0000000000000000 ]---