][T13914] do_fast_syscall_32+0x33/0x70 07:58:58 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x8933, 0x0) [ 1236.730997][T13914] entry_SYSENTER_compat_after_hwframe+0x70/0x7a [ 1236.733413][T13914] RIP: 0023:0xf7fdc579 [ 1236.734897][T13914] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1236.742080][T13914] RSP: 002b:00000000f7fd75e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1236.745050][T13914] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f7fd7670 [ 1236.747874][T13914] RDX: 000000000000000f RSI: 00000000f7353ff4 RDI: 0000000000000000 [ 1236.750731][T13914] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1236.753552][T13914] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1236.756375][T13914] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1236.759182][T13914] 07:58:58 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae00, 0x0) 07:58:58 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x21, 0x70bd28, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x24008054}, 0x840) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x290, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x6, 0x1}, 0x20) (async) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x290, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x6, 0x1}, 0x20) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x800}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x800}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 07:58:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) 07:58:58 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4018, r0}, 0x14) 07:58:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) 07:58:58 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}}, 0x4000) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:58:58 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:58:58 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4018, r0}, 0x14) 07:58:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x2) 07:58:58 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4018, r0}, 0x14) 07:58:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x4) 07:58:58 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x101000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000040)={0x0, 0x1, 0x3, 0x3f, @vifc_lcl_ifindex=r4, @multicast2}, 0x10) r5 = openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x101002, 0x0) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x2, 0x2}, 0x4) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 07:58:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x7) 07:58:58 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}}, 0x4000) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:58:58 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x0) 07:58:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x700) 07:58:58 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae04, 0x0) 07:58:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x3f00) 07:58:59 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae07, 0x0) 07:58:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x1000000) 07:58:59 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae08, 0x0) 07:58:59 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}}, 0x4000) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:58:59 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) (async) write$eventfd(r3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) (async) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000040)={0x0, 0x1, 0x3, 0x3f, @vifc_lcl_ifindex=r4, @multicast2}, 0x10) r5 = openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x101002, 0x0) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x2, 0x2}, 0x4) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 07:58:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x2000000) 07:58:59 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x400448c9, 0x0) 07:58:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x4000000) 07:58:59 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x400448dd, 0x0) 07:58:59 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x400454ca, 0x0) 07:58:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x7000000) 07:58:59 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000040}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x178, 0x1403, 0x200, 0x70bd2c, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dvmrp0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x178}}, 0x800) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:58:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x3f000000) 07:58:59 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x40046602, 0x0) 07:58:59 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000040}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x178, 0x1403, 0x200, 0x70bd2c, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dvmrp0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x178}}, 0x800) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000040}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x178, 0x1403, 0x200, 0x70bd2c, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dvmrp0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x178}}, 0x800) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) 07:58:59 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) (async) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000040)={0x0, 0x1, 0x3, 0x3f, @vifc_lcl_ifindex=r4, @multicast2}, 0x10) (async) r5 = openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x101002, 0x0) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x2, 0x2}, 0x4) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 07:58:59 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x40049409, 0x0) 07:58:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x79c5fdf7) 07:58:59 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x40086602, 0x0) 07:58:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0xf7fdc579) 07:58:59 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x4008ae06, 0x0) 07:58:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0xfeffffff) 07:58:59 executing program 0: sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1412, 0x100, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x480c1) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:58:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0xfffffffe) 07:58:59 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x40186366, 0x0) 07:58:59 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000040}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x178, 0x1403, 0x200, 0x70bd2c, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dvmrp0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x178}}, 0x800) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:58:59 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x4018aee2, 0x0) 07:58:59 executing program 3: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48004}, 0x8000004) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) 07:58:59 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x4018aee3, 0x0) 07:58:59 executing program 3: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48004}, 0x8000004) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) 07:58:59 executing program 0: sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1412, 0x100, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x480c1) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:58:59 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x401c5820, 0x0) 07:58:59 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:58:59 executing program 3: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48004}, 0x8000004) (async, rerun: 64) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) accept4$packet(r0, 0x0, 0x0, 0x0) 07:58:59 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x4020940d, 0x0) 07:58:59 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x402c5828, 0x0) 07:58:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$audio1(0xffffff9c, &(0x7f0000000100), 0x248000, 0x0) write$eventfd(r3, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000000c0)=r3, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x7800, 0x20, 0x200, 0x2, {{0x11, 0x4, 0x0, 0x6, 0x44, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast1, @multicast2, {[@timestamp={0x44, 0x1c, 0xc3, 0x0, 0x8, [0x3, 0x4, 0xffffffff, 0x3f, 0x1f, 0x0]}, @timestamp_prespec={0x44, 0x14, 0x16, 0x3, 0x8, [{@empty, 0x5}, {@local, 0x9}]}]}}}}}) 07:58:59 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x402c5829, 0x0) 07:58:59 executing program 0: sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1412, 0x100, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x480c1) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1412, 0x100, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x480c1) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) 07:58:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$audio1(0xffffff9c, &(0x7f0000000100), 0x248000, 0x0) write$eventfd(r3, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000000c0)=r3, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x7800, 0x20, 0x200, 0x2, {{0x11, 0x4, 0x0, 0x6, 0x44, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast1, @multicast2, {[@timestamp={0x44, 0x1c, 0xc3, 0x0, 0x8, [0x3, 0x4, 0xffffffff, 0x3f, 0x1f, 0x0]}, @timestamp_prespec={0x44, 0x14, 0x16, 0x3, 0x8, [{@empty, 0x5}, {@local, 0x9}]}]}}}}}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) accept4$packet(r0, 0x0, 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r1, 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r2, 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) openat$audio1(0xffffff9c, &(0x7f0000000100), 0x248000, 0x0) (async) write$eventfd(r3, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000000c0)=r3, 0x1) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x7800, 0x20, 0x200, 0x2, {{0x11, 0x4, 0x0, 0x6, 0x44, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast1, @multicast2, {[@timestamp={0x44, 0x1c, 0xc3, 0x0, 0x8, [0x3, 0x4, 0xffffffff, 0x3f, 0x1f, 0x0]}, @timestamp_prespec={0x44, 0x14, 0x16, 0x3, 0x8, [{@empty, 0x5}, {@local, 0x9}]}]}}}}}) (async) 07:58:59 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x402c582a, 0x0) 07:58:59 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:58:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$audio1(0xffffff9c, &(0x7f0000000100), 0x248000, 0x0) write$eventfd(r3, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000000c0)=r3, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x7800, 0x20, 0x200, 0x2, {{0x11, 0x4, 0x0, 0x6, 0x44, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast1, @multicast2, {[@timestamp={0x44, 0x1c, 0xc3, 0x0, 0x8, [0x3, 0x4, 0xffffffff, 0x3f, 0x1f, 0x0]}, @timestamp_prespec={0x44, 0x14, 0x16, 0x3, 0x8, [{@empty, 0x5}, {@local, 0x9}]}]}}}}}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) accept4$packet(r0, 0x0, 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r1, 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r2, 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) openat$audio1(0xffffff9c, &(0x7f0000000100), 0x248000, 0x0) (async) write$eventfd(r3, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000000c0)=r3, 0x1) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x7800, 0x20, 0x200, 0x2, {{0x11, 0x4, 0x0, 0x6, 0x44, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast1, @multicast2, {[@timestamp={0x44, 0x1c, 0xc3, 0x0, 0x8, [0x3, 0x4, 0xffffffff, 0x3f, 0x1f, 0x0]}, @timestamp_prespec={0x44, 0x14, 0x16, 0x3, 0x8, [{@empty, 0x5}, {@local, 0x9}]}]}}}}}) (async) 07:58:59 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x402c582b, 0x0) 07:58:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1411, 0x300, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}]}, 0xffffffffffffff32}, 0x1, 0x0, 0x0, 0x4e005}, 0xc4) accept4$packet(r0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x1410, 0x10, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) 07:58:59 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x402c5839, 0x0) 07:59:00 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x80046601, 0x0) 07:59:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1411, 0x300, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}]}, 0xffffffffffffff32}, 0x1, 0x0, 0x0, 0x4e005}, 0xc4) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1411, 0x300, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}]}, 0xffffffffffffff32}, 0x1, 0x0, 0x0, 0x4e005}, 0xc4) accept4$packet(r0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x1410, 0x10, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) 07:59:00 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:00 executing program 0: write$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x1c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000126bd7010fcdbdf251200000008080001000000f33be00deba9621000", @ANYRES32=r3, @ANYBLOB="08000900fb26000008000600ff0300000c0001800800030001000000"], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x840) r4 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 07:59:00 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x80086301, 0x0) 07:59:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1411, 0x300, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}]}, 0xffffffffffffff32}, 0x1, 0x0, 0x0, 0x4e005}, 0xc4) accept4$packet(r0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x1410, 0x10, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1411, 0x300, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}]}, 0xffffffffffffff32}, 0x1, 0x0, 0x0, 0x4e005}, 0xc4) (async) accept4$packet(r0, 0x0, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x1410, 0x10, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) (async) 07:59:00 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x80086601, 0x0) 07:59:00 executing program 3: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x4c80, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote, r2}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1e6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0xc0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r5, 0x0, 0x0, 0x0) 07:59:00 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2100c3, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:00 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x8008ae9d, 0x0) 07:59:00 executing program 3: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x4c80, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote, r2}, 0x14) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1e6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0xc0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r5, 0x0, 0x0, 0x0) 07:59:00 executing program 0: write$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x1c}}, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000126bd7010fcdbdf251200000008080001000000f33be00deba9621000", @ANYRES32=r3, @ANYBLOB="08000900fb26000008000600ff0300000c0001800800030001000000"], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x840) (async) r4 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 07:59:00 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x801c581f, 0x0) 07:59:00 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2100c3, 0x0) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2100c3, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:00 executing program 3: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x4c80, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote, r2}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1e6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0xc0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r5, 0x0, 0x0, 0x0) 07:59:00 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc0045878, 0x0) 07:59:00 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2100c3, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept4$packet(r0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) getpeername$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r3, 0x29, 0x80, 0x40, 0x0, 0x0, @empty, @rand_addr=' \x01\x00', 0x8000, 0x20, 0x7, 0x1}}) r6 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r7 = openat$hwrng(0xffffff9c, &(0x7f0000000280), 0x80000, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r9, 0x1}, 0x14}}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = openat$hwrng(0xffffff9c, &(0x7f00000003c0), 0x4000, 0x0) getsockopt$PNPIPE_HANDLE(r11, 0x113, 0x3, &(0x7f0000000400), &(0x7f0000000440)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000080)={@remote, r12}, 0x14) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r9, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfa0b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x2004c810) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) write$eventfd(r6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x0, 0x1, 0x8, 0x100, 0xffffffffffffffff, 0x8, '\x00', r5, r6, 0x1, 0x1, 0x0, 0xb}, 0x48) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @local}, r4}, 0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @remote}, 0x10) 07:59:00 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc0045878, 0x0) 07:59:00 executing program 0: write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x1c}}, 0x0) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) (async, rerun: 64) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000126bd7010fcdbdf251200000008080001000000f33be00deba9621000", @ANYRES32=r3, @ANYBLOB="08000900fb26000008000600ff0300000c0001800800030001000000"], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x840) (rerun: 64) r4 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 07:59:00 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x98, r0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept4$packet(r0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) getpeername$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r3, 0x29, 0x80, 0x40, 0x0, 0x0, @empty, @rand_addr=' \x01\x00', 0x8000, 0x20, 0x7, 0x1}}) (async) r6 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r7 = openat$hwrng(0xffffff9c, &(0x7f0000000280), 0x80000, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r9, 0x1}, 0x14}}, 0x0) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r11 = openat$hwrng(0xffffff9c, &(0x7f00000003c0), 0x4000, 0x0) getsockopt$PNPIPE_HANDLE(r11, 0x113, 0x3, &(0x7f0000000400), &(0x7f0000000440)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000080)={@remote, r12}, 0x14) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r9, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfa0b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x2004c810) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) write$eventfd(r6, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x0, 0x1, 0x8, 0x100, 0xffffffffffffffff, 0x8, '\x00', r5, r6, 0x1, 0x1, 0x0, 0xb}, 0x48) (async) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @local}, r4}, 0x14) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @remote}, 0x10) 07:59:00 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc004ae02, 0x0) 07:59:00 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc004ae0a, 0x0) 07:59:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept4$packet(r0, 0x0, 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) getpeername$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r3, 0x29, 0x80, 0x40, 0x0, 0x0, @empty, @rand_addr=' \x01\x00', 0x8000, 0x20, 0x7, 0x1}}) r6 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r7 = openat$hwrng(0xffffff9c, &(0x7f0000000280), 0x80000, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r9, 0x1}, 0x14}}, 0x0) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = openat$hwrng(0xffffff9c, &(0x7f00000003c0), 0x4000, 0x0) getsockopt$PNPIPE_HANDLE(r11, 0x113, 0x3, &(0x7f0000000400), &(0x7f0000000440)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000080)={@remote, r12}, 0x14) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r9, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfa0b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x2004c810) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) write$eventfd(r6, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x0, 0x1, 0x8, 0x100, 0xffffffffffffffff, 0x8, '\x00', r5, r6, 0x1, 0x1, 0x0, 0xb}, 0x48) (async) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @local}, r4}, 0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @remote}, 0x10) 07:59:00 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc008ae05, 0x0) [ 1238.454699][ T1345] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.457621][ T1345] ieee802154 phy1 wpan1: encryption failed: -22 07:59:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 07:59:00 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:00 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc008ae09, 0x0) 07:59:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 07:59:00 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x98, r0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) (async) accept4$packet(r0, 0x0, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 07:59:00 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc008ae88, 0x0) 07:59:00 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x101}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x20, 0x20, 0x400, 0x80000001, {{0x38, 0x4, 0x2, 0x8, 0xe0, 0x67, 0x0, 0x54, 0x4, 0x0, @private=0xa010100, @multicast1, {[@end, @lsrr={0x83, 0xb, 0x56, [@local, @remote]}, @timestamp_prespec={0x44, 0x54, 0x5a, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x26}, 0x7f}, {@broadcast, 0x3ff}, {@loopback, 0x10001}, {@local, 0x3add}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x800}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x5}, {@multicast2, 0x800}, {@remote}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x727872df}]}, @ssrr={0x89, 0x2b, 0x9d, [@remote, @empty, @multicast1, @empty, @remote, @rand_addr=0x2, @rand_addr=0x64010101, @local, @dev={0xac, 0x14, 0x14, 0x3c}, @loopback]}, @timestamp={0x44, 0x28, 0x1b, 0x0, 0xd, [0x3, 0xaa2e, 0x14f, 0x31cb, 0x7, 0x1, 0x7, 0x5, 0x7]}, @timestamp={0x44, 0xc, 0x3f, 0x0, 0x1, [0x2, 0x2]}, @lsrr={0x83, 0xb, 0x23, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000340)=""/234, &(0x7f0000000440)=0xea) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r2, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000084) sendto$packet(r0, &(0x7f0000000000)="b2a8779251f145c2f3c110bc661ef5375d475cf94861ec1ca70113fd8f4fda27676e8f8255", 0x25, 0x800, &(0x7f0000000040)={0x11, 0x6, 0x0, 0x1, 0x80, 0x6, @broadcast}, 0x14) 07:59:00 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc008aec1, 0x0) 07:59:00 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc0189436, 0x0) 07:59:00 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async, rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) (rerun: 32) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:00 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x98, r0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x804}, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r1 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:00 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r0 = accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) (rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) (rerun: 32) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x101}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x20, 0x20, 0x400, 0x80000001, {{0x38, 0x4, 0x2, 0x8, 0xe0, 0x67, 0x0, 0x54, 0x4, 0x0, @private=0xa010100, @multicast1, {[@end, @lsrr={0x83, 0xb, 0x56, [@local, @remote]}, @timestamp_prespec={0x44, 0x54, 0x5a, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x26}, 0x7f}, {@broadcast, 0x3ff}, {@loopback, 0x10001}, {@local, 0x3add}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x800}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x5}, {@multicast2, 0x800}, {@remote}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x727872df}]}, @ssrr={0x89, 0x2b, 0x9d, [@remote, @empty, @multicast1, @empty, @remote, @rand_addr=0x2, @rand_addr=0x64010101, @local, @dev={0xac, 0x14, 0x14, 0x3c}, @loopback]}, @timestamp={0x44, 0x28, 0x1b, 0x0, 0xd, [0x3, 0xaa2e, 0x14f, 0x31cb, 0x7, 0x1, 0x7, 0x5, 0x7]}, @timestamp={0x44, 0xc, 0x3f, 0x0, 0x1, [0x2, 0x2]}, @lsrr={0x83, 0xb, 0x23, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) (async) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000340)=""/234, &(0x7f0000000440)=0xea) (async) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) (async) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r2, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000084) (async) sendto$packet(r0, &(0x7f0000000000)="b2a8779251f145c2f3c110bc661ef5375d475cf94861ec1ca70113fd8f4fda27676e8f8255", 0x25, 0x800, &(0x7f0000000040)={0x11, 0x6, 0x0, 0x1, 0x80, 0x6, @broadcast}, 0x14) 07:59:00 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc020660b, 0x0) 07:59:00 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:00 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r0 = accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x101}, 0x14}}, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x20, 0x20, 0x400, 0x80000001, {{0x38, 0x4, 0x2, 0x8, 0xe0, 0x67, 0x0, 0x54, 0x4, 0x0, @private=0xa010100, @multicast1, {[@end, @lsrr={0x83, 0xb, 0x56, [@local, @remote]}, @timestamp_prespec={0x44, 0x54, 0x5a, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x26}, 0x7f}, {@broadcast, 0x3ff}, {@loopback, 0x10001}, {@local, 0x3add}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x800}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x5}, {@multicast2, 0x800}, {@remote}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x727872df}]}, @ssrr={0x89, 0x2b, 0x9d, [@remote, @empty, @multicast1, @empty, @remote, @rand_addr=0x2, @rand_addr=0x64010101, @local, @dev={0xac, 0x14, 0x14, 0x3c}, @loopback]}, @timestamp={0x44, 0x28, 0x1b, 0x0, 0xd, [0x3, 0xaa2e, 0x14f, 0x31cb, 0x7, 0x1, 0x7, 0x5, 0x7]}, @timestamp={0x44, 0xc, 0x3f, 0x0, 0x1, [0x2, 0x2]}, @lsrr={0x83, 0xb, 0x23, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) (async, rerun: 32) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000340)=""/234, &(0x7f0000000440)=0xea) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r2, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000084) (async, rerun: 32) sendto$packet(r0, &(0x7f0000000000)="b2a8779251f145c2f3c110bc661ef5375d475cf94861ec1ca70113fd8f4fda27676e8f8255", 0x25, 0x800, &(0x7f0000000040)={0x11, 0x6, 0x0, 0x1, 0x80, 0x6, @broadcast}, 0x14) (rerun: 32) 07:59:00 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20002080}, 0x4000800) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:00 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x2) 07:59:00 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20002080}, 0x4000800) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:00 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r1, 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) 07:59:00 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x3) 07:59:00 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20002080}, 0x4000800) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x80c00) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 07:59:00 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x80c00) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 07:59:00 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x4) 07:59:00 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x5) 07:59:01 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x243, 0x0) r1 = openat$cgroup_root(0xffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f0000000140), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}}, 0x4015) r4 = getpid() syz_open_procfs$pagemap(r4, 0x0) syz_open_procfs$namespace(r4, &(0x7f0000000080)='ns/pid_for_children\x00') ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x1000, "5808d7a481008c14a5484eb7713cb30dfc189fa3dc23326330db651aa10a11fe"}) connect$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0xfffffff9, @private2, 0x8, 0x1}, 0x20) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x80c00) (async, rerun: 32) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (rerun: 32) write$eventfd(r1, 0x0, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 07:59:01 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x6) 07:59:01 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:01 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) socket(0x2c, 0x5, 0x10000) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) accept4$packet(r1, 0x0, 0x0, 0x80000) 07:59:01 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x7) 07:59:01 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) socket(0x2c, 0x5, 0x10000) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) write$eventfd(r1, 0x0, 0x0) accept4$packet(r1, 0x0, 0x0, 0x80000) 07:59:01 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x300) 07:59:01 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x500) 07:59:01 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 64) write$eventfd(r0, 0x0, 0x0) socket(0x2c, 0x5, 0x10000) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) accept4$packet(r1, 0x0, 0x0, 0x80000) 07:59:01 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x243, 0x0) (async) r1 = openat$cgroup_root(0xffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f0000000140), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}}, 0x4015) (async, rerun: 64) r4 = getpid() (rerun: 64) syz_open_procfs$pagemap(r4, 0x0) (async) syz_open_procfs$namespace(r4, &(0x7f0000000080)='ns/pid_for_children\x00') (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x1000, "5808d7a481008c14a5484eb7713cb30dfc189fa3dc23326330db651aa10a11fe"}) (async) connect$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0xfffffff9, @private2, 0x8, 0x1}, 0x20) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:01 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) accept4$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) 07:59:01 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x600) 07:59:01 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x243, 0x0) (async) r1 = openat$cgroup_root(0xffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f0000000140), 0x2, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}}, 0x4015) (async, rerun: 64) r4 = getpid() (rerun: 64) syz_open_procfs$pagemap(r4, 0x0) syz_open_procfs$namespace(r4, &(0x7f0000000080)='ns/pid_for_children\x00') (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x1000, "5808d7a481008c14a5484eb7713cb30dfc189fa3dc23326330db651aa10a11fe"}) (async) connect$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0xfffffff9, @private2, 0x8, 0x1}, 0x20) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:01 executing program 3: r0 = openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001580)={0x100, 0x0, &(0x7f0000000480)=[@dead_binder_done, @release={0x40046306, 0x3}, @enter_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x4, 0x1, 0x30}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/228, 0xe4, 0x2, 0x34}, @flat=@weak_handle={0x77682a85, 0x100}}, &(0x7f00000001c0)={0x0, 0x1c, 0x44}}, 0x40}, @free_buffer, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x20b}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/216, 0xd8, 0x1, 0x33}, @flat=@weak_handle={0x77682a85, 0xa, 0x3}}, &(0x7f0000000380)={0x0, 0x18, 0x40}}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="00000000000000000000000085616466020000000000000002000000000000002c00000000000000852a646600000000", @ANYRES32, @ANYBLOB="00069200e25850ab745218ff00000000"], &(0x7f0000000440)={0x0, 0x18, 0x34}}, 0x1400}], 0x1000, 0x0, &(0x7f0000000580)="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"}) eventfd(0x5) r1 = openat$hwrng(0xffffff9c, &(0x7f0000001600), 0x16000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001640)={0x73622a85, 0x10a, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r2, 0x0, 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f00000015c0)) r3 = eventfd2(0x0, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000001680)=r3, 0x1) 07:59:01 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x700) 07:59:01 executing program 3: r0 = openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001580)={0x100, 0x0, &(0x7f0000000480)=[@dead_binder_done, @release={0x40046306, 0x3}, @enter_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x4, 0x1, 0x30}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/228, 0xe4, 0x2, 0x34}, @flat=@weak_handle={0x77682a85, 0x100}}, &(0x7f00000001c0)={0x0, 0x1c, 0x44}}, 0x40}, @free_buffer, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x20b}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/216, 0xd8, 0x1, 0x33}, @flat=@weak_handle={0x77682a85, 0xa, 0x3}}, &(0x7f0000000380)={0x0, 0x18, 0x40}}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="00000000000000000000000085616466020000000000000002000000000000002c00000000000000852a646600000000", @ANYRES32, @ANYBLOB="00069200e25850ab745218ff00000000"], &(0x7f0000000440)={0x0, 0x18, 0x34}}, 0x1400}], 0x1000, 0x0, &(0x7f0000000580)="a06e08a548e3f594a0e83afb49529700fdc32f9f40343e090238864e0b4ed1c9ef9b7501a0bc9865f00d27f3b096bb7089f1cb6a23a9908f94b0a296ca607d283fcc451bb6b30403ef4f696588fa6fae4b674a10b95874e8b164371360238fe95b189fc6db247e2fccc23deae32d73272c3ff5715268f721e536c99b8ce742b1ce805c42b099b0f79e1876f8a3d5abdbea0cdee226f29e253e3fee300e2a54cd15274573a2598d78610e1c9597369df9e97b898d17318b2af9c0be841769379e4652bf6aafb1d50eaa4a9626b4ad59eb4077507ca6d1de0e871d1e197487f4261a7b28658d4890f832945c099adf242080b52af38604c4a0690b8c132ca67fde6e5b4bc79d6ebd1501b99b32b80c09a1445e5148dc9db126f48ce2d5ecfb5c4a2d4f1545e16d435b42ad83aa4f306b9b7490ac769694296a5d9fb27c5ec632d680039548188b30dfad12772a44194a5b07ad325f3e4548f16bb4b1922a67964efc0511b339058dc2696d0f86dcbecca88e0d915408cd67f92b0706ce1dbfd528385505319c2a3ac205d42f6b998982cae6f2ddbf25a38ee951da9703ed6e2af4d291bf76f3815c508fba5ce5a7b71d39ef46aaac21fede945387b22fb1c4f43b1e8ade9cebf1a1569af621af13d9ea752754dcbf8924f3b3acd1f046eb508422c3e8909470f04e5c06608a90211a802af1fca3e25e3e8ac25ce6d072b9694d723e8d932b1992182cd73528c59953a9209f6fcfd97830e864c019ec90b201d1a992e91970fe41529d481ae1c4c224bf7fe7fb2fe95c05632d764726b65765f866d264ea6473df3a8580f7c745492b4d2e1371887ddc7fbb859c021c86ceaa1eebca10527b4233d9e9d9a6affae4c16894122ca552e8780e8ffbefbb1bd4ad87bb44030e3111a133570752fbb665d92f5f1a04c029da2cb9cf72a86af9cc16b1c1962b0d93732aa77d38bb401ffd5d1c755c1da178ce686a0db5c6cdbd0937a078528f0c85d09f2dab579171965d25ec207b14fc3104e313868d6391ad97568ab9f683968d58391b91cb22ca941b972c6f2ea1cbb7860e158d9cf59098bb76e896523770463cebb6ecd1787c67a9566337eec81bab5ca5bd11ec96b93f2fd1f2ef735eda7f8b4d3f92ae5740a13d0ced1220e365c041dc50d9ba6633554cb64adafa0f60bd32ecfe95c2d351c1967b85781bfd5770683780a3910d0af4ecc90abc8a5e3926ec9a95bd3e3835d492d84c62491b592f19f359cd76bc7b9bf5410c95e3277186bf2cd3513d7f9a0a4b4048fc4bf179a4c53a0c91f7bacf597c97b0b062b04dd9b40b0c67e2e9d3af131672b96fc98a4cd9bb1b1332ea4d6b8794ab197b6dd0db7d5c2ad37ac44da97bd5df2e86e3e41553389859b25d5f8f55324d24768145985b3fa5195bbccf2a371a2170abd343bb30e7236d6c6225b702468cff00ed18be38e25fa547f8db3850d8afd7dcfce391441a7f0a7384a72d2c9d9281c1cd64079dfdfb57080d45cd191a4719434f1d63a37e00eb649f9d2bf1c22eb1fbb177d5b09039573a44f75570cce13cd69ef2befbbdaf5a7c92450a2be3eec406af287103806357d8b9d3a44796eaa92b5a37b157d4fe55d72bc8e7d66481de4b638b57716b90a2e857813ec0b5c0f3911311ce8b23594a996435f17044a61b603655ed84ffc08d88beff1985cac6c321eb2e29587090a96afe70a15931023ccac145cc80b3a5f5b9e1e4312cef29bd4520c0b9538cec26c336e02257029124329415f5b78690a0abad14c5688491682936aa1fc5150f18c2c5b59b41e9dbb89cb967b6e6d7655c28ad8223151fbce81ca266e627a3f0146c15b6e56ff0510266e982b43072c5d69ce41a045218bd0e95bdff69eab18488ba99bbdc24a3d33d9ddadc769dbf10cc0e2e34b9c31e315d53c669fee4c61dd54dcbdcb3cb5963337347e42eaab2a981d3f8f9ee618e1bdc8d225b8516c09250ed92f9027639855d0806d9c2ff9666adac17cc06f4c476a2c1b123cd34c2454a091cadcdf40b8fbb03f1d043ba8ab81c1dea25cc6df5bcc218b7a7bd2504a3529a93b2ece2908651215b111ac3ed2dcfe19fd3027aa5934b5724f15fbfd9811bb2357dda7239840de5b7a67fe527dd29a55e412c629fffdd15ac39da30c317875a7a07915d1834f419760f5e2bd27cf1029575c9b2b3a34b812605407202ea9746751809b8c0383756ed7de44252766ad9b9bf31bb4f1fd7e54bffd5edc9cb7834fb736f37a03d338fda565aa990cadf458ac4f2f645147f11e1960d5dc02c7c2e34e636ff501d324b6b85a2e0436c65ce29032c8c7b31403057d8294829bd1d057a26268cf410dcaaf129f88312179a5e3360121cbd52c9ad256a7d410082cb4c4a42bec8227572533986d45d6e19808e00711d9ad6476559f5b0cb016ae435ae63f551b05bbac3714129aa3e895c7c0b6e38fa82cd3ab2ab580d69eec24305faa987aa67fb84dfafe37b62ca4f7c6a7234733d8f332c1620f78532a33f71778ddb4fb17008ba5f136a99bedaf150a0465a938c5c24dc56df47a067cfbb7be6ef7237cefab5ef6d0dc7f386f417f7a4782ba745f8e17e7e5816a6d1702e783aa0b9db16344c73526cfb40b75c7d69762648c1dcf4c909676a39fa1c70b8a88ca5fb2505dbd2fdb03878987ce5c21d542ab157fb55bb3839d4b152ac45d057d87b840e731ddd7d9829b30c089b0e005901207f793e4902a59aa95b14a9079bd234191084b6f0faf0a48a9b073c51cc90f9800306ddfa7fc938bd376a9b7b44674b6bb43d76fd09baac3e235a7eaaebb72da85257dfcb3847e5ccc73f6bd1d94a0f0571ae33082a42b9851b0dff556fef1cc7af7b6ede9d4690d2b0b024109a85861f0168481eef3007f13a40bc5b5b8f61b3a7bda72ccad317bb28bec37e43eb33f946761de375fdb2f1616455fd8b5c86c375b1748e004792fe26b35f7533aad9f6061a7e7def6436ff968bf84e581d98e2e53eb5332989fea6d5717a7405c3f12eda1ff529bd22dd799825eeeca9ab221ac4d8b87e1d7fd73eb90a7ecf5963ca42bb0fbc8ef38f26519695febb3b30923ab6c9c23db563e32988f9d2668735557590b7197b7d9280f10404a474e7e05df80c07cacb6f0bd13a97f9c868cefbc4e0b70256fa2cca34be5f17ad07e113904f9840b8a83d3a1185676c843bc7f13253cede4cefa8e2390fc54a51836c387e6f188e6b86d2d76823025c0d8120bc3a5e86789ee450f17f16a70e1e3e902986f83d9c3e8f844825b8bd3baba19009f35704581961f03c15406567481ffa4f596bf4c94357952156bf5a4f26980286060d6ddcadf86daf2a0e61f103dcdfa5de4c33954eaa93105bbc3139ca6ac6e6f8e893554770923df49764b062cb144b1d85bb3643d1809d697ee168e16ad3991e59e9bf8da8ec2a46cac4ae227674d28f7287b3f13b0c4ba6cd2206c476f6dcea6e50ea15368f215e23e0e4763bddae7d1652848023e2e7cb7b0d74bd4d018ddb82fee7d9c77ca88469b67cbbe5bdf8ad1cdb0cbe8f34007c866ba4e805e05c989ec2b51e354067ee1d8e037b8594c911b2cc0c284e95428c94236f52ec56a0518ef3cf7e66777662042a3eaeda121a3d3d6463731ead89aeb681438962a5dc943a35b39a484a318749133be69759beb146aee42351a8d509dc80d138216a0a55cb1a28d16e994ea671cc5aa595881e4db689dcba4b3efe82dbbe85019d6166c4e0b57cb43dda9b0196fdee9525fa2799a0a63b821243aaf81c56272ea5b7484564fcd819b9ce328fcbe236656cc6595c930b5e4d8ef07e296d7d242355204dc8958d0531e19f434a3d581b551c948fbecfac061d3fbf8dc734945b597bffcfdc573547ae3d46c06164a1fc6166f924a8a05bb766f74753e73e74354c1549883b682c989bb11e5b52121c6960243673964e6885f3d39923917617606a03bae93fa169e688a6e016349099c8e33acdb3995d95bd9aed7248b0f9fdf3a77cd6d6faf440bb5ea0e9e2470dce2f4b6a76352b2c7aee5bd7835cb6eeb69776ae888c128025fad4cb34e2e5ce26d154a459e8796d5985aea3450172a8cedadcc552c27dd42f27c10b3cbe152ae9ddc392c6e75f017df30c39850053bed2a890262fed7f9ef8bf9c734e58ea5e849e4729f511b4392d3f2fafda25f1ea1b09ce67f2cd66ca70b857bb3e1b8d8a5e800003fbff9afc2bdbb0c4f1fbff7c7723851b028c785225f376af7cb3252ce4f7276dc71d55978d79182edbaf3f42cc82663400177d915fe96053228e1eabec97abc1e7d9fac21b1dd3a8fdc5287519e0e0560020e2e7387ebb83f5f746725b8d9b47b138009126ea0a6b8eac9142045715e5c7a93597456f851696f7b16776b9d9647583f2d601ff4a92a16569b2b1b7352bc70ed4eee299249c3f717944f1321d0a789a3edf8c4d49690ec076083d79beaa45ab766d3dd7ec261aa7069de77cb4eedf8f00e237a2456e94eb74976d7340696f5b2294b5173b566a0d4a66fab93fe9e5e1342e831b10454857346a2fbcc0b2334adcce61ffadc9fe8097bd44c09f56864083f0a72b0496b9c1f64b10601e626ac0e04f78df188b60f291fc6b0c4880439c2c1e8da705ba5a74d07c54129ddeb50c81516fa732e7606a7b217931ef2d8d5daa89f0ac7750d14bfb9bd010eccc0eb06f87c84dfe72eb470281916ffc75e5beef8eed55bd7b11bc2bdbcdb4099a178d8f35d9d427502cef10323e66bd0e096f49914fac66cc6a7d35269cc3ce23edb0eb1e6e9cb168edf477851c12db6b9f5e5c3d73d66cbdbfd1e891a45b35d7f4b83ba8c515f42a80435010d021b38c5dde090c2bd7c55e6ecba103908ef98ac5da83419d95432e50dcf943c6b8ddb69f9b879d8311efbeb221fb00fe7067c875f761592957e744272e255b3c84611a9aadb8355410a3f3cb702865972185f1190314b21768364054cfebe029d3f3e54ac9c25d4385199e8cb4b164a4fb33786dc33b25dd2a1a541244d2541a9b3c92ef6a46af919e560c0c5254962a4799e2faf4271b424768b66c5fd6591cd114e8cca9ac9a637912f06deac479a4168bff015d11158264053a2f36e90fd3f522d1b86c241daef10203006b32ddb5a59abe258701a87aafff895a882921bd4884b5fce873073c4244ae2e15699165fd68db8b814594bb2f5961b40643431e40a3e60ff4496292cf8082d611855567e6067b3593764f7bb1ee5b55203318bc6af36e0eb8b18440e728e494b98fabfafce4a5c473896a36a7ad2f2f2c66ed331b7bdf62b4d6eea672c1f6059e3663d5fb2ea6c6111af50c4036bd9bd10d0fe24c1065801ae64c555dd7cb2cc9665953693d62406c5e77757edb83abd61aab1de4e51859a2f1be41ee7063ac47af0211db4d6fddcb38a7ae3f68548ca30f9956ca9e20227ee4cf4646de227763abe6ba3b337ea8adf9257a7b0572e2ffe72f86ed96cf9c2e7b9ebd881e5fae00b33d2270d3d8de39bd93c4e1d9636d7b8cab0fa5d2281bd011f154f200d1d45624f932aa1593666b6f3b543bb530f63096fa0062724e9a7b1033ea79ab6a1ee0e111f828dbbb739f2a2336ba20ac71e744c3bb25f510ea7e25c6fbe17d59d98b46d0db8a8de01ef9d71f21f15015d80c3eabbdd567830321b0fc40a3646c0017bd0a4968f370979e5d9c039b9d413a56af078588878c85cf1d46cdd29fa4893dd59e9edbd7d540035b83e2988c27a7250c2d113120dcfdc809e189643d8ea4a7d7191c84ad5b10bbfb1a1628339791d2"}) (async) eventfd(0x5) (async) r1 = openat$hwrng(0xffffff9c, &(0x7f0000001600), 0x16000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001640)={0x73622a85, 0x10a, 0x1}) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) accept4$packet(r2, 0x0, 0x0, 0x0) (async) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f00000015c0)) r3 = eventfd2(0x0, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000001680)=r3, 0x1) 07:59:01 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x1000000) 07:59:01 executing program 3: r0 = openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001580)={0x100, 0x0, &(0x7f0000000480)=[@dead_binder_done, @release={0x40046306, 0x3}, @enter_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x4, 0x1, 0x30}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/228, 0xe4, 0x2, 0x34}, @flat=@weak_handle={0x77682a85, 0x100}}, &(0x7f00000001c0)={0x0, 0x1c, 0x44}}, 0x40}, @free_buffer, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x20b}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/216, 0xd8, 0x1, 0x33}, @flat=@weak_handle={0x77682a85, 0xa, 0x3}}, &(0x7f0000000380)={0x0, 0x18, 0x40}}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="00000000000000000000000085616466020000000000000002000000000000002c00000000000000852a646600000000", @ANYRES32, @ANYBLOB="00069200e25850ab745218ff00000000"], &(0x7f0000000440)={0x0, 0x18, 0x34}}, 0x1400}], 0x1000, 0x0, &(0x7f0000000580)="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"}) (async, rerun: 32) eventfd(0x5) (rerun: 32) r1 = openat$hwrng(0xffffff9c, &(0x7f0000001600), 0x16000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001640)={0x73622a85, 0x10a, 0x1}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r2, 0x0, 0x0, 0x0) (async) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f00000015c0)) r3 = eventfd2(0x0, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000001680)=r3, 0x1) 07:59:01 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) accept4$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14, 0x80000) write$eventfd(r0, 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x8200, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:01 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x2000000) 07:59:01 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4801}, 0x200000c0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 07:59:01 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x3000000) 07:59:01 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async, rerun: 32) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 32) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) accept4$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14, 0x80000) (async, rerun: 64) write$eventfd(r0, 0x0, 0x0) (async, rerun: 64) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x8200, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:01 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x4000000) 07:59:01 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x5000000) 07:59:02 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) accept4$packet(r0, 0x0, 0x0, 0xc0000) 07:59:02 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) accept4$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14, 0x80000) write$eventfd(r0, 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x8200, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) accept4$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14, 0x80000) (async) write$eventfd(r0, 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r2, 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r3, 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x8200, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) 07:59:02 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x6000000) 07:59:02 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4801}, 0x200000c0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 07:59:02 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x7000000) 07:59:02 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x8, 0x2, 0x400, 0x2, 0x7}, 0x14) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f00000000c0), 0xeae5306b83458c92, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) write$eventfd(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000001c0)={0x7, 0x0, 0xfffffff8, 0x6}, 0x14) setsockopt$packet_buf(r2, 0x107, 0x22864c6e89ae2c2e, &(0x7f0000000000)="fde769297a710d70adc260b1be27c4ea4bbd7c4ebda5b7fc3600b27518852d3902e8463e09ee4183ca3f60c549f58a208a0da2d65aa319aa47e0f3221440f3aadc357ee18be3364a823ec6886a0201109c2520e90b95898348fd7144a2291915bb858d24981a5fc0f607ce3376db93d1e170", 0x72) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:02 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) accept4$packet(r0, 0x0, 0x0, 0xc0000) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r0, 0x0, 0x0) (async) accept4$packet(r0, 0x0, 0x0, 0xc0000) (async) 07:59:02 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0xffffff7f) 07:59:02 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) accept4$packet(r0, 0x0, 0x0, 0xc0000) 07:59:02 executing program 2: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) recvfrom$packet(r0, &(0x7f0000000040)=""/202, 0xca, 0x0, &(0x7f0000000140)={0x11, 0x10, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r1 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0x541b, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x1404, 0x400, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x24044011) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x1, 0xb006}, 0x4) 07:59:02 executing program 2: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) recvfrom$packet(r0, &(0x7f0000000040)=""/202, 0xca, 0x0, &(0x7f0000000140)={0x11, 0x10, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r1 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0x541b, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0x541b, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x1404, 0x400, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x24044011) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x1404, 0x400, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x24044011) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x1, 0xb006}, 0x4) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x1, 0xb006}, 0x4) 07:59:02 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4801}, 0x200000c0) (async) r1 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 07:59:02 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) r3 = openat$vcsu(0xffffff9c, &(0x7f00000002c0), 0x10000, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x9}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x4, 0xac, &(0x7f00000001c0)=""/172, 0x41100, 0xe, '\x00', 0x0, 0x32, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1, 0x4, 0x7, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000300)=[r1, r2, 0x1, 0x1, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000340)=[{0x2, 0x1, 0x1, 0xa}, {0x2, 0x3, 0x6, 0x6}, {0x2, 0x1, 0xe, 0x7}], 0x10, 0xfffffff9}, 0x90) r5 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r5, 0x0, 0x0) r6 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r6, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x4, '\x00', 0x0, r6, 0x4, 0x1, 0x2}, 0x48) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) r8 = accept4$packet(r7, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, &(0x7f0000000100)=0x6, 0x4) setsockopt$packet_buf(r8, 0x107, 0x2, &(0x7f0000000000)="4a30f9af7bf1dadcd5c6c3b048bd9db913caee4d82afe6f137859e3f0ac026e3c120bb8404e99f512dbda48b347050f55e09d0c8eef2c503d6bd061b97a9bac4572ad9e1bc06eac530a9ce3b2ffb2f6846b9eada511053882a7416e80a3c510367d41698b7f5851f9a1318fb0450a33fe3be8bd5985d6cb6bd39a7ca83d53950fd8fa00709e54f8f50e4c38668e6678019df72de48cf54bab4d898401160f0532a3b5ea753918b961d4785", 0xab) 07:59:02 executing program 2: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) recvfrom$packet(r0, &(0x7f0000000040)=""/202, 0xca, 0x0, &(0x7f0000000140)={0x11, 0x10, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) (async) r1 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0x541b, 0x0) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x1404, 0x400, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x24044011) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x1, 0xb006}, 0x4) 07:59:02 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x8, 0x2, 0x400, 0x2, 0x7}, 0x14) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f00000000c0), 0xeae5306b83458c92, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) (async) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) write$eventfd(r2, 0x0, 0x0) (async) write$eventfd(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000001c0)={0x7, 0x0, 0xfffffff8, 0x6}, 0x14) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000001c0)={0x7, 0x0, 0xfffffff8, 0x6}, 0x14) setsockopt$packet_buf(r2, 0x107, 0x22864c6e89ae2c2e, &(0x7f0000000000)="fde769297a710d70adc260b1be27c4ea4bbd7c4ebda5b7fc3600b27518852d3902e8463e09ee4183ca3f60c549f58a208a0da2d65aa319aa47e0f3221440f3aadc357ee18be3364a823ec6886a0201109c2520e90b95898348fd7144a2291915bb858d24981a5fc0f607ce3376db93d1e170", 0x72) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:02 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) (async, rerun: 64) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 64) write$eventfd(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) (async) r3 = openat$vcsu(0xffffff9c, &(0x7f00000002c0), 0x10000, 0x0) (async, rerun: 64) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 64) write$eventfd(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x9}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x4, 0xac, &(0x7f00000001c0)=""/172, 0x41100, 0xe, '\x00', 0x0, 0x32, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1, 0x4, 0x7, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000300)=[r1, r2, 0x1, 0x1, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000340)=[{0x2, 0x1, 0x1, 0xa}, {0x2, 0x3, 0x6, 0x6}, {0x2, 0x1, 0xe, 0x7}], 0x10, 0xfffffff9}, 0x90) r5 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r5, 0x0, 0x0) r6 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r6, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x4, '\x00', 0x0, r6, 0x4, 0x1, 0x2}, 0x48) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) r8 = accept4$packet(r7, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, &(0x7f0000000100)=0x6, 0x4) (async) setsockopt$packet_buf(r8, 0x107, 0x2, &(0x7f0000000000)="4a30f9af7bf1dadcd5c6c3b048bd9db913caee4d82afe6f137859e3f0ac026e3c120bb8404e99f512dbda48b347050f55e09d0c8eef2c503d6bd061b97a9bac4572ad9e1bc06eac530a9ce3b2ffb2f6846b9eada511053882a7416e80a3c510367d41698b7f5851f9a1318fb0450a33fe3be8bd5985d6cb6bd39a7ca83d53950fd8fa00709e54f8f50e4c38668e6678019df72de48cf54bab4d898401160f0532a3b5ea753918b961d4785", 0xab) 07:59:02 executing program 2: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f00000000c0)=0xfffffffe) r1 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) eventfd2(0xffffffff, 0x801) r3 = eventfd2(0x10001, 0x803) write$eventfd(r3, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) ioctl$KVM_CREATE_VM(r1, 0x541b, 0x0) r4 = openat$vcsu(0xffffff9c, &(0x7f0000000100), 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0xff, 0x3, 0x80000000, 0x60, @dev={0xfe, 0x80, '\x00', 0x2f}, @private2, 0x700, 0x7, 0x7fff, 0x7ff}}) 07:59:02 executing program 2: openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f00000000c0)=0xfffffffe) r1 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) eventfd2(0xffffffff, 0x801) eventfd2(0x10001, 0x803) (async) r3 = eventfd2(0x10001, 0x803) write$eventfd(r3, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) ioctl$KVM_CREATE_VM(r1, 0x541b, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0x541b, 0x0) r4 = openat$vcsu(0xffffff9c, &(0x7f0000000100), 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0xff, 0x3, 0x80000000, 0x60, @dev={0xfe, 0x80, '\x00', 0x2f}, @private2, 0x700, 0x7, 0x7fff, 0x7ff}}) 07:59:02 executing program 2: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f00000000c0)=0xfffffffe) r1 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) eventfd2(0xffffffff, 0x801) (async) eventfd2(0xffffffff, 0x801) eventfd2(0x10001, 0x803) (async) r3 = eventfd2(0x10001, 0x803) write$eventfd(r3, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) ioctl$KVM_CREATE_VM(r1, 0x541b, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000100), 0x3, 0x0) (async) r4 = openat$vcsu(0xffffff9c, &(0x7f0000000100), 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0xff, 0x3, 0x80000000, 0x60, @dev={0xfe, 0x80, '\x00', 0x2f}, @private2, 0x700, 0x7, 0x7fff, 0x7ff}}) 07:59:02 executing program 0: sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="a22ca5b03a4bb4f93289fd62ac4bf9d78975f228f8f52ed7de918904d259bda858e68621dfffeaf262144639290fb32c122a9c78596379264ca155a63350673176e1e45e07e9280c263494e6954dcd00ba2a49a6f77d2ed922e87b7c6a745409b0ffa4ac9b8cfb8e8b79816edc59d666e877344129991e493ebe0ae5b0f410758d8e4de7426b6d61fc0b8a29dca420b92b196e5cda242479e79aff83c8cfadd597e9be842a0831c83b780d0791ad270ecd31d7ed68bcfb099b1fd128d50ebbc0c10c9fcd8369d5052c732332", 0xcc, 0x240000c5, &(0x7f0000000100)={0x11, 0x16, 0x0, 0x1, 0xf8, 0x6, @local}, 0x14) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x80400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 07:59:02 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x284800, 0x0) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:02 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) r3 = openat$vcsu(0xffffff9c, &(0x7f00000002c0), 0x10000, 0x0) (async) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x9}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x4, 0xac, &(0x7f00000001c0)=""/172, 0x41100, 0xe, '\x00', 0x0, 0x32, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1, 0x4, 0x7, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000300)=[r1, r2, 0x1, 0x1, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000340)=[{0x2, 0x1, 0x1, 0xa}, {0x2, 0x3, 0x6, 0x6}, {0x2, 0x1, 0xe, 0x7}], 0x10, 0xfffffff9}, 0x90) (async) r5 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r5, 0x0, 0x0) (async) r6 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r6, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x4, '\x00', 0x0, r6, 0x4, 0x1, 0x2}, 0x48) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) r8 = accept4$packet(r7, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, &(0x7f0000000100)=0x6, 0x4) (async) setsockopt$packet_buf(r8, 0x107, 0x2, &(0x7f0000000000)="4a30f9af7bf1dadcd5c6c3b048bd9db913caee4d82afe6f137859e3f0ac026e3c120bb8404e99f512dbda48b347050f55e09d0c8eef2c503d6bd061b97a9bac4572ad9e1bc06eac530a9ce3b2ffb2f6846b9eada511053882a7416e80a3c510367d41698b7f5851f9a1318fb0450a33fe3be8bd5985d6cb6bd39a7ca83d53950fd8fa00709e54f8f50e4c38668e6678019df72de48cf54bab4d898401160f0532a3b5ea753918b961d4785", 0xab) 07:59:02 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x8, 0x2, 0x400, 0x2, 0x7}, 0x14) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f00000000c0), 0xeae5306b83458c92, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) write$eventfd(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000001c0)={0x7, 0x0, 0xfffffff8, 0x6}, 0x14) setsockopt$packet_buf(r2, 0x107, 0x22864c6e89ae2c2e, &(0x7f0000000000)="fde769297a710d70adc260b1be27c4ea4bbd7c4ebda5b7fc3600b27518852d3902e8463e09ee4183ca3f60c549f58a208a0da2d65aa319aa47e0f3221440f3aadc357ee18be3364a823ec6886a0201109c2520e90b95898348fd7144a2291915bb858d24981a5fc0f607ce3376db93d1e170", 0x72) (async) setsockopt$packet_buf(r2, 0x107, 0x22864c6e89ae2c2e, &(0x7f0000000000)="fde769297a710d70adc260b1be27c4ea4bbd7c4ebda5b7fc3600b27518852d3902e8463e09ee4183ca3f60c549f58a208a0da2d65aa319aa47e0f3221440f3aadc357ee18be3364a823ec6886a0201109c2520e90b95898348fd7144a2291915bb858d24981a5fc0f607ce3376db93d1e170", 0x72) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x80800) 07:59:02 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x284800, 0x0) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:02 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x284800, 0x0) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x80800) 07:59:02 executing program 0: sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="a22ca5b03a4bb4f93289fd62ac4bf9d78975f228f8f52ed7de918904d259bda858e68621dfffeaf262144639290fb32c122a9c78596379264ca155a63350673176e1e45e07e9280c263494e6954dcd00ba2a49a6f77d2ed922e87b7c6a745409b0ffa4ac9b8cfb8e8b79816edc59d666e877344129991e493ebe0ae5b0f410758d8e4de7426b6d61fc0b8a29dca420b92b196e5cda242479e79aff83c8cfadd597e9be842a0831c83b780d0791ad270ecd31d7ed68bcfb099b1fd128d50ebbc0c10c9fcd8369d5052c732332", 0xcc, 0x240000c5, &(0x7f0000000100)={0x11, 0x16, 0x0, 0x1, 0xf8, 0x6, @local}, 0x14) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x80400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="a22ca5b03a4bb4f93289fd62ac4bf9d78975f228f8f52ed7de918904d259bda858e68621dfffeaf262144639290fb32c122a9c78596379264ca155a63350673176e1e45e07e9280c263494e6954dcd00ba2a49a6f77d2ed922e87b7c6a745409b0ffa4ac9b8cfb8e8b79816edc59d666e877344129991e493ebe0ae5b0f410758d8e4de7426b6d61fc0b8a29dca420b92b196e5cda242479e79aff83c8cfadd597e9be842a0831c83b780d0791ad270ecd31d7ed68bcfb099b1fd128d50ebbc0c10c9fcd8369d5052c732332", 0xcc, 0x240000c5, &(0x7f0000000100)={0x11, 0x16, 0x0, 0x1, 0xf8, 0x6, @local}, 0x14) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x80400, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r1, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) 07:59:02 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x20e00, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x200000, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0xe80, 0x0) bind$packet(r1, &(0x7f00000000c0)={0x11, 0xf9, 0x0, 0x1, 0x80}, 0x14) 07:59:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x80800) socket$inet6_tcp(0xa, 0x1, 0x0) (async) accept4$packet(r0, 0x0, 0x0, 0x80800) (async) 07:59:02 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1412, 0x8, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004054}, 0x801) 07:59:02 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async, rerun: 64) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x20e00, 0x0) (async, rerun: 64) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x200000, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0xe80, 0x0) bind$packet(r1, &(0x7f00000000c0)={0x11, 0xf9, 0x0, 0x1, 0x80}, 0x14) 07:59:02 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000040)=r2, 0x1) accept4$packet(r0, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000080)={0x3}) 07:59:02 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x20e00, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x200000, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0xe80, 0x0) bind$packet(r1, &(0x7f00000000c0)={0x11, 0xf9, 0x0, 0x1, 0x80}, 0x14) 07:59:02 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000040)=r2, 0x1) (async, rerun: 32) accept4$packet(r0, 0x0, 0x0, 0x0) (async, rerun: 32) r3 = openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000080)={0x3}) 07:59:02 executing program 0: sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="a22ca5b03a4bb4f93289fd62ac4bf9d78975f228f8f52ed7de918904d259bda858e68621dfffeaf262144639290fb32c122a9c78596379264ca155a63350673176e1e45e07e9280c263494e6954dcd00ba2a49a6f77d2ed922e87b7c6a745409b0ffa4ac9b8cfb8e8b79816edc59d666e877344129991e493ebe0ae5b0f410758d8e4de7426b6d61fc0b8a29dca420b92b196e5cda242479e79aff83c8cfadd597e9be842a0831c83b780d0791ad270ecd31d7ed68bcfb099b1fd128d50ebbc0c10c9fcd8369d5052c732332", 0xcc, 0x240000c5, &(0x7f0000000100)={0x11, 0x16, 0x0, 0x1, 0xf8, 0x6, @local}, 0x14) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x80400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 07:59:02 executing program 2: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000240)={'tunl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x10, 0x80, 0x40, 0x3, {{0x13, 0x4, 0x3, 0x2, 0x4c, 0x64, 0x0, 0xc0, 0x4, 0x0, @local, @remote, {[@end, @generic={0x94, 0xe, "db34d7d00533cbc2b26446ed"}, @end, @rr={0x7, 0x27, 0x8e, [@loopback, @dev={0xac, 0x14, 0x14, 0x10}, @dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr=0x64010101, @empty, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0x3b}, @loopback]}]}}}}}) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) r3 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x200100, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x1407, 0x400, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x40094) r4 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0x541b, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) 07:59:02 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1412, 0x8, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004054}, 0x801) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1412, 0x8, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004054}, 0x801) (async) 07:59:02 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000040)=r2, 0x1) (async) accept4$packet(r0, 0x0, 0x0, 0x0) (async) r3 = openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000080)={0x3}) 07:59:02 executing program 2: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000240)={'tunl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x10, 0x80, 0x40, 0x3, {{0x13, 0x4, 0x3, 0x2, 0x4c, 0x64, 0x0, 0xc0, 0x4, 0x0, @local, @remote, {[@end, @generic={0x94, 0xe, "db34d7d00533cbc2b26446ed"}, @end, @rr={0x7, 0x27, 0x8e, [@loopback, @dev={0xac, 0x14, 0x14, 0x10}, @dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr=0x64010101, @empty, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0x3b}, @loopback]}]}}}}}) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) r3 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x200100, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x1407, 0x400, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x40094) (async) r4 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0x541b, 0x0) (async) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) 07:59:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x3ff, 0xffffffff, 0x9, 0x80000001}, 0x14) write$eventfd(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) 07:59:02 executing program 2: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000240)={'tunl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x10, 0x80, 0x40, 0x3, {{0x13, 0x4, 0x3, 0x2, 0x4c, 0x64, 0x0, 0xc0, 0x4, 0x0, @local, @remote, {[@end, @generic={0x94, 0xe, "db34d7d00533cbc2b26446ed"}, @end, @rr={0x7, 0x27, 0x8e, [@loopback, @dev={0xac, 0x14, 0x14, 0x10}, @dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr=0x64010101, @empty, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0x3b}, @loopback]}]}}}}}) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) r3 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x200100, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x1407, 0x400, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x40094) (async) r4 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0x541b, 0x0) (async) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) 07:59:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x3ff, 0xffffffff, 0x9, 0x80000001}, 0x14) (async, rerun: 64) write$eventfd(r2, 0x0, 0x0) (rerun: 64) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) 07:59:02 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:02 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x3ff, 0xffffffff, 0x9, 0x80000001}, 0x14) write$eventfd(r2, 0x0, 0x0) (async) write$eventfd(r2, 0x0, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) 07:59:03 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1412, 0x8, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004054}, 0x801) 07:59:03 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0xe0, 0x1, 0x21, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x27, 0x7, 0x1000, 0x100}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000001c0)={'sit0\x00', r1, 0x1, 0x20, 0xffffffff, 0x9cf8, {{0x22, 0x4, 0x1, 0x6, 0x88, 0xf001, 0x0, 0x3f, 0x2f, 0x0, @rand_addr=0x64010101, @remote, {[@rr={0x7, 0x1f, 0x5a, [@remote, @remote, @dev={0xac, 0x14, 0x14, 0x41}, @local, @empty, @multicast1, @rand_addr=0x64010100]}, @ssrr={0x89, 0xf, 0x17, [@multicast1, @local, @empty]}, @timestamp_addr={0x44, 0x44, 0x6e, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x1}, {@local, 0x400}, {@multicast2, 0x10001}, {@rand_addr=0x64010102, 0x86}, {@loopback, 0x5}, {@remote, 0x5}, {@private=0xa010100}]}]}}}}}) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000040)=0x168) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:03 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) (async) write$eventfd(r0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x80800) 07:59:03 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (rerun: 32) 07:59:03 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x80800) 07:59:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x80800) 07:59:03 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x12a0, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x128c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_VALUE={0xe5, 0x4, "bf6d12c4e51b67c70f0ed3990eb7d22b084de86a177d9f46036dada7fca69ddedb576982b1b5e64266ce3ff065f0af2e4280be78616c67642e40a1066dd7b7183d07fc8b70f847e3b6a7097a20a959ca5b66c881248c4530acc95cc58e35c05b3e029b27e93ff42a3b79b6c72a788a0cd699ab13033c27676df0648a7ba60d6ac14ccc35093439d7d44e8e1f08347b3863c7d1663ccf27092be0583d741429a9988daa45595cc191ed02cd3371edb9100b3821cd45061c9a088ed1dabcdb93464cb12214ec62e95f718be98e9fd96c923a282405e2ea6f641f78d98cc3e7db4675"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3ff}, @ETHTOOL_A_BITSET_BITS={0x180, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '#:*+\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'threaded\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x2a, 0x2, '/sys/kernel/debug/binder/transactions\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x02\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7b8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '!!^]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x26c}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa3b}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8000}]}]}, 0x12a0}, 0x1, 0x0, 0x0, 0x44040}, 0x4090) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x9) 07:59:03 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)='%ps \x00'}, 0x1c) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x98, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x400c0}, 0x800) 07:59:03 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x20080, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x2400c000) accept4$packet(r0, 0x0, 0x0, 0x80800) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r1, 0x107, 0xe28c1161373b4773, &(0x7f00000001c0)="4425cb2dfce4392fed4826dd9cfa791cc3d2439181b75494f0b1681188c81a8cf32186f532890e79d90e906d2e336296c3fcc9e45385f570256d09cf095af836b2316418de52a22d5d631d89a86f4168e0cca6374a602ef0bfd0a5ca96440273cf8ee238b94f4861b1ffbc7f364dad28a3337a326d8908c1d5a2fc441c04a324b907674ce9f4701884dd9515cbec93a4b3f83f729a0800fe3522e761694d35f007a01b5c3b9b82eb239d99a99ce104f48f2e60c186073b93d3dc9fcdf9abf3263f735d25ad8cf35d5389bb3225929f3780058e931138daf7fa0cdd9b11240402e91cb8", 0xe3) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000040)="22617ea09d17b21f7f45931d4f13d21138f93e5c44bf8d9f7622c5cfe8bbff41d6b2a0834029d0ce665c9e4b3257d67d94db2390662fbc5a50b546201a4137c1c55a0e357b", 0x45, 0x8000, &(0x7f00000000c0)={0x11, 0x1b, 0x0, 0x1, 0x5, 0x6, @broadcast}, 0x14) 07:59:03 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0xe0, 0x1, 0x21, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x27, 0x7, 0x1000, 0x100}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000001c0)={'sit0\x00', r1, 0x1, 0x20, 0xffffffff, 0x9cf8, {{0x22, 0x4, 0x1, 0x6, 0x88, 0xf001, 0x0, 0x3f, 0x2f, 0x0, @rand_addr=0x64010101, @remote, {[@rr={0x7, 0x1f, 0x5a, [@remote, @remote, @dev={0xac, 0x14, 0x14, 0x41}, @local, @empty, @multicast1, @rand_addr=0x64010100]}, @ssrr={0x89, 0xf, 0x17, [@multicast1, @local, @empty]}, @timestamp_addr={0x44, 0x44, 0x6e, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x1}, {@local, 0x400}, {@multicast2, 0x10001}, {@rand_addr=0x64010102, 0x86}, {@loopback, 0x5}, {@remote, 0x5}, {@private=0xa010100}]}]}}}}}) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000040)=0x168) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:03 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x12a0, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x128c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_VALUE={0xe5, 0x4, "bf6d12c4e51b67c70f0ed3990eb7d22b084de86a177d9f46036dada7fca69ddedb576982b1b5e64266ce3ff065f0af2e4280be78616c67642e40a1066dd7b7183d07fc8b70f847e3b6a7097a20a959ca5b66c881248c4530acc95cc58e35c05b3e029b27e93ff42a3b79b6c72a788a0cd699ab13033c27676df0648a7ba60d6ac14ccc35093439d7d44e8e1f08347b3863c7d1663ccf27092be0583d741429a9988daa45595cc191ed02cd3371edb9100b3821cd45061c9a088ed1dabcdb93464cb12214ec62e95f718be98e9fd96c923a282405e2ea6f641f78d98cc3e7db4675"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3ff}, @ETHTOOL_A_BITSET_BITS={0x180, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '#:*+\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'threaded\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x2a, 0x2, '/sys/kernel/debug/binder/transactions\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x02\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7b8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '!!^]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x26c}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa3b}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8000}]}]}, 0x12a0}, 0x1, 0x0, 0x0, 0x44040}, 0x4090) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x9) 07:59:03 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x20080, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x2400c000) (async) accept4$packet(r0, 0x0, 0x0, 0x80800) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r1, 0x107, 0xe28c1161373b4773, &(0x7f00000001c0)="4425cb2dfce4392fed4826dd9cfa791cc3d2439181b75494f0b1681188c81a8cf32186f532890e79d90e906d2e336296c3fcc9e45385f570256d09cf095af836b2316418de52a22d5d631d89a86f4168e0cca6374a602ef0bfd0a5ca96440273cf8ee238b94f4861b1ffbc7f364dad28a3337a326d8908c1d5a2fc441c04a324b907674ce9f4701884dd9515cbec93a4b3f83f729a0800fe3522e761694d35f007a01b5c3b9b82eb239d99a99ce104f48f2e60c186073b93d3dc9fcdf9abf3263f735d25ad8cf35d5389bb3225929f3780058e931138daf7fa0cdd9b11240402e91cb8", 0xe3) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) (async) sendto$packet(r2, &(0x7f0000000040)="22617ea09d17b21f7f45931d4f13d21138f93e5c44bf8d9f7622c5cfe8bbff41d6b2a0834029d0ce665c9e4b3257d67d94db2390662fbc5a50b546201a4137c1c55a0e357b", 0x45, 0x8000, &(0x7f00000000c0)={0x11, 0x1b, 0x0, 0x1, 0x5, 0x6, @broadcast}, 0x14) 07:59:03 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async, rerun: 64) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)='%ps \x00'}, 0x1c) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 32) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x98, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x400c0}, 0x800) 07:59:03 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x20080, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x2400c000) accept4$packet(r0, 0x0, 0x0, 0x80800) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r1, 0x107, 0xe28c1161373b4773, &(0x7f00000001c0)="4425cb2dfce4392fed4826dd9cfa791cc3d2439181b75494f0b1681188c81a8cf32186f532890e79d90e906d2e336296c3fcc9e45385f570256d09cf095af836b2316418de52a22d5d631d89a86f4168e0cca6374a602ef0bfd0a5ca96440273cf8ee238b94f4861b1ffbc7f364dad28a3337a326d8908c1d5a2fc441c04a324b907674ce9f4701884dd9515cbec93a4b3f83f729a0800fe3522e761694d35f007a01b5c3b9b82eb239d99a99ce104f48f2e60c186073b93d3dc9fcdf9abf3263f735d25ad8cf35d5389bb3225929f3780058e931138daf7fa0cdd9b11240402e91cb8", 0xe3) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000040)="22617ea09d17b21f7f45931d4f13d21138f93e5c44bf8d9f7622c5cfe8bbff41d6b2a0834029d0ce665c9e4b3257d67d94db2390662fbc5a50b546201a4137c1c55a0e357b", 0x45, 0x8000, &(0x7f00000000c0)={0x11, 0x1b, 0x0, 0x1, 0x5, 0x6, @broadcast}, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x20080, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x2400c000) (async) accept4$packet(r0, 0x0, 0x0, 0x80800) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_buf(r1, 0x107, 0xe28c1161373b4773, &(0x7f00000001c0)="4425cb2dfce4392fed4826dd9cfa791cc3d2439181b75494f0b1681188c81a8cf32186f532890e79d90e906d2e336296c3fcc9e45385f570256d09cf095af836b2316418de52a22d5d631d89a86f4168e0cca6374a602ef0bfd0a5ca96440273cf8ee238b94f4861b1ffbc7f364dad28a3337a326d8908c1d5a2fc441c04a324b907674ce9f4701884dd9515cbec93a4b3f83f729a0800fe3522e761694d35f007a01b5c3b9b82eb239d99a99ce104f48f2e60c186073b93d3dc9fcdf9abf3263f735d25ad8cf35d5389bb3225929f3780058e931138daf7fa0cdd9b11240402e91cb8", 0xe3) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r2, 0x0, 0x0) (async) sendto$packet(r2, &(0x7f0000000040)="22617ea09d17b21f7f45931d4f13d21138f93e5c44bf8d9f7622c5cfe8bbff41d6b2a0834029d0ce665c9e4b3257d67d94db2390662fbc5a50b546201a4137c1c55a0e357b", 0x45, 0x8000, &(0x7f00000000c0)={0x11, 0x1b, 0x0, 0x1, 0x5, 0x6, @broadcast}, 0x14) (async) 07:59:03 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80400) 07:59:03 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0xe0, 0x1, 0x21, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x27, 0x7, 0x1000, 0x100}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000001c0)={'sit0\x00', r1, 0x1, 0x20, 0xffffffff, 0x9cf8, {{0x22, 0x4, 0x1, 0x6, 0x88, 0xf001, 0x0, 0x3f, 0x2f, 0x0, @rand_addr=0x64010101, @remote, {[@rr={0x7, 0x1f, 0x5a, [@remote, @remote, @dev={0xac, 0x14, 0x14, 0x41}, @local, @empty, @multicast1, @rand_addr=0x64010100]}, @ssrr={0x89, 0xf, 0x17, [@multicast1, @local, @empty]}, @timestamp_addr={0x44, 0x44, 0x6e, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x1}, {@local, 0x400}, {@multicast2, 0x10001}, {@rand_addr=0x64010102, 0x86}, {@loopback, 0x5}, {@remote, 0x5}, {@private=0xa010100}]}]}}}}}) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000040)=0x168) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0xe0, 0x1, 0x21, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x27, 0x7, 0x1000, 0x100}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000001c0)={'sit0\x00', r1, 0x1, 0x20, 0xffffffff, 0x9cf8, {{0x22, 0x4, 0x1, 0x6, 0x88, 0xf001, 0x0, 0x3f, 0x2f, 0x0, @rand_addr=0x64010101, @remote, {[@rr={0x7, 0x1f, 0x5a, [@remote, @remote, @dev={0xac, 0x14, 0x14, 0x41}, @local, @empty, @multicast1, @rand_addr=0x64010100]}, @ssrr={0x89, 0xf, 0x17, [@multicast1, @local, @empty]}, @timestamp_addr={0x44, 0x44, 0x6e, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x1}, {@local, 0x400}, {@multicast2, 0x10001}, {@rand_addr=0x64010102, 0x86}, {@loopback, 0x5}, {@remote, 0x5}, {@private=0xa010100}]}]}}}}}) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r2, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r3, 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000040)=0x168) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) 07:59:03 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80400) socket$inet6_tcp(0xa, 0x1, 0x0) (async) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80400) (async) 07:59:05 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x12a0, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x128c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_VALUE={0xe5, 0x4, "bf6d12c4e51b67c70f0ed3990eb7d22b084de86a177d9f46036dada7fca69ddedb576982b1b5e64266ce3ff065f0af2e4280be78616c67642e40a1066dd7b7183d07fc8b70f847e3b6a7097a20a959ca5b66c881248c4530acc95cc58e35c05b3e029b27e93ff42a3b79b6c72a788a0cd699ab13033c27676df0648a7ba60d6ac14ccc35093439d7d44e8e1f08347b3863c7d1663ccf27092be0583d741429a9988daa45595cc191ed02cd3371edb9100b3821cd45061c9a088ed1dabcdb93464cb12214ec62e95f718be98e9fd96c923a282405e2ea6f641f78d98cc3e7db4675"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3ff}, @ETHTOOL_A_BITSET_BITS={0x180, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '#:*+\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'threaded\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x2a, 0x2, '/sys/kernel/debug/binder/transactions\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x02\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7b8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '!!^]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x26c}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa3b}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8000}]}]}, 0x12a0}, 0x1, 0x0, 0x0, 0x44040}, 0x4090) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x9) 07:59:05 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80400) 07:59:05 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)='%ps \x00'}, 0x1c) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x98, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x400c0}, 0x800) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x48) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)='%ps \x00'}, 0x1c) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)) (async) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x98, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x400c0}, 0x800) (async) 07:59:05 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x460803, 0x0) r1 = eventfd2(0x2, 0x0) write$eventfd(r1, &(0x7f0000000080)=0x9c, 0x8) read$eventfd(r1, &(0x7f0000000000), 0x8) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000000c0)={0x60, 0x6, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x7d2, &(0x7f0000000000)=[{0x8000, 0x4, 0x8000000000000001}, {0x1, 0x80000000, 0x3}, {0x3, 0x40400000000000, 0xfff}, {0x5, 0x2, 0x80000000}, {0x0, 0x80, 0x1}, {0x8, 0x7fff, 0xfffffffffffff801}, {0x0, 0x2, 0x80}, {0x7ff, 0x5, 0x8}], 0x8, 0x7, 0x2, 0x14, 0x0, 0x40}) 07:59:05 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x460803, 0x0) (async) r1 = eventfd2(0x2, 0x0) write$eventfd(r1, &(0x7f0000000080)=0x9c, 0x8) (async) read$eventfd(r1, &(0x7f0000000000), 0x8) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000000c0)={0x60, 0x6, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x7d2, &(0x7f0000000000)=[{0x8000, 0x4, 0x8000000000000001}, {0x1, 0x80000000, 0x3}, {0x3, 0x40400000000000, 0xfff}, {0x5, 0x2, 0x80000000}, {0x0, 0x80, 0x1}, {0x8, 0x7fff, 0xfffffffffffff801}, {0x0, 0x2, 0x80}, {0x7ff, 0x5, 0x8}], 0x8, 0x7, 0x2, 0x14, 0x0, 0x40}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) accept4$packet(r0, 0x0, 0x0, 0x0) (async) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000000c0)={0x60, 0x6, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x7d2, &(0x7f0000000000)=[{0x8000, 0x4, 0x8000000000000001}, {0x1, 0x80000000, 0x3}, {0x3, 0x40400000000000, 0xfff}, {0x5, 0x2, 0x80000000}, {0x0, 0x80, 0x1}, {0x8, 0x7fff, 0xfffffffffffff801}, {0x0, 0x2, 0x80}, {0x7ff, 0x5, 0x8}], 0x8, 0x7, 0x2, 0x14, 0x0, 0x40}) (async) 07:59:05 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x460803, 0x0) (async, rerun: 32) r1 = eventfd2(0x2, 0x0) (rerun: 32) write$eventfd(r1, &(0x7f0000000080)=0x9c, 0x8) (async) read$eventfd(r1, &(0x7f0000000000), 0x8) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:05 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = socket(0x8, 0x80005, 0xfffffffd) openat$hwrng(0xffffff9c, &(0x7f0000000140), 0x8c41, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000026bd7000fedbdf250000000405000d000000000008001700", @ANYRES32=r1, @ANYBLOB="0500210001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000840}, 0x4) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4002800a}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x20, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) 07:59:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) (async) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000000c0)={0x60, 0x6, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x7d2, &(0x7f0000000000)=[{0x8000, 0x4, 0x8000000000000001}, {0x1, 0x80000000, 0x3}, {0x3, 0x40400000000000, 0xfff}, {0x5, 0x2, 0x80000000}, {0x0, 0x80, 0x1}, {0x8, 0x7fff, 0xfffffffffffff801}, {0x0, 0x2, 0x80}, {0x7ff, 0x5, 0x8}], 0x8, 0x7, 0x2, 0x14, 0x0, 0x40}) 07:59:05 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote, r2}, 0x14) connect$packet(r0, &(0x7f0000000000)={0x11, 0x2, r2, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r3 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 07:59:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:05 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = socket(0x8, 0x80005, 0xfffffffd) (async) openat$hwrng(0xffffff9c, &(0x7f0000000140), 0x8c41, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000026bd7000fedbdf250000000405000d000000000008001700", @ANYRES32=r1, @ANYBLOB="0500210001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000840}, 0x4) (async, rerun: 64) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 64) write$eventfd(r2, 0x0, 0x0) (async, rerun: 64) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4002800a}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x20, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) (rerun: 64) 07:59:05 executing program 1: sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000100), 0x65e8b2f5e123b3c8, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="080025bd7000fcdbdf250b0000ec04002a0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x81) r1 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x15, 0x0, 0x1, 0x1f, 0x6, @multicast}, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pi6 \x00'}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x1c) r7 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x17, 0x31, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x650}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0xd, 0x5, 0x4, 0x50}, @map_val={0x18, 0x8, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x10000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0xa, 0x2, 0x0, r6}, @func={0x85, 0x0, 0x1, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x1f, 0x4c, &(0x7f0000000600)=""/76, 0x61980, 0x20, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x7, &(0x7f00000006c0)=[r7], &(0x7f0000000700)=[{0x5, 0x4, 0x9}, {0x5, 0x3, 0x2, 0x3}, {0x3, 0x1, 0xe, 0xb}, {0x3, 0x5, 0xc, 0x8}, {0x1, 0x3, 0x1, 0x2}, {0x4, 0x2, 0x2, 0x1}, {0x1, 0x5, 0x2, 0x8}], 0x10, 0xd5ee}, 0x90) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:05 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = socket(0x8, 0x80005, 0xfffffffd) openat$hwrng(0xffffff9c, &(0x7f0000000140), 0x8c41, 0x0) (async) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000026bd7000fedbdf250000000405000d000000000008001700", @ANYRES32=r1, @ANYBLOB="0500210001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000840}, 0x4) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) (async) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4002800a}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x20, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) 07:59:05 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) (async) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:05 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:05 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote, r2}, 0x14) (async) connect$packet(r0, &(0x7f0000000000)={0x11, 0x2, r2, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r3 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 07:59:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8912, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote, r5}, 0x14) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r3, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044000}, 0x4000000) write$eventfd(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) 07:59:05 executing program 1: sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="18000000011400012abd7000fedbdf250800010000000000db8b8f70972187adfa96be308df3fd52b32124ef92c1dbe373bd0762b536d28015dfd9a3eb28c2c8ed0c6b96c0fb9886b9f956b8bf9e61ae9e30e913b03993be894c8b4d7f44c6db3a12a574ab93ef8c64dfdc8e658bccc0dc0812ff005a9178e2a17553e6ebef3db915bb1b9d84e9f5fe51570eb9dacf699849b9684d593c127d09051a1f5cb0c37c80ad1bc0d8f1a401076ea81706328f74581229dc721dfa6c4b028f591d5f7e7f0373f5ae747e4b8df0ddbd1aa2e8c9f517146be14b046c2f85a765c6d4c348e72dd0f2af2dd714d0d821f9767ba6bea655d63341c78c353a5f207c7ed5af8f515b8db29da905205ca6097b6a14"], 0x18}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000100), 0x65e8b2f5e123b3c8, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="080025bd7000fcdbdf250b0000ec04002a0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x81) r1 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x15, 0x0, 0x1, 0x1f, 0x6, @multicast}, 0x14) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pi6 \x00'}, 0x1c) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x1c) (async) r7 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r7, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x17, 0x31, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x650}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0xd, 0x5, 0x4, 0x50}, @map_val={0x18, 0x8, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x10000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0xa, 0x2, 0x0, r6}, @func={0x85, 0x0, 0x1, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x1f, 0x4c, &(0x7f0000000600)=""/76, 0x61980, 0x20, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x7, &(0x7f00000006c0)=[r7], &(0x7f0000000700)=[{0x5, 0x4, 0x9}, {0x5, 0x3, 0x2, 0x3}, {0x3, 0x1, 0xe, 0xb}, {0x3, 0x5, 0xc, 0x8}, {0x1, 0x3, 0x1, 0x2}, {0x4, 0x2, 0x2, 0x1}, {0x1, 0x5, 0x2, 0x8}], 0x10, 0xd5ee}, 0x90) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:05 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8912, 0x0) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote, r5}, 0x14) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r3, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044000}, 0x4000000) (async) write$eventfd(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) 07:59:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8912, 0x0) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote, r5}, 0x14) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r3, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044000}, 0x4000000) write$eventfd(r2, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) 07:59:05 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x20) 07:59:05 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010100}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xd}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x15) socket$inet6_tcp(0xa, 0x1, 0x0) 07:59:05 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote, r2}, 0x14) (async) connect$packet(r0, &(0x7f0000000000)={0x11, 0x2, r2, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) (async) r3 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 07:59:05 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x20) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x20) (async) 07:59:05 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010100}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xd}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x15) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r0, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010100}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xd}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x15) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) 07:59:05 executing program 1: sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000100), 0x65e8b2f5e123b3c8, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="080025bd7000fcdbdf250b0000ec04002a0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x81) r1 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x15, 0x0, 0x1, 0x1f, 0x6, @multicast}, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pi6 \x00'}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x1c) r7 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x17, 0x31, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x650}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0xd, 0x5, 0x4, 0x50}, @map_val={0x18, 0x8, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x10000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0xa, 0x2, 0x0, r6}, @func={0x85, 0x0, 0x1, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x1f, 0x4c, &(0x7f0000000600)=""/76, 0x61980, 0x20, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x7, &(0x7f00000006c0)=[r7], &(0x7f0000000700)=[{0x5, 0x4, 0x9}, {0x5, 0x3, 0x2, 0x3}, {0x3, 0x1, 0xe, 0xb}, {0x3, 0x5, 0xc, 0x8}, {0x1, 0x3, 0x1, 0x2}, {0x4, 0x2, 0x2, 0x1}, {0x1, 0x5, 0x2, 0x8}], 0x10, 0xd5ee}, 0x90) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) openat$vcsu(0xffffff9c, &(0x7f0000000100), 0x65e8b2f5e123b3c8, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="080025bd7000fcdbdf250b0000ec04002a0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x81) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) bind$packet(r0, &(0x7f0000000040)={0x11, 0x15, 0x0, 0x1, 0x1f, 0x6, @multicast}, 0x14) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)='%pi6 \x00'}, 0x1c) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000300), &(0x7f0000000340)}, 0x1c) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r7, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x17, 0x31, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x650}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0xd, 0x5, 0x4, 0x50}, @map_val={0x18, 0x8, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x10000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0xa, 0x2, 0x0, r6}, @func={0x85, 0x0, 0x1, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x1f, 0x4c, &(0x7f0000000600)=""/76, 0x61980, 0x20, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x7, &(0x7f00000006c0)=[r7], &(0x7f0000000700)=[{0x5, 0x4, 0x9}, {0x5, 0x3, 0x2, 0x3}, {0x3, 0x1, 0xe, 0xb}, {0x3, 0x5, 0xc, 0x8}, {0x1, 0x3, 0x1, 0x2}, {0x4, 0x2, 0x2, 0x1}, {0x1, 0x5, 0x2, 0x8}], 0x10, 0xd5ee}, 0x90) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) 07:59:05 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async, rerun: 32) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x20) (rerun: 32) 07:59:05 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010100}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xd}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x15) (async) socket$inet6_tcp(0xa, 0x1, 0x0) 07:59:05 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = socket(0x22, 0x80000, 0x4fc4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x200}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x40000) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:06 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x5, 0x1, 0xc70) accept4$packet(r0, 0x0, 0x0, 0x80800) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) 07:59:06 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1911c2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:06 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r1 = socket(0x22, 0x80000, 0x4fc4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x200}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x40000) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:06 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket(0x5, 0x1, 0xc70) accept4$packet(r0, 0x0, 0x0, 0x80800) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) 07:59:06 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x108, 0x4, r0}) 07:59:06 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = socket(0x22, 0x80000, 0x4fc4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x200}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x40000) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:06 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1911c2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1911c2, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) 07:59:06 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x5, 0x1, 0xc70) accept4$packet(r0, 0x0, 0x0, 0x80800) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) 07:59:06 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x10}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x10}, 0x10}}, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0x541b, 0x0) 07:59:06 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1911c2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:06 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x10}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x10}, 0x10}}, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0x541b, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x10}, 0x10}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x10}, 0x10}}, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0x541b, 0x0) (async) 07:59:06 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = socket(0x21, 0x0, 0x80000000) sendto$packet(r1, &(0x7f0000000140)="5b984aff5128abe08e4baf7dd10e81cd497a897100e82aaaee6171b8c04e491777dabdd48ec41b03d0475e5d115caa3c29d77040f472c920b3aa4db96c4c44a1103b11e9c07855686940fd1c096ce91692f72d49aea090191961faee4eac77f2a0c22ceffaaec98dc5ad7b60083527081f9c26c14fe4ffbdbecf5fff3b299e2d74acf1afcf4ca646b9f7ecbb79ba17f12bba9d48dcea22275553b15a4d04893f6bfcaf89b0d3d3bacc458d3ae3dba1de", 0xb0, 0x800, &(0x7f0000000200)={0x11, 0xf0, 0x0, 0x1, 0x3}, 0x14) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, &(0x7f0000000000)=0x9, 0x4) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xff}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x8004) 07:59:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000200)=0x5, 0x4) r1 = accept4$packet(r0, 0x0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000000)=""/178, 0xb2, 0x40000120, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) accept4$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14, 0x800) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000800f7eebb6eca1d31f8d43b59f103109a2bc7e491c5597bb9d5ad2b9998afea7ff8879008000000000000000e93656a96cd05db21f285e93175874ce51059ad0b96881fc3113afb26f319", @ANYRES16=r2, @ANYBLOB="040028bd7000fddbdf250400000006001a004e210000050004000300000008001700", @ANYRES32, @ANYBLOB="c3847172fb5c9cd1ac187416a94b5109ad8eaf0241373d52ea9179bed2"], 0x2c}, 0x1, 0x0, 0x0, 0xc001}, 0x40) 07:59:06 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x10}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x10}, 0x10}}, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0x541b, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x10}, 0x10}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x10}, 0x10}}, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0x541b, 0x0) (async) 07:59:06 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x108, 0x4, r0}) 07:59:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000200)=0x5, 0x4) r1 = accept4$packet(r0, 0x0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000000)=""/178, 0xb2, 0x40000120, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) accept4$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14, 0x800) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000800f7eebb6eca1d31f8d43b59f103109a2bc7e491c5597bb9d5ad2b9998afea7ff8879008000000000000000e93656a96cd05db21f285e93175874ce51059ad0b96881fc3113afb26f319", @ANYRES16=r2, @ANYBLOB="040028bd7000fddbdf250400000006001a004e210000050004000300000008001700", @ANYRES32, @ANYBLOB="c3847172fb5c9cd1ac187416a94b5109ad8eaf0241373d52ea9179bed2"], 0x2c}, 0x1, 0x0, 0x0, 0xc001}, 0x40) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000200)=0x5, 0x4) (async) accept4$packet(r0, 0x0, 0x0, 0x0) (async) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) (async) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000000)=""/178, 0xb2, 0x40000120, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) (async) accept4$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14, 0x800) (async) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000800f7eebb6eca1d31f8d43b59f103109a2bc7e491c5597bb9d5ad2b9998afea7ff8879008000000000000000e93656a96cd05db21f285e93175874ce51059ad0b96881fc3113afb26f319", @ANYRES16=r2, @ANYBLOB="040028bd7000fddbdf250400000006001a004e210000050004000300000008001700", @ANYRES32, @ANYBLOB="c3847172fb5c9cd1ac187416a94b5109ad8eaf0241373d52ea9179bed2"], 0x2c}, 0x1, 0x0, 0x0, 0xc001}, 0x40) (async) 07:59:06 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000000)="f9e7d0898df5aaf691a78ca2", 0xc, 0x20000000, 0x0, 0x0) 07:59:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000200)=0x5, 0x4) (async) r1 = accept4$packet(r0, 0x0, 0x0, 0x0) (async) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000000)=""/178, 0xb2, 0x40000120, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) accept4$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14, 0x800) (async) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000800f7eebb6eca1d31f8d43b59f103109a2bc7e491c5597bb9d5ad2b9998afea7ff8879008000000000000000e93656a96cd05db21f285e93175874ce51059ad0b96881fc3113afb26f319", @ANYRES16=r2, @ANYBLOB="040028bd7000fddbdf250400000006001a004e210000050004000300000008001700", @ANYRES32, @ANYBLOB="c3847172fb5c9cd1ac187416a94b5109ad8eaf0241373d52ea9179bed2"], 0x2c}, 0x1, 0x0, 0x0, 0xc001}, 0x40) 07:59:06 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000000)="f9e7d0898df5aaf691a78ca2", 0xc, 0x20000000, 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r1, 0x0, 0x0) (async) sendto$packet(r1, &(0x7f0000000000)="f9e7d0898df5aaf691a78ca2", 0xc, 0x20000000, 0x0, 0x0) (async) 07:59:06 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r1 = socket(0x21, 0x0, 0x80000000) sendto$packet(r1, &(0x7f0000000140)="5b984aff5128abe08e4baf7dd10e81cd497a897100e82aaaee6171b8c04e491777dabdd48ec41b03d0475e5d115caa3c29d77040f472c920b3aa4db96c4c44a1103b11e9c07855686940fd1c096ce91692f72d49aea090191961faee4eac77f2a0c22ceffaaec98dc5ad7b60083527081f9c26c14fe4ffbdbecf5fff3b299e2d74acf1afcf4ca646b9f7ecbb79ba17f12bba9d48dcea22275553b15a4d04893f6bfcaf89b0d3d3bacc458d3ae3dba1de", 0xb0, 0x800, &(0x7f0000000200)={0x11, 0xf0, 0x0, 0x1, 0x3}, 0x14) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, &(0x7f0000000000)=0x9, 0x4) (async) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xff}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x8004) 07:59:06 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x108, 0x4, r0}) 07:59:06 executing program 3: sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf2510000000000000010000000060000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467655f736c6176655f3100001400020076657468315f746f5f7465616d00000008000300060000001400020070696d72656730000000000000000000080003000200000008000800080000000800080000800000"], 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$eventfd(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) accept4$packet(r0, 0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000240), 0x20000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000280)=@gcm_256={{0x303}, "67d25b15a9441a60", "bc3724358cb7c359f6a8cf89f0f164e8608a79ef42ceb92a7f30e66b6c846f7e", "00f766c0", "0400"}, 0x38) 07:59:06 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000000)="f9e7d0898df5aaf691a78ca2", 0xc, 0x20000000, 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r1, 0x0, 0x0) (async) sendto$packet(r1, &(0x7f0000000000)="f9e7d0898df5aaf691a78ca2", 0xc, 0x20000000, 0x0, 0x0) (async) 07:59:06 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x418bc3, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:06 executing program 3: sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf2510000000000000010000000060000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467655f736c6176655f3100001400020076657468315f746f5f7465616d00000008000300060000001400020070696d72656730000000000000000000080003000200000008000800080000000800080000800000"], 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$eventfd(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) accept4$packet(r0, 0x0, 0x0, 0x0) (async) accept4$packet(r0, 0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000240), 0x20000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000280)=@gcm_256={{0x303}, "67d25b15a9441a60", "bc3724358cb7c359f6a8cf89f0f164e8608a79ef42ceb92a7f30e66b6c846f7e", "00f766c0", "0400"}, 0x38) 07:59:06 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x418bc3, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x418bc3, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) 07:59:06 executing program 3: sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf2510000000000000010000000060000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467655f736c6176655f3100001400020076657468315f746f5f7465616d00000008000300060000001400020070696d72656730000000000000000000080003000200000008000800080000000800080000800000"], 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) write$eventfd(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) (async) accept4$packet(r0, 0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000240), 0x20000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000280)=@gcm_256={{0x303}, "67d25b15a9441a60", "bc3724358cb7c359f6a8cf89f0f164e8608a79ef42ceb92a7f30e66b6c846f7e", "00f766c0", "0400"}, 0x38) 07:59:06 executing program 0: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) socket(0x21, 0x0, 0x80000000) (async) r1 = socket(0x21, 0x0, 0x80000000) sendto$packet(r1, &(0x7f0000000140)="5b984aff5128abe08e4baf7dd10e81cd497a897100e82aaaee6171b8c04e491777dabdd48ec41b03d0475e5d115caa3c29d77040f472c920b3aa4db96c4c44a1103b11e9c07855686940fd1c096ce91692f72d49aea090191961faee4eac77f2a0c22ceffaaec98dc5ad7b60083527081f9c26c14fe4ffbdbecf5fff3b299e2d74acf1afcf4ca646b9f7ecbb79ba17f12bba9d48dcea22275553b15a4d04893f6bfcaf89b0d3d3bacc458d3ae3dba1de", 0xb0, 0x800, &(0x7f0000000200)={0x11, 0xf0, 0x0, 0x1, 0x3}, 0x14) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, &(0x7f0000000000)=0x9, 0x4) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xff}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x8004) 07:59:06 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x418bc3, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:06 executing program 3: r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x0) setsockopt$packet_buf(r0, 0x107, 0x0, &(0x7f0000000080)="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", 0x1000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r1, 0x0, 0x0, 0x0) 07:59:06 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0xc4001, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl1\x00', r4, 0x4, 0x8, 0xfd, 0x3, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x8000, 0x8000, 0x800, 0xffff}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:06 executing program 3: r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x0) setsockopt$packet_buf(r0, 0x107, 0x0, &(0x7f0000000080)="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", 0x1000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r1, 0x0, 0x0, 0x0) 07:59:06 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="fc0202000000", @ANYRES16=0x0, @ANYBLOB="08002bbd7000ffdbdf25060000001c0001800800030002000000080003000200000008000300030000003c0001801400020077673100000000000000000000000000140002006c6f000000000000000000000000000008000100", @ANYRES8=r2, @ANYBLOB="48daa16a", @ANYRES32=r2, @ANYBLOB="008008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001400020076657468315f746f5f626f6e640000001400020076657468315f746f5f627269646765001400020076657468310000000000000000000000080003004b57ddee2c0001801400020064756d6d79300000000000000000000014000200767863616e3100"/120], 0xfc}, 0x1, 0x0, 0x0, 0x8c0}, 0x8000) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:06 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async, rerun: 64) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0xc4001, 0x0) (async, rerun: 64) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) (async, rerun: 32) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 32) write$eventfd(r1, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (rerun: 64) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl1\x00', r4, 0x4, 0x8, 0xfd, 0x3, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x8000, 0x8000, 0x800, 0xffff}}) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:06 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 07:59:06 executing program 3: accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x0) (async) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x0) setsockopt$packet_buf(r0, 0x107, 0x0, &(0x7f0000000080)="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", 0x1000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r1, 0x0, 0x0, 0x0) 07:59:06 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="fc0202000000", @ANYRES16=0x0, @ANYBLOB="08002bbd7000ffdbdf25060000001c0001800800030002000000080003000200000008000300030000003c0001801400020077673100000000000000000000000000140002006c6f000000000000000000000000000008000100", @ANYRES8=r2, @ANYBLOB="48daa16a", @ANYRES32=r2, @ANYBLOB="008008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001400020076657468315f746f5f626f6e640000001400020076657468315f746f5f627269646765001400020076657468310000000000000000000000080003004b57ddee2c0001801400020064756d6d79300000000000000000000014000200767863616e3100"/120], 0xfc}, 0x1, 0x0, 0x0, 0x8c0}, 0x8000) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:06 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0xc4001, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl1\x00', r4, 0x4, 0x8, 0xfd, 0x3, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x8000, 0x8000, 0x800, 0xffff}}) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:06 executing program 3: r0 = shmget$private(0x0, 0x2000, 0x5e815f983029b16c, &(0x7f0000ffd000/0x2000)=nil) r1 = getgid() getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) r3 = getgid() r4 = getpid() shmctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)={{0x3, 0xee00, r1, r2, r3, 0x81, 0x4}, 0x1f, 0x800, 0x5, 0x6, 0xffffffffffffffff, r4, 0x9}) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) 07:59:06 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="fc0202000000", @ANYRES16=0x0, @ANYBLOB="08002bbd7000ffdbdf25060000001c0001800800030002000000080003000200000008000300030000003c0001801400020077673100000000000000000000000000140002006c6f000000000000000000000000000008000100", @ANYRES8=r2, @ANYBLOB="48daa16a", @ANYRES32=r2, @ANYBLOB="008008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001400020076657468315f746f5f626f6e640000001400020076657468315f746f5f627269646765001400020076657468310000000000000000000000080003004b57ddee2c0001801400020064756d6d79300000000000000000000014000200767863616e3100"/120], 0xfc}, 0x1, 0x0, 0x0, 0x8c0}, 0x8000) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:06 executing program 3: r0 = shmget$private(0x0, 0x2000, 0x5e815f983029b16c, &(0x7f0000ffd000/0x2000)=nil) getgid() (async) r1 = getgid() getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) r3 = getgid() r4 = getpid() shmctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)={{0x3, 0xee00, r1, r2, r3, 0x81, 0x4}, 0x1f, 0x800, 0x5, 0x6, 0xffffffffffffffff, r4, 0x9}) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) 07:59:06 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000100)={@empty}, 0x14) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000140), 0x200200, 0x0) r2 = getpid() setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @link_local}, 0x10) syz_open_procfs$pagemap(r2, 0x0) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000180)={r2, 0x0, 0x4}) r3 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf25080000000500380000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000850) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r4, &(0x7f0000000240)="e61dad4eea69521ae8727295a2c4e281d22739f9990cc866d3e76bf14cac12d5171780a586aa", &(0x7f0000000280)=@tcp=r5, 0x1}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:06 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 07:59:06 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x50400, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:06 executing program 3: r0 = shmget$private(0x0, 0x2000, 0x5e815f983029b16c, &(0x7f0000ffd000/0x2000)=nil) r1 = getgid() getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) r3 = getgid() r4 = getpid() shmctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)={{0x3, 0xee00, r1, r2, r3, 0x81, 0x4}, 0x1f, 0x800, 0x5, 0x6, 0xffffffffffffffff, r4, 0x9}) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) shmget$private(0x0, 0x2000, 0x5e815f983029b16c, &(0x7f0000ffd000/0x2000)=nil) (async) getgid() (async) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) (async) getgid() (async) getpid() (async) shmctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)={{0x3, 0xee00, r1, r2, r3, 0x81, 0x4}, 0x1f, 0x800, 0x5, 0x6, 0xffffffffffffffff, r4, 0x9}) (async) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) 07:59:06 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x50400, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x50400, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) 07:59:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r0}, 0x14) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x4010081f, 0x400, 0x6, 0x18}, 0x10) 07:59:06 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x50400, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x50400, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) 07:59:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r0}, 0x14) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x4010081f, 0x400, 0x6, 0x18}, 0x10) 07:59:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r0}, 0x14) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x4010081f, 0x400, 0x6, 0x18}, 0x10) 07:59:06 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 07:59:06 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000100)={@empty}, 0x14) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000140), 0x200200, 0x0) (async) r2 = getpid() setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @link_local}, 0x10) (async) syz_open_procfs$pagemap(r2, 0x0) (async) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000180)={r2, 0x0, 0x4}) (async, rerun: 64) r3 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (rerun: 64) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf25080000000500380000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000850) (async) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r4, &(0x7f0000000240)="e61dad4eea69521ae8727295a2c4e281d22739f9990cc866d3e76bf14cac12d5171780a586aa", &(0x7f0000000280)=@tcp=r5, 0x1}, 0x1c) (async, rerun: 32) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (rerun: 32) 07:59:06 executing program 2: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) getsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0x541b, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f0000000000)=0x6) 07:59:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:06 executing program 2: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) getsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) r1 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0x541b, 0x0) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) (async) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f0000000000)=0x6) 07:59:06 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000100)={@empty}, 0x14) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000140), 0x200200, 0x0) (async) r2 = getpid() setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @link_local}, 0x10) (async, rerun: 32) syz_open_procfs$pagemap(r2, 0x0) (rerun: 32) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000180)={r2, 0x0, 0x4}) (async, rerun: 64) r3 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (rerun: 64) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf25080000000500380000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000850) (async) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r4, &(0x7f0000000240)="e61dad4eea69521ae8727295a2c4e281d22739f9990cc866d3e76bf14cac12d5171780a586aa", &(0x7f0000000280)=@tcp=r5, 0x1}, 0x1c) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:06 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x5}, 0x4) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:06 executing program 2: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) (async) getsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) r1 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0x541b, 0x0) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f0000000000)=0x6) 07:59:06 executing program 3: setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)="c10a87550ead44e89e93dfe1bab331a9b7d68ae5c04e251ceaaabca75a887581a2c0949eeac8680d5f8bf5cdaa64dc4335595097ba4e54eee0aa76e8dfa624a3cfc4cf74239ac6dc1e2dd5949871a6e0c0f4aed06c2a4c69fa9b10eea84b4fa600504fc7eeffc61b0cff969cefe437463752ffdf87262c923fce16d856587302bfa5cf013145e2a5552baa59f7f62e1d182bc838f6ff328c00d02a7e5cf6e3a38b673c2a0a555245632563c968de5f85875560bdd47e1334bb8df7599aad4a206b055d2ced0a7c4adb7e6c26645d366ec44ebd34667df5a4ea95", 0xda) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:06 executing program 3: setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)="c10a87550ead44e89e93dfe1bab331a9b7d68ae5c04e251ceaaabca75a887581a2c0949eeac8680d5f8bf5cdaa64dc4335595097ba4e54eee0aa76e8dfa624a3cfc4cf74239ac6dc1e2dd5949871a6e0c0f4aed06c2a4c69fa9b10eea84b4fa600504fc7eeffc61b0cff969cefe437463752ffdf87262c923fce16d856587302bfa5cf013145e2a5552baa59f7f62e1d182bc838f6ff328c00d02a7e5cf6e3a38b673c2a0a555245632563c968de5f85875560bdd47e1334bb8df7599aad4a206b055d2ced0a7c4adb7e6c26645d366ec44ebd34667df5a4ea95", 0xda) (async, rerun: 64) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:06 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 07:59:06 executing program 3: setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)="c10a87550ead44e89e93dfe1bab331a9b7d68ae5c04e251ceaaabca75a887581a2c0949eeac8680d5f8bf5cdaa64dc4335595097ba4e54eee0aa76e8dfa624a3cfc4cf74239ac6dc1e2dd5949871a6e0c0f4aed06c2a4c69fa9b10eea84b4fa600504fc7eeffc61b0cff969cefe437463752ffdf87262c923fce16d856587302bfa5cf013145e2a5552baa59f7f62e1d182bc838f6ff328c00d02a7e5cf6e3a38b673c2a0a555245632563c968de5f85875560bdd47e1334bb8df7599aad4a206b055d2ced0a7c4adb7e6c26645d366ec44ebd34667df5a4ea95", 0xda) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:06 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r1, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) 07:59:06 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x1c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r5, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x38}}, 0x8080) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000140)={'gre0\x00', r3, 0x7807, 0x10, 0x9, 0x5, {{0xb, 0x4, 0x2, 0x5, 0x2c, 0x64, 0x0, 0x8, 0x4, 0x0, @multicast2, @multicast2, {[@timestamp={0x44, 0x18, 0xcf, 0x0, 0xd, [0x6, 0xfffffff8, 0x3f, 0x7, 0x3a8b]}]}}}}}) r7 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r7, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r7, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, 0x140b, 0x8, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4001) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000003c0)={'syztnl0\x00', r3, 0x7800, 0x20, 0xffffffff, 0xfffffff8, {{0x5a, 0x4, 0x2, 0x9, 0x168, 0x67, 0x0, 0x67, 0x2f, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010101, {[@generic={0x89, 0xe, "4842a66a03c365e36b987a51"}, @lsrr={0x83, 0x1b, 0x1f, [@local, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @timestamp_prespec={0x44, 0x54, 0xa6, 0x3, 0x3, [{@local, 0xffff}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010102, 0xfffffffa}, {@local, 0x8}, {@broadcast, 0xfc}, {@private=0xa010102, 0x4}, {@empty, 0xffffffff}, {@broadcast, 0x9}, {@multicast1, 0x3}]}, @cipso={0x86, 0x1c, 0x0, [{0x2, 0x12, "d268402383aae77152a834e04d139791"}, {0x6, 0x4, "9084"}]}, @timestamp_prespec={0x44, 0x2c, 0xb8, 0x3, 0x8, [{@remote, 0x1000}, {@broadcast, 0x72}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x80}, {@local, 0x7}]}, @timestamp_addr={0x44, 0x3c, 0x1b, 0x1, 0x9, [{@rand_addr=0x64010102, 0x6}, {@loopback, 0x9}, {@multicast1, 0x6}, {@rand_addr=0x64010100, 0x1}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x3}, {@rand_addr=0x64010100, 0x4bda}, {@local, 0x1000}]}, @lsrr={0x83, 0x1b, 0xe1, [@loopback, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @remote]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0x7f, [@empty]}, @rr={0x7, 0x2b, 0x1f, [@loopback, @private=0xa010101, @broadcast, @loopback, @broadcast, @empty, @remote, @broadcast, @remote, @remote]}]}}}}}) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000080)={@mcast1, r8}, 0x14) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, r1, 0xb0b, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7f}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x200}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8001}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x503d}, @ETHTOOL_A_CHANNELS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40840) r9 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:06 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x5}, 0x4) (async, rerun: 64) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 64) 07:59:06 executing program 3: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x438, @dev={0xfe, 0x80, '\x00', 0x25}, 0x4, 0x3}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x81}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x81}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x10) 07:59:06 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 07:59:06 executing program 3: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x438, @dev={0xfe, 0x80, '\x00', 0x25}, 0x4, 0x3}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x81}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x81}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x10) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x438, @dev={0xfe, 0x80, '\x00', 0x25}, 0x4, 0x3}, 0x20) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) accept4$packet(r0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x81}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x81}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async) 07:59:06 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80010004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x140d, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x80) 07:59:06 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x1c}}, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) (async) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r5, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x38}}, 0x8080) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000140)={'gre0\x00', r3, 0x7807, 0x10, 0x9, 0x5, {{0xb, 0x4, 0x2, 0x5, 0x2c, 0x64, 0x0, 0x8, 0x4, 0x0, @multicast2, @multicast2, {[@timestamp={0x44, 0x18, 0xcf, 0x0, 0xd, [0x6, 0xfffffff8, 0x3f, 0x7, 0x3a8b]}]}}}}}) (rerun: 64) r7 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r7, 0x0, 0x0) (async, rerun: 64) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r7, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, 0x140b, 0x8, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4001) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000003c0)={'syztnl0\x00', r3, 0x7800, 0x20, 0xffffffff, 0xfffffff8, {{0x5a, 0x4, 0x2, 0x9, 0x168, 0x67, 0x0, 0x67, 0x2f, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010101, {[@generic={0x89, 0xe, "4842a66a03c365e36b987a51"}, @lsrr={0x83, 0x1b, 0x1f, [@local, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @timestamp_prespec={0x44, 0x54, 0xa6, 0x3, 0x3, [{@local, 0xffff}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010102, 0xfffffffa}, {@local, 0x8}, {@broadcast, 0xfc}, {@private=0xa010102, 0x4}, {@empty, 0xffffffff}, {@broadcast, 0x9}, {@multicast1, 0x3}]}, @cipso={0x86, 0x1c, 0x0, [{0x2, 0x12, "d268402383aae77152a834e04d139791"}, {0x6, 0x4, "9084"}]}, @timestamp_prespec={0x44, 0x2c, 0xb8, 0x3, 0x8, [{@remote, 0x1000}, {@broadcast, 0x72}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x80}, {@local, 0x7}]}, @timestamp_addr={0x44, 0x3c, 0x1b, 0x1, 0x9, [{@rand_addr=0x64010102, 0x6}, {@loopback, 0x9}, {@multicast1, 0x6}, {@rand_addr=0x64010100, 0x1}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x3}, {@rand_addr=0x64010100, 0x4bda}, {@local, 0x1000}]}, @lsrr={0x83, 0x1b, 0xe1, [@loopback, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @remote]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0x7f, [@empty]}, @rr={0x7, 0x2b, 0x1f, [@loopback, @private=0xa010101, @broadcast, @loopback, @broadcast, @empty, @remote, @broadcast, @remote, @remote]}]}}}}}) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000080)={@mcast1, r8}, 0x14) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, r1, 0xb0b, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7f}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x200}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8001}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x503d}, @ETHTOOL_A_CHANNELS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40840) (async, rerun: 32) r9 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (rerun: 32) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:06 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80010004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x140d, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x80) 07:59:06 executing program 3: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x438, @dev={0xfe, 0x80, '\x00', 0x25}, 0x4, 0x3}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x81}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x81}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x10) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x438, @dev={0xfe, 0x80, '\x00', 0x25}, 0x4, 0x3}, 0x20) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) accept4$packet(r0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x81}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x81}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async) 07:59:11 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x5}, 0x4) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:11 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80010004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x140d, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x80) 07:59:11 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x1c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r5, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x38}}, 0x8080) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x38}}, 0x8080) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000140)={'gre0\x00', r3, 0x7807, 0x10, 0x9, 0x5, {{0xb, 0x4, 0x2, 0x5, 0x2c, 0x64, 0x0, 0x8, 0x4, 0x0, @multicast2, @multicast2, {[@timestamp={0x44, 0x18, 0xcf, 0x0, 0xd, [0x6, 0xfffffff8, 0x3f, 0x7, 0x3a8b]}]}}}}}) r7 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r7, 0x0, 0x0) (async) write$eventfd(r7, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r7, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, 0x140b, 0x8, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4001) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000003c0)={'syztnl0\x00', r3, 0x7800, 0x20, 0xffffffff, 0xfffffff8, {{0x5a, 0x4, 0x2, 0x9, 0x168, 0x67, 0x0, 0x67, 0x2f, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010101, {[@generic={0x89, 0xe, "4842a66a03c365e36b987a51"}, @lsrr={0x83, 0x1b, 0x1f, [@local, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @timestamp_prespec={0x44, 0x54, 0xa6, 0x3, 0x3, [{@local, 0xffff}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010102, 0xfffffffa}, {@local, 0x8}, {@broadcast, 0xfc}, {@private=0xa010102, 0x4}, {@empty, 0xffffffff}, {@broadcast, 0x9}, {@multicast1, 0x3}]}, @cipso={0x86, 0x1c, 0x0, [{0x2, 0x12, "d268402383aae77152a834e04d139791"}, {0x6, 0x4, "9084"}]}, @timestamp_prespec={0x44, 0x2c, 0xb8, 0x3, 0x8, [{@remote, 0x1000}, {@broadcast, 0x72}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x80}, {@local, 0x7}]}, @timestamp_addr={0x44, 0x3c, 0x1b, 0x1, 0x9, [{@rand_addr=0x64010102, 0x6}, {@loopback, 0x9}, {@multicast1, 0x6}, {@rand_addr=0x64010100, 0x1}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x3}, {@rand_addr=0x64010100, 0x4bda}, {@local, 0x1000}]}, @lsrr={0x83, 0x1b, 0xe1, [@loopback, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @remote]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0x7f, [@empty]}, @rr={0x7, 0x2b, 0x1f, [@loopback, @private=0xa010101, @broadcast, @loopback, @broadcast, @empty, @remote, @broadcast, @remote, @remote]}]}}}}}) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000080)={@mcast1, r8}, 0x14) (async) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000080)={@mcast1, r8}, 0x14) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, r1, 0xb0b, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7f}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x200}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8001}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x503d}, @ETHTOOL_A_CHANNELS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40840) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r9 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x44, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0xcd5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0xeb}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x3}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4004880) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r6 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r6, &(0x7f0000000340)=0x1, 0x8) write$eventfd(r6, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="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"]}) 07:59:11 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000040), 0x200000, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x30b080, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) (async) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) (async, rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) (async) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x44, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0xcd5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0xeb}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x3}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4004880) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) (rerun: 64) r6 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r6, &(0x7f0000000340)=0x1, 0x8) (async) write$eventfd(r6, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="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"]}) 07:59:11 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000040), 0x200000, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x30b080, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x200000, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x30b080, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) 07:59:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) (async) accept4$packet(r0, 0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x44, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0xcd5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0xeb}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x3}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4004880) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) (async) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r6 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r6, &(0x7f0000000340)=0x1, 0x8) write$eventfd(r6, 0x0, 0x0) (async) write$eventfd(r6, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="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"]}) 07:59:12 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x14) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) openat$binder_debug(0xffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000140)=0x5, 0x4) 07:59:12 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000040), 0x200000, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x30b080, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:12 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0x5, 0x1, 0x1, 0x1, 0x7eee, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2, 0x6}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r1) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x2d4c2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:12 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x103200, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$MEDIA_REQUEST_IOC_REINIT(r0, 0x7c81, 0x0) 07:59:12 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x2d, "46bfdb45eefb72ec5c56133677918b771078d1b359257b0e1da38f842ebe2312"}) 07:59:12 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x103200, 0x0) write$eventfd(r1, 0x0, 0x0) (async, rerun: 32) ioctl$MEDIA_REQUEST_IOC_REINIT(r0, 0x7c81, 0x0) (rerun: 32) 07:59:12 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x2d, "46bfdb45eefb72ec5c56133677918b771078d1b359257b0e1da38f842ebe2312"}) 07:59:12 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x103200, 0x0) write$eventfd(r1, 0x0, 0x0) (async) ioctl$MEDIA_REQUEST_IOC_REINIT(r0, 0x7c81, 0x0) 07:59:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x10001}, 0x8) write$eventfd(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0xfffffffffffffc9a) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@map, r2, 0xf, 0x10, r1, @prog_id=0xffffffffffffffff}, 0x20) 07:59:12 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0x5, 0x1, 0x1, 0x1, 0x7eee, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2, 0x6}, 0x48) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r1) (async) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x2d4c2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:12 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x14) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000140)=0x5, 0x4) 07:59:12 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x2d, "46bfdb45eefb72ec5c56133677918b771078d1b359257b0e1da38f842ebe2312"}) 07:59:12 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000002c0)={0x1, 0x5}, 0x4) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x14) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, r0, 0x1, 0x3, 0x3}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000100), &(0x7f0000000140)=r2}, 0x1c) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000280)={0x3000, &(0x7f0000000240), 0x0, r4, 0x4}) 07:59:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x10001}, 0x8) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x10001}, 0x8) write$eventfd(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0xfffffffffffffc9a) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@map, r2, 0xf, 0x10, r1, @prog_id=0xffffffffffffffff}, 0x20) 07:59:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) (async) accept4$packet(r0, 0x0, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x10001}, 0x8) write$eventfd(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0xfffffffffffffc9a) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@map, r2, 0xf, 0x10, r1, @prog_id=0xffffffffffffffff}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@map, r2, 0xf, 0x10, r1, @prog_id=0xffffffffffffffff}, 0x20) 07:59:12 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000002c0)={0x1, 0x5}, 0x4) (async) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x14) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, r0, 0x1, 0x3, 0x3}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000100), &(0x7f0000000140)=r2}, 0x1c) (async, rerun: 64) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 64) write$eventfd(r4, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000280)={0x3000, &(0x7f0000000240), 0x0, r4, 0x4}) 07:59:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x5}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x7}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x4198}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000040) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @timestamp, @mss={0x2, 0x5bd}, @timestamp, @timestamp], 0x5) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:12 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x14) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) openat$binder_debug(0xffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000140)=0x5, 0x4) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x14) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000140)=0x5, 0x4) (async) 07:59:12 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0x5, 0x1, 0x1, 0x1, 0x7eee, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2, 0x6}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r1) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x2d4c2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0x5, 0x1, 0x1, 0x1, 0x7eee, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2, 0x6}, 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r1) (async) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x2d4c2, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) 07:59:12 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000002c0)={0x1, 0x5}, 0x4) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000002c0)={0x1, 0x5}, 0x4) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x14) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, r0, 0x1, 0x3, 0x3}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000100), &(0x7f0000000140)=r2}, 0x1c) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000280)={0x3000, &(0x7f0000000240), 0x0, r4, 0x4}) 07:59:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x5}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x7}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x4198}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000040) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @timestamp, @mss={0x2, 0x5bd}, @timestamp, @timestamp], 0x5) (async) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:12 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x400200, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x5}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x7}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x4198}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000040) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @timestamp, @mss={0x2, 0x5bd}, @timestamp, @timestamp], 0x5) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:12 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x400200, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) accept4$packet(r0, 0x0, 0x0, 0x0) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) 07:59:12 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0xb1d1, 0x2}, 0x48) 07:59:12 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x400200, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) accept4$packet(r0, 0x0, 0x0, 0x0) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) 07:59:12 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x7800, 0x7800, 0x0, 0xd3bc, {{0x26, 0x4, 0x3, 0x3a, 0x98, 0x64, 0x0, 0x7, 0x29, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x31}, {[@timestamp_addr={0x44, 0x44, 0x3f, 0x1, 0x0, [{@empty, 0x5}, {@remote, 0x1000}, {@rand_addr=0x64010100, 0xd10}, {@remote, 0x5}, {@broadcast, 0x7}, {@local, 0xfffffff9}, {@loopback, 0x11f1}, {@empty}]}, @timestamp_prespec={0x44, 0xc, 0x39, 0x3, 0x6, [{@broadcast, 0x2}]}, @noop, @end, @ssrr={0x89, 0x13, 0x41, [@dev={0xac, 0x14, 0x14, 0x36}, @remote, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast2]}, @lsrr={0x83, 0x1f, 0x82, [@empty, @loopback, @dev={0xac, 0x14, 0x14, 0x16}, @empty, @rand_addr=0x64010101, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x16}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfe}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x800c001) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) accept4$packet(r0, 0x0, 0x0, 0x0) (async) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) 07:59:12 executing program 2: sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x10001}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x9}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x4}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000000)=""/61) 07:59:12 executing program 3: setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140), 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0x1, &(0x7f0000000000)="3e39a6082675788cf406534f83eb3b8f61244b5c7ea197ef44a937bf1250b3e3a8663b9ac1f674688497e885d2b829b05e64152e863974a7acc03a03d815b91f8d1d3768b163dedefe96f8c12f8a0907aa0d889e06a4a72ea562250b75be5109fb0bb77b1d299b850ccb475ac6866ab8efe45cd97f25fcdba416444085b5ee7114e6bed3473515dcc870e875c0f6b23751573e4d0c985991771fcece5aa1495601467d10fe7f5b0db048def2b3a5f7f774f46f7de823ad9cf267", &(0x7f00000000c0)=@tcp=r1, 0x2}, 0x1c) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1200}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4005}, 0x1) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:12 executing program 2: sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x10001}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x9}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x4}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) (async) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) r1 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000000)=""/61) 07:59:12 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0xb1d1, 0x2}, 0x48) 07:59:12 executing program 3: setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140), 0x4) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0x1, &(0x7f0000000000)="3e39a6082675788cf406534f83eb3b8f61244b5c7ea197ef44a937bf1250b3e3a8663b9ac1f674688497e885d2b829b05e64152e863974a7acc03a03d815b91f8d1d3768b163dedefe96f8c12f8a0907aa0d889e06a4a72ea562250b75be5109fb0bb77b1d299b850ccb475ac6866ab8efe45cd97f25fcdba416444085b5ee7114e6bed3473515dcc870e875c0f6b23751573e4d0c985991771fcece5aa1495601467d10fe7f5b0db048def2b3a5f7f774f46f7de823ad9cf267", &(0x7f00000000c0)=@tcp=r1, 0x2}, 0x1c) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1200}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4005}, 0x1) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:12 executing program 2: sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x10001}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x9}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x4}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) (async) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000000)=""/61) (async) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000000)=""/61) 07:59:12 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x7800, 0x7800, 0x0, 0xd3bc, {{0x26, 0x4, 0x3, 0x3a, 0x98, 0x64, 0x0, 0x7, 0x29, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x31}, {[@timestamp_addr={0x44, 0x44, 0x3f, 0x1, 0x0, [{@empty, 0x5}, {@remote, 0x1000}, {@rand_addr=0x64010100, 0xd10}, {@remote, 0x5}, {@broadcast, 0x7}, {@local, 0xfffffff9}, {@loopback, 0x11f1}, {@empty}]}, @timestamp_prespec={0x44, 0xc, 0x39, 0x3, 0x6, [{@broadcast, 0x2}]}, @noop, @end, @ssrr={0x89, 0x13, 0x41, [@dev={0xac, 0x14, 0x14, 0x36}, @remote, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast2]}, @lsrr={0x83, 0x1f, 0x82, [@empty, @loopback, @dev={0xac, 0x14, 0x14, 0x16}, @empty, @rand_addr=0x64010101, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x16}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfe}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x800c001) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:12 executing program 3: setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140), 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0x1, &(0x7f0000000000)="3e39a6082675788cf406534f83eb3b8f61244b5c7ea197ef44a937bf1250b3e3a8663b9ac1f674688497e885d2b829b05e64152e863974a7acc03a03d815b91f8d1d3768b163dedefe96f8c12f8a0907aa0d889e06a4a72ea562250b75be5109fb0bb77b1d299b850ccb475ac6866ab8efe45cd97f25fcdba416444085b5ee7114e6bed3473515dcc870e875c0f6b23751573e4d0c985991771fcece5aa1495601467d10fe7f5b0db048def2b3a5f7f774f46f7de823ad9cf267", &(0x7f00000000c0)=@tcp=r1, 0x2}, 0x1c) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1200}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4005}, 0x1) accept4$packet(r0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140), 0x4) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0x1, &(0x7f0000000000)="3e39a6082675788cf406534f83eb3b8f61244b5c7ea197ef44a937bf1250b3e3a8663b9ac1f674688497e885d2b829b05e64152e863974a7acc03a03d815b91f8d1d3768b163dedefe96f8c12f8a0907aa0d889e06a4a72ea562250b75be5109fb0bb77b1d299b850ccb475ac6866ab8efe45cd97f25fcdba416444085b5ee7114e6bed3473515dcc870e875c0f6b23751573e4d0c985991771fcece5aa1495601467d10fe7f5b0db048def2b3a5f7f774f46f7de823ad9cf267", &(0x7f00000000c0)=@tcp=r1, 0x2}, 0x1c) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1200}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4005}, 0x1) (async) accept4$packet(r0, 0x0, 0x0, 0x0) (async) 07:59:12 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = getpid() syz_open_procfs$pagemap(r1, 0x0) syz_open_procfs$pagemap(r1, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:12 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = getpid() syz_open_procfs$pagemap(r1, 0x0) (async) syz_open_procfs$pagemap(r1, &(0x7f0000000000)) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:12 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r1 = getpid() syz_open_procfs$pagemap(r1, 0x0) (async) syz_open_procfs$pagemap(r1, &(0x7f0000000000)) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:12 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x7800, 0x7800, 0x0, 0xd3bc, {{0x26, 0x4, 0x3, 0x3a, 0x98, 0x64, 0x0, 0x7, 0x29, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x31}, {[@timestamp_addr={0x44, 0x44, 0x3f, 0x1, 0x0, [{@empty, 0x5}, {@remote, 0x1000}, {@rand_addr=0x64010100, 0xd10}, {@remote, 0x5}, {@broadcast, 0x7}, {@local, 0xfffffff9}, {@loopback, 0x11f1}, {@empty}]}, @timestamp_prespec={0x44, 0xc, 0x39, 0x3, 0x6, [{@broadcast, 0x2}]}, @noop, @end, @ssrr={0x89, 0x13, 0x41, [@dev={0xac, 0x14, 0x14, 0x36}, @remote, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast2]}, @lsrr={0x83, 0x1f, 0x82, [@empty, @loopback, @dev={0xac, 0x14, 0x14, 0x16}, @empty, @rand_addr=0x64010101, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x16}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfe}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x800c001) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:12 executing program 0: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0xb1d1, 0x2}, 0x48) 07:59:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) (async) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) (async) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:12 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@cgroup=r0, r1, 0x2b, 0x412ff634e35091ee, r2, @prog_id=0xffffffffffffffff}, 0x20) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x139875470f2a87b2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}]}, 0x3c}}, 0x14) 07:59:12 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x22, 0x3, 0x5) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) accept4$packet(r1, 0x0, 0x0, 0x0) 07:59:12 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@cgroup=r0, r1, 0x2b, 0x412ff634e35091ee, r2, @prog_id=0xffffffffffffffff}, 0x20) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x139875470f2a87b2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}]}, 0x3c}}, 0x14) 07:59:12 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@cgroup=r0, r1, 0x2b, 0x412ff634e35091ee, r2, @prog_id=0xffffffffffffffff}, 0x20) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x139875470f2a87b2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}]}, 0x3c}}, 0x14) 07:59:12 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x400}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7ff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x44}, 0x1, 0x0, 0x0, 0x854}, 0x4000000) 07:59:12 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x5ad441, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x220000, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x141401, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140), 0x111000, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000180), 0x30c00, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x100, 0x9, 0x40, 0x9, r1, 0x1, '\x00', 0x0, r2, 0x4, 0x3, 0x2, 0x7}, 0x48) 07:59:12 executing program 0: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00'}) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x5}, @GTPA_TID={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) write$eventfd(r0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000614000426bd7000fbdbdf2508000100000000000800010002f1fc21344b1fef4500000008000100000000fa080001e200000000"], 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x4008050) r1 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x401880, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x2, &(0x7f0000000000), 0x4, 0xffffffffffffffff, 0x7}) 07:59:12 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket(0x22, 0x3, 0x5) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) accept4$packet(r1, 0x0, 0x0, 0x0) 07:59:12 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x5ad441, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x220000, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x220000, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x141401, 0x0) (async) openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x141401, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140), 0x111000, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000180), 0x30c00, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x100, 0x9, 0x40, 0x9, r1, 0x1, '\x00', 0x0, r2, 0x4, 0x3, 0x2, 0x7}, 0x48) 07:59:12 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x22, 0x3, 0x5) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) accept4$packet(r1, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket(0x22, 0x3, 0x5) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r0, 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r1, 0x0, 0x0) (async) accept4$packet(r1, 0x0, 0x0, 0x0) (async) 07:59:12 executing program 0: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00'}) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x5}, @GTPA_TID={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) write$eventfd(r0, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000614000426bd7000fbdbdf2508000100000000000800010002f1fc21344b1fef4500000008000100000000fa080001e200000000"], 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x4008050) (async) r1 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x401880, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x2, &(0x7f0000000000), 0x4, 0xffffffffffffffff, 0x7}) 07:59:12 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x5ad441, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x220000, 0x0) (async) openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x141401, 0x0) (async) openat$hwrng(0xffffff9c, &(0x7f0000000140), 0x111000, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) (async) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000180), 0x30c00, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x100, 0x9, 0x40, 0x9, r1, 0x1, '\x00', 0x0, r2, 0x4, 0x3, 0x2, 0x7}, 0x48) 07:59:12 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x400}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7ff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x44}, 0x1, 0x0, 0x0, 0x854}, 0x4000000) 07:59:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r2, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000180)) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="402817dc0ab9fbf944b95cf883a1020000005e6fd500bc6c94aa92de5b421a5c06e9741f5dff1d13db676923715e0f66324e95ea7a96af830da1c118500e3b474430403b25ac44fc0bd490bb622527772fab25823a5edb27d3a4fdfe0000ef34dfeb9c1dfeb0970ea6f0269565802921fd65", @ANYRES16=0x0, @ANYBLOB="000427bd7000fedbdf25036f03a700000008000b00050000000800340009ebff00f866eb0000000000000000d9bd53783883e4d9a085ea14b17de4497f26cc134bfae7644c1e14b9cef9e142b9a4720700000000000000ca7ad7b9652fc7bfb2d1faafd477200e6fee907322bb4cb4ed8f262e17eaba62bc9782bc2445d4de38fba99c295ff4300e"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x17, 0x0, 0x1, 0x80, 0x6, @broadcast}, 0x14) 07:59:12 executing program 0: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00'}) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x5}, @GTPA_TID={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) write$eventfd(r0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000614000426bd7000fbdbdf2508000100000000000800010002f1fc21344b1fef4500000008000100000000fa080001e200000000"], 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x4008050) r1 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x401880, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x2, &(0x7f0000000000), 0x4, 0xffffffffffffffff, 0x7}) 07:59:13 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup, 0x2f, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup, r0, 0x2e, 0x12, r1, @link_fd=r2, r3}, 0x20) r4 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 07:59:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r2, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000180)) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="402817dc0ab9fbf944b95cf883a1020000005e6fd500bc6c94aa92de5b421a5c06e9741f5dff1d13db676923715e0f66324e95ea7a96af830da1c118500e3b474430403b25ac44fc0bd490bb622527772fab25823a5edb27d3a4fdfe0000ef34dfeb9c1dfeb0970ea6f0269565802921fd65", @ANYRES16=0x0, @ANYBLOB="000427bd7000fedbdf25036f03a700000008000b00050000000800340009ebff00f866eb0000000000000000d9bd53783883e4d9a085ea14b17de4497f26cc134bfae7644c1e14b9cef9e142b9a4720700000000000000ca7ad7b9652fc7bfb2d1faafd477200e6fee907322bb4cb4ed8f262e17eaba62bc9782bc2445d4de38fba99c295ff4300e"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x17, 0x0, 0x1, 0x80, 0x6, @broadcast}, 0x14) 07:59:13 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote, r2}, 0x14) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x6, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @ldst={0x3, 0x1, 0x4, 0x2, 0xa, 0x80, 0x1}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x3}], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x7, &(0x7f0000000080)=""/7, 0x40f00, 0x8, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0x9, 0x1, 0xdc8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x1, r3, 0x1, 0x1], &(0x7f0000000180)=[{0x4, 0x1, 0x8, 0xb}, {0x0, 0x4, 0xd, 0x3}, {0x2, 0x1, 0x5, 0x4}, {0x3, 0x1, 0xe, 0x4}, {0x3, 0x3, 0xd, 0xf}]}, 0x90) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:13 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote, r2}, 0x14) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) (async) write$eventfd(r3, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x6, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @ldst={0x3, 0x1, 0x4, 0x2, 0xa, 0x80, 0x1}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x3}], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x7, &(0x7f0000000080)=""/7, 0x40f00, 0x8, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0x9, 0x1, 0xdc8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x1, r3, 0x1, 0x1], &(0x7f0000000180)=[{0x4, 0x1, 0x8, 0xb}, {0x0, 0x4, 0xd, 0x3}, {0x2, 0x1, 0x5, 0x4}, {0x3, 0x1, 0xe, 0x4}, {0x3, 0x3, 0xd, 0xf}]}, 0x90) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r2, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000180)) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="402817dc0ab9fbf944b95cf883a1020000005e6fd500bc6c94aa92de5b421a5c06e9741f5dff1d13db676923715e0f66324e95ea7a96af830da1c118500e3b474430403b25ac44fc0bd490bb622527772fab25823a5edb27d3a4fdfe0000ef34dfeb9c1dfeb0970ea6f0269565802921fd65", @ANYRES16=0x0, @ANYBLOB="000427bd7000fedbdf25036f03a700000008000b00050000000800340009ebff00f866eb0000000000000000d9bd53783883e4d9a085ea14b17de4497f26cc134bfae7644c1e14b9cef9e142b9a4720700000000000000ca7ad7b9652fc7bfb2d1faafd477200e6fee907322bb4cb4ed8f262e17eaba62bc9782bc2445d4de38fba99c295ff4300e"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) connect$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x17, 0x0, 0x1, 0x80, 0x6, @broadcast}, 0x14) 07:59:13 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote, r2}, 0x14) (async) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x6, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @ldst={0x3, 0x1, 0x4, 0x2, 0xa, 0x80, 0x1}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x3}], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x7, &(0x7f0000000080)=""/7, 0x40f00, 0x8, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0x9, 0x1, 0xdc8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x1, r3, 0x1, 0x1], &(0x7f0000000180)=[{0x4, 0x1, 0x8, 0xb}, {0x0, 0x4, 0xd, 0x3}, {0x2, 0x1, 0x5, 0x4}, {0x3, 0x1, 0xe, 0x4}, {0x3, 0x3, 0xd, 0xf}]}, 0x90) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x1405, 0x300, 0x70bd2c, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x48091}, 0x4851) 07:59:13 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x400}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7ff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x44}, 0x1, 0x0, 0x0, 0x854}, 0x4000000) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x400}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7ff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x44}, 0x1, 0x0, 0x0, 0x854}, 0x4000000) (async) 07:59:13 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) (async) write$eventfd(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) write$eventfd(r1, 0x0, 0x0) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup, 0x2f, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup, r0, 0x2e, 0x12, r1, @link_fd=r2, r3}, 0x20) r4 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 07:59:13 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004804}, 0x8000) 07:59:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x1405, 0x300, 0x70bd2c, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x48091}, 0x4851) 07:59:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x1405, 0x300, 0x70bd2c, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x48091}, 0x4851) socket$inet6_tcp(0xa, 0x1, 0x0) (async) accept4$packet(r0, 0x0, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x1405, 0x300, 0x70bd2c, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x48091}, 0x4851) (async) 07:59:13 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004804}, 0x8000) 07:59:13 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004804}, 0x8000) 07:59:13 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x24001, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 07:59:13 executing program 0: openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) write$eventfd(r1, 0x0, 0x0) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup, 0x2f, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup, r0, 0x2e, 0x12, r1, @link_fd=r2, r3}, 0x20) r4 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 07:59:13 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x200000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000280)=r1, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200), 0x9) openat$hwrng(0xffffff9c, &(0x7f00000002c0), 0x12000, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000100)="7bc3795cc9db1891f3b392ce7e5a5797e8e3850d40d6ad039f94c8746fe9530dbd74a9aa2d21818179f772d7be32d2196f631529b0510636bd5ae36d63abc59e76dfe39db76c84f47868e8d1386d0a7128030c893ce06dae84fa97735202c08693f358c16499bd65", &(0x7f0000000180)=@tcp, 0x4}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', r3, 0x2f, 0x8, 0x2, 0x1, 0x28, @remote, @loopback, 0x20, 0x7, 0x27c}}) 07:59:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) accept4$packet(r0, 0x0, 0x0, 0x0) (async) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) 07:59:13 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x24001, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r0, 0x0, 0x0) (async) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x24001, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) 07:59:13 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x200000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000280)=r1, 0x1) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000280)=r1, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200), 0x9) openat$hwrng(0xffffff9c, &(0x7f00000002c0), 0x12000, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000100)="7bc3795cc9db1891f3b392ce7e5a5797e8e3850d40d6ad039f94c8746fe9530dbd74a9aa2d21818179f772d7be32d2196f631529b0510636bd5ae36d63abc59e76dfe39db76c84f47868e8d1386d0a7128030c893ce06dae84fa97735202c08693f358c16499bd65", &(0x7f0000000180)=@tcp, 0x4}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', r3, 0x2f, 0x8, 0x2, 0x1, 0x28, @remote, @loopback, 0x20, 0x7, 0x27c}}) 07:59:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 07:59:13 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x24001, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 32) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (rerun: 32) 07:59:13 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x200000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000280)=r1, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200), 0x9) (async, rerun: 32) openat$hwrng(0xffffff9c, &(0x7f00000002c0), 0x12000, 0x0) (rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000100)="7bc3795cc9db1891f3b392ce7e5a5797e8e3850d40d6ad039f94c8746fe9530dbd74a9aa2d21818179f772d7be32d2196f631529b0510636bd5ae36d63abc59e76dfe39db76c84f47868e8d1386d0a7128030c893ce06dae84fa97735202c08693f358c16499bd65", &(0x7f0000000180)=@tcp, 0x4}, 0x1c) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', r3, 0x2f, 0x8, 0x2, 0x1, 0x28, @remote, @loopback, 0x20, 0x7, 0x27c}}) 07:59:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@mss={0x2, 0x43a}, @window={0x3, 0x7, 0x9}, @mss={0x2, 0xf300}], 0x3) accept4$packet(r0, 0x0, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast1}, 0x14) 07:59:13 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x9ddd90d964dc6568, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = eventfd2(0x7, 0x80800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x4, &(0x7f0000000200), 0x4, r3, 0x1}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x40, 0x20, 0x1, 0xffffffe1, {{0x42, 0x4, 0x2, 0x3f, 0x108, 0x67, 0x0, 0x0, 0x29, 0x0, @remote, @local, {[@ra={0x94, 0x4}, @noop, @end, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0x43, 0x0, 0xa, [0xffffffff, 0x97d3, 0x8000, 0x7fffffff]}, @timestamp={0x44, 0x10, 0xcc, 0x0, 0x5, [0x1, 0x800, 0x3]}, @lsrr={0x83, 0x17, 0xd5, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @empty, @multicast2]}, @cipso={0x86, 0x5a, 0x2, [{0x1, 0xe, "05bfa21ce77d33ce642a161d"}, {0x0, 0x9, "a2dc2aa3c14e84"}, {0x5, 0xe, "4b4f46f2fc9d726adcb5c1ff"}, {0x2, 0x3, "ad"}, {0x1, 0xd, "015dd21a4f9406622d3596"}, {0x5, 0xa, "8a45148b071bdcfe"}, {0x2, 0x5, "444215"}, {0x1, 0xb, "f05e44fba1e6565d4a"}, {0x1, 0x5, "22e4a8"}]}, @rr={0x7, 0x23, 0x6, [@rand_addr=0x64010100, @private=0xa010100, @multicast1, @empty, @private=0xa010100, @empty, @multicast2, @remote]}, @cipso={0x86, 0x2f, 0xffffffffffffffff, [{0x1, 0x7, "4331ade48f"}, {0x8db42fc345620698, 0x8, "23104e7ffffa"}, {0x2, 0x8, "bfcd5e95707a"}, {0x0, 0x12, "2529ab418b45d5bfeaa24575955f3202"}]}]}}}}}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f00000001c0)={@empty, r5}, 0x14) 07:59:13 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) recvfrom$l2tp6(r1, &(0x7f00000001c0)=""/78, 0x4e, 0x40000040, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x20) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r2 = getpid() syz_open_procfs$pagemap(r2, 0x0) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000400)={r2, 0x0, 0x80}) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x800) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote, r5}, 0x14) r6 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r6, 0x0, 0x0) bind$l2tp6(r6, &(0x7f0000000440)={0xa, 0x0, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000000, 0x1}, 0x20) recvfrom$packet(r1, &(0x7f00000002c0)=""/158, 0x9e, 0x22, &(0x7f00000003c0)={0x11, 0x8, r5, 0x1, 0x0, 0x6, @remote}, 0x14) recvfrom$packet(r3, &(0x7f0000000080)=""/222, 0xde, 0x100, &(0x7f0000000240)={0x11, 0x1b, 0x0, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 07:59:13 executing program 0: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80420040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x8f842a25177f61d8) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f00000003c0)="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", 0x1000) openat$vcsu(0xffffff9c, &(0x7f0000000140), 0xc540, 0x0) openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x10000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:13 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x9ddd90d964dc6568, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = eventfd2(0x7, 0x80800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x4, &(0x7f0000000200), 0x4, r3, 0x1}) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x40, 0x20, 0x1, 0xffffffe1, {{0x42, 0x4, 0x2, 0x3f, 0x108, 0x67, 0x0, 0x0, 0x29, 0x0, @remote, @local, {[@ra={0x94, 0x4}, @noop, @end, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0x43, 0x0, 0xa, [0xffffffff, 0x97d3, 0x8000, 0x7fffffff]}, @timestamp={0x44, 0x10, 0xcc, 0x0, 0x5, [0x1, 0x800, 0x3]}, @lsrr={0x83, 0x17, 0xd5, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @empty, @multicast2]}, @cipso={0x86, 0x5a, 0x2, [{0x1, 0xe, "05bfa21ce77d33ce642a161d"}, {0x0, 0x9, "a2dc2aa3c14e84"}, {0x5, 0xe, "4b4f46f2fc9d726adcb5c1ff"}, {0x2, 0x3, "ad"}, {0x1, 0xd, "015dd21a4f9406622d3596"}, {0x5, 0xa, "8a45148b071bdcfe"}, {0x2, 0x5, "444215"}, {0x1, 0xb, "f05e44fba1e6565d4a"}, {0x1, 0x5, "22e4a8"}]}, @rr={0x7, 0x23, 0x6, [@rand_addr=0x64010100, @private=0xa010100, @multicast1, @empty, @private=0xa010100, @empty, @multicast2, @remote]}, @cipso={0x86, 0x2f, 0xffffffffffffffff, [{0x1, 0x7, "4331ade48f"}, {0x8db42fc345620698, 0x8, "23104e7ffffa"}, {0x2, 0x8, "bfcd5e95707a"}, {0x0, 0x12, "2529ab418b45d5bfeaa24575955f3202"}]}]}}}}}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f00000001c0)={@empty, r5}, 0x14) 07:59:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@mss={0x2, 0x43a}, @window={0x3, 0x7, 0x9}, @mss={0x2, 0xf300}], 0x3) (async) accept4$packet(r0, 0x0, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast1}, 0x14) 07:59:13 executing program 0: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80420040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x8f842a25177f61d8) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f00000003c0)="76496c17dff9c34ffa567f9f9b91687ae5559e40eb5b6964d1e40f082c7cd570e108174845dc19b051800cc9ab75eb4f2c49a31c8bb08eda4417b667de84dcf282694ca2e417638388ad7ea100b7ea86182ec01810ad521a9fd2f5fd22df7892ac4ee1e69b176da5bc3fb1019dc244fef6319568fa5aa286f3dfade5a7ee32c9b097d39fbad96e5625b380e4a26c108176b583e2cf2fac3f09ec2c74b36f256a9e96976d2cbeddb653bfb9bbd1b359507222d5414a3058bd13cc146d52d1f3fc604c9a85a652e5a1c23e4978bffdf5a472f279ee0103e3a00030c5d9772f807b97e204f8f44cf5b91638f9705c5d8afb22433e1fbb39de417418b4564d0fccd26aabf9cbf34922871681b1b7ac34e9a8e269d2b584a6cd973cb8c165166a7789adfeaafce388e9b8f0cf4e1ea1eb1b857085e89f59e8f0caf437c0f129e30308ea3b9306f79766d785b882d1be99ed77f92b2300059e7d9d29ac555c147983fcb145fe32d9a802932fb972bc00e4b95e95c02e535bc09f7607c8b21df5989ae0b2f1accc95c8486933410d5775810c8ce2ebc3d320514cde4db71962b658339ab9eb39e75b1c85a38eb7c978a57e384719449abe621cef38d5c36d8500fce6ce7335792319da976d492f3cc83417d75a650e773f7af404aea76a5627465b4fb4a0d34b33114fd67b4ffbe38e46125552352ad61fb154686488368f418933b58df4e7eeb68d127970a7a344f644c990ae9ec75718f1d8bab608f03bef578d38c575e00aeecca2afab3bee51cae703fce8f13e31d80da9d16447ab3d9bcf528dd4c608da5150f0494f151a402f86924ccc30335fc6d6083f024d1d217c066d6363c0664302f9c8ee78f4a84bf1ed7df369524f86ea8e420cd4783ec19f38d5549a67ac09742f7470f1f714915d93e0e8c629550d387d23a28c80e9a8ecdb52738ef52e8ea7ea84d5d58bcb591919a1df4cc97a034a95ad36247583b4ec571e11e495fb2b36d6d0c1ab7887c50a4744fbdd00089e737ebc608b4df615e3b766e188f139ae3218e84a2a62284ef99456ddc56a24b51a62be8ee0677b7096fd6c7cf4e8cd9802de8e0bbb2342f161f4e28428b0ca2938e7e5d08d3dbb1096c737c5f0fa394cfd6bd67a7cf55268faed4d31aab7eece0bf1af42afdc00c7c8f9687f93cbf53725250262e79d401c99f9594eb0180528958a2e31be67c9718d3e5365b67729ff520ff88f5683fed4cdb1ef1646cd921cc8a9c75f2b30b50d615b6506a168fc4b6a7277fbfca3c75d638a545ac51f4f4c625d1f3f6429b705bb4196e8d202bc5c05cfe3fa274402ba6785c8c96dba182f93466822fe81e1276d939d9e9092c8addcf2974166dee840b4d0107da6a5c44e86f67547c8742ba4baa3e225aecfacd4333bc62594cc5b4d8a65c3f3c374b40ccf8365c698e27b8a0451c8f197b0a40b1137e8611c9731f4161536b39638838bfa1ecdc7e07e91c7f25ddbb0f75d29ee43127e531abd7a8445ae9f912bff7278c7f26f8522e64b7aaf563c01d27e0321e05ac82a92abbf8f0ddb4fbab4bea115e8798d66eb1e2d82a5ccafe7429806bbb5a8039fd961abbfb657cf01047dcf42f02bc9af9846beee2c5aeab48b26d781e86a58739b198180f565584df8df99d5581343dc42a8e1632cb5172821cdf9a19c52a66e547f6ae78c4e8d6219066183320e0fe64744657fc0d5e82c89d3fe1b295b34e016a7cdd215ea8606f0e019b23b1fff6cbaa5a087788a24abe453ae387efb66673edd0689379a8ca94e03dce45256de53a57d754729ddd852e8f2035cf753593a52643b95a4a63115bb11b3eea0bf6d0cd7a04c1d4b34261b489264b961cbdf794067439c0f3758b9b0fffc9d6cff730aa011d25e3bab8f278364aea490b03d9ae74a35450e0633016cf6331d849ee9a9920d1c568d7a5744a38256a4f37785498a2d108e778850d7980dc13ea29a7991dc95724287ed1dc0fc3dcacdadc7a646a4ebafb9db798c956b7af5e37298ac084f9ce14a7a5ee4eb18ed17bffa5b762b7982c57a5c8603c84027f58f2bcb8464d61df1f726dfb444da4305b4922b9e656946193331b0eb2ef91cf0c6c5f0bb6011ccb52f2d7af1276eec2b8325b31afc1081030311cde5eacb349f10959e3acb90f6e2c1cace835eab0b5fe1b335500598a838ddcdf2a6450c012197a3607557bc338ba8284144c1a783bf90e13800d4ebbfe001ed5cb2cdc00ce1eaafd712a8ed6b0cfe3ff15c06885dd42fd8332507d7fc5f5dc3fe9f539c38717e28f577d57c63d53996d6f7cab2100244556c000540c301326bc42dee7d260d51c2c13e65c71bf403ec52384835c1fb045121ed934e5619b8f0277f49bf6eb591bf1d4dc82df0655e0f177a5e136e9cd53e3bc33fb40f2bef25c91999aaba03ff3888c2614aa7046a460b6e466046e2ab382f6a5ec681dda74ff5e1b8c1aa85f6df5cda36ab2834468e1b647755d19dd9301d63577a924caa9585c8e90708c18497698f5ca5f1e430b829f506b8c5d53c633c0c8e4afadd6f1058319d640d8e92efc31b984afe28f9b2b51e30190a1d4af2d7408cfe8a05a192af4834a2c136fab0e1a5ba7a8b46598b120897216f445fe5163e5186f4f44498cb9aab0a65412785b786cb854c44883b9b5087459f9569d18130c939b7f87ae0c8ebb2dc66ffa204c379d7a68de04d6692df7680e1df6f1da23b7fcd0bb7033b450ce947315e6704c52b8ea421b45563804f03ae6e134642fcb83413623573644219e654468c207427e4554dd065b9697c0ebc1b005ef776bed14c8e5a357cf297e3065321858545b1c046f439c365956db5def68c7733be86a37f215be110bf1ab0d0f14ab51071dc26b3f45bddc6097971e0d71ec7bce00d9409df6a6b40b7bcf1362dad540007e8a1e2ac3bf2044fc59c0ce06ac121bd8d2885de643159a99ee4184d09d1e23bae385158b3b9321c83d7b621ce445badcaddb53c7d8f572670fcd3ccc180dafd20e1cf4869b6bf121c2a46b76a46f55cd6bc1f73be2a117be1e15d89663638ca47d9edfdc55f21bb248a93359bf7e0db04976596868ecdaa195fa08261cb8f47304b28eada09f7f5984c95461c60379b29cd028a047e785302d4eb3b20ec3b3cb9d13498e99ccc4a5c0dccf7578be18d742d25184f02d07d966b8be2295221b9b5239968835e22cf2bdf18c84f26d7a733450e9d0ef1b48c15b6754dac1e36510b4fd07087baf0273a78c33f8d20f34b351cdac2204a029022131b9ada1d0044a26fdfb0e4d5b24c2503517c10598d30724767648ae342f9317d5eb66661a17e98c4d4ad13aabf740d1639eaebe201009f06b2e4a55e4eb8e46cdebee353dcc43d2783a620ad48801b77b498a1fde4160aaf2cc926d8c61744b98f5346fd36b8786e071d9cb7ddc69912fa68a7b129100ad4d7770366f2d003592c546c96a7c280bf12f0dddf1ae0b2b08110c7c1b1a68581d11ddf1ea2c3904356fa8843e6ef21f4534fcf8cba13a48a198bd189bebd6d830beb90637c95360fe932f6f98fa4074bd3b2f99c69625d0ceb6cc1986fc4f434f1a520879967db14274927b72a9dd2c1ea2f52635535db1864e360f2603209406332a6fb1e334121cd0accae941b308a69aa28d9b47f9ede2e1cf9d294be16effd3ae660c74a2f2c577202969e3ef0b93ba128ef78afaf0f73ea2d991f272118e62f8f236ada24dd07849ffb54de2652fa0dc16c67c829c443fd859f33e9594606ed126164047251a562eda205ccb7ed5b68bc2a278bb35099f91467bac4e1fe4d6c4ef5607babb260033989ecd8485c2c8b30368375a8ba7bfa99c74372a035fb8f7f35068bdc857d4290a1bfd18854ca3bd39e31bfedd6fbc1417da0bcac4168117ae0079bf4021480c2095306965a80d04bb21fa11fca45842ad7d5943c6ce25a41c74782c2fd8f4d3851e09f0f1d1fcbaf177c31b3715b44aa5f52536bd54ceeaecab75809c75484d09c2f19043dd84cce73457b400d182496ad3c094955a3b8adf9564bea2ac0576e1a8b49e2b0588098082ff22948f4a698da3dd284fe564993dd7c8d65245c1f0864eb2b76f1886de97f4ba452e81d95a4934789fa00151a58c4fc89db455f1e1b85e4d65938f7ebc3c4ad8a08c3ceb6bb7ad277131f52e54bfe2458091106005ab5e65288b6ac60170e6a6e91e49c4be63a8a8bdefa41d1e97fee67e287785e4d758c819923dc1c3dc8b52202911e1e3f74b7ca80b41ef0139ab575787c2941bf7736192bb35e04c957a7a1aeef6abb32eb195eda6ed283373d8322fb4b1fb11ad19955544e5dbf3a5ca7f933430e570fe9f76521e13afeea52db0c750a6ce388904e7448be251b7a68de5be32352250e8e5a9d9c0f2969b04a087c8a2a400f1e265243551d089d55165cb458d69682f0dede7f7dd3567808326f0b0751911b5dc3770f936e2ea9ace91258a6ca08bd126997f56cda242f6808b38cc620f2e94439ae771463ab3df30c439b68096159f1af43fbc55673de4c8a0eddb65f35d14c5ab9c3304fc07ad5c3add3687dfc349a7add086b6ee63b8481e88e4c99683b473b19b0ded907033d5047172c2684fefd805fe6c7a011ee7da2cc2874a8f30bc144416fb8dc1cda1b3b2669c612763da8793b18177820acfa2ad352540ef3a4451ec461bb07f903b9bab32bdd7646b8795e43398b50deddf540e7847fb0859ef8cfbb7fbaeb1c0e9d1b11c9e270ccad61294dfab5b0d09ffc8204d35df8a4142e6294f0f81de0751bcfec2746cfaf6ae6f4ba8fb0377749649c991fb2e724ced3d07eee9d9c9f05908464237c63963c7baf16e2e5e05cdc7363411c1ffa4ed85942829b334426f2a2ae84f49adf4588978142f8cdb81b58374a582dc52861d0737df925ac1ed70be67b7d3825ab05ceab892c3dc187985458515112f7c49d059885a654faf3dcd0bbcf263b77692f0dcf8fc513b1f3f360c73ada225c8c45a084e257b81fbf8cd4b32b2dd4eb425eaf8594bc558e0ac268d83f94307acd13d1f38fccc4cfc3d837ba64996537f059d9dfcfaaa35bfdd8e282a72196b255d4932e05e0dd5c686c1ba5aa63ea159dcfc513b0993c33d9dc30a853918a460bb18b25984278ae13b59af6a324b2c2c8b4d60048c06f5ecaa017b29ef2e7736580ca3c804a0fdd0df7b2a60c95cd62c03e33b8ca369fd0d79b89586b91da2de8471ecdc9245fa10afcd74552bf254072205d66b3df1fab5caed73daa2b0e1edbee64aee9c49715d555706f93feb0045cab52ae52fd76f90296df3e5686858ab7c763912399c0acf030453d6baaf7dcff82b06e2f7a122e1e2245d96e5ced5c695374467d06d9775c31e76d0ad6422cbee53650c8de1c0f929dd85fc208e3342114ab093f57eda44e85982b8512fcad7701ad4cd0973733b5ff5db9a3f3e5fe9f2ca115f880887c63001633c9bf4dbc3754d2148eeba77d6e57eabe72d3d79209a8910a541f521950b3f76bcfbc579dbc495a0460b15af0cec0afc4c9f578c1b56df9f5c4a97c7658ce5ad166cacf5db91ef92880b9d55fbceaecf38d90147ee85e3702734af18bede539a56935734af996a9471ac3d90f72aaf85a4a251d1de4864fbffba4d83c8bd1caa629d272dece45d558697975cf8d1fb90c09b2b098282a7e222c419a1398082764a27903e820f34212a8067ea009cda4a87f87c9f22bd8dbf2f1cbad575510c4f35d63f6cca2f2eaf58875d49192b56832c5389c6b8e8e59b349ee8a3ae79d8453dcfb2e8f39efbf", 0x1000) openat$vcsu(0xffffff9c, &(0x7f0000000140), 0xc540, 0x0) openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x10000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r0, 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80420040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x8f842a25177f61d8) (async) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f00000003c0)="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", 0x1000) (async) openat$vcsu(0xffffff9c, &(0x7f0000000140), 0xc540, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x10000, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) 07:59:13 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) recvfrom$l2tp6(r1, &(0x7f00000001c0)=""/78, 0x4e, 0x40000040, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x20) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r2 = getpid() syz_open_procfs$pagemap(r2, 0x0) (async) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000400)={r2, 0x0, 0x80}) (async) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x800) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote, r5}, 0x14) (async) r6 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r6, 0x0, 0x0) bind$l2tp6(r6, &(0x7f0000000440)={0xa, 0x0, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000000, 0x1}, 0x20) (async) recvfrom$packet(r1, &(0x7f00000002c0)=""/158, 0x9e, 0x22, &(0x7f00000003c0)={0x11, 0x8, r5, 0x1, 0x0, 0x6, @remote}, 0x14) recvfrom$packet(r3, &(0x7f0000000080)=""/222, 0xde, 0x100, &(0x7f0000000240)={0x11, 0x1b, 0x0, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 07:59:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@mss={0x2, 0x43a}, @window={0x3, 0x7, 0x9}, @mss={0x2, 0xf300}], 0x3) accept4$packet(r0, 0x0, 0x0, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast1}, 0x14) (async) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast1}, 0x14) 07:59:13 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async, rerun: 32) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x9ddd90d964dc6568, 0x0) (rerun: 32) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = eventfd2(0x7, 0x80800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x4, &(0x7f0000000200), 0x4, r3, 0x1}) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async, rerun: 32) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 32) write$eventfd(r4, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x40, 0x20, 0x1, 0xffffffe1, {{0x42, 0x4, 0x2, 0x3f, 0x108, 0x67, 0x0, 0x0, 0x29, 0x0, @remote, @local, {[@ra={0x94, 0x4}, @noop, @end, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0x43, 0x0, 0xa, [0xffffffff, 0x97d3, 0x8000, 0x7fffffff]}, @timestamp={0x44, 0x10, 0xcc, 0x0, 0x5, [0x1, 0x800, 0x3]}, @lsrr={0x83, 0x17, 0xd5, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @empty, @multicast2]}, @cipso={0x86, 0x5a, 0x2, [{0x1, 0xe, "05bfa21ce77d33ce642a161d"}, {0x0, 0x9, "a2dc2aa3c14e84"}, {0x5, 0xe, "4b4f46f2fc9d726adcb5c1ff"}, {0x2, 0x3, "ad"}, {0x1, 0xd, "015dd21a4f9406622d3596"}, {0x5, 0xa, "8a45148b071bdcfe"}, {0x2, 0x5, "444215"}, {0x1, 0xb, "f05e44fba1e6565d4a"}, {0x1, 0x5, "22e4a8"}]}, @rr={0x7, 0x23, 0x6, [@rand_addr=0x64010100, @private=0xa010100, @multicast1, @empty, @private=0xa010100, @empty, @multicast2, @remote]}, @cipso={0x86, 0x2f, 0xffffffffffffffff, [{0x1, 0x7, "4331ade48f"}, {0x8db42fc345620698, 0x8, "23104e7ffffa"}, {0x2, 0x8, "bfcd5e95707a"}, {0x0, 0x12, "2529ab418b45d5bfeaa24575955f3202"}]}]}}}}}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f00000001c0)={@empty, r5}, 0x14) 07:59:13 executing program 0: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) (async, rerun: 64) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (rerun: 64) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80420040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x8f842a25177f61d8) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f00000003c0)="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", 0x1000) openat$vcsu(0xffffff9c, &(0x7f0000000140), 0xc540, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x10000, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:13 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) recvfrom$l2tp6(r1, &(0x7f00000001c0)=""/78, 0x4e, 0x40000040, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x20) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r2 = getpid() syz_open_procfs$pagemap(r2, 0x0) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000400)={r2, 0x0, 0x80}) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x800) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote, r5}, 0x14) r6 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r6, 0x0, 0x0) bind$l2tp6(r6, &(0x7f0000000440)={0xa, 0x0, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000000, 0x1}, 0x20) recvfrom$packet(r1, &(0x7f00000002c0)=""/158, 0x9e, 0x22, &(0x7f00000003c0)={0x11, 0x8, r5, 0x1, 0x0, 0x6, @remote}, 0x14) (async) recvfrom$packet(r3, &(0x7f0000000080)=""/222, 0xde, 0x100, &(0x7f0000000240)={0x11, 0x1b, 0x0, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 07:59:13 executing program 3: shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x1000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x80800) 07:59:13 executing program 0: r0 = openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x14, 0x0, r2, @prog_id}, 0x20) r3 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) r5 = openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f00000000c0)={r1, 0x9, 0x8, r5}) 07:59:13 executing program 3: shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x1000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x80800) 07:59:13 executing program 1: getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000000)=""/135, &(0x7f00000000c0)=0x87) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000100), 0x80000, 0x0) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) r4 = syz_io_uring_setup(0x5a35, &(0x7f00000001c0)={0x0, 0x25c9, 0x80, 0x3, 0x1d3, 0x0, r3}, &(0x7f0000000140), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000280)=r2, 0x1) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) 07:59:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote, r1}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'gretap0\x00', r1, 0x700, 0x8000, 0x3f, 0x0, {{0xa, 0x4, 0x1, 0x4, 0x28, 0x68, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @generic={0x44, 0x12, "eaf2a8c9fd686525bd81815cf8c6fc8b"}]}}}}}) r2 = socket(0x29, 0x5, 0x10000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x1403, 0x200, 0x70bd2b, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4000) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg1\x00'}) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x800) 07:59:13 executing program 3: shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x1000) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x80800) 07:59:13 executing program 1: getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000000)=""/135, &(0x7f00000000c0)=0x87) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000100), 0x80000, 0x0) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) (async) r4 = syz_io_uring_setup(0x5a35, &(0x7f00000001c0)={0x0, 0x25c9, 0x80, 0x3, 0x1d3, 0x0, r3}, &(0x7f0000000140), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000280)=r2, 0x1) (async) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) 07:59:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote, r1}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'gretap0\x00', r1, 0x700, 0x8000, 0x3f, 0x0, {{0xa, 0x4, 0x1, 0x4, 0x28, 0x68, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @generic={0x44, 0x12, "eaf2a8c9fd686525bd81815cf8c6fc8b"}]}}}}}) r2 = socket(0x29, 0x5, 0x10000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x1403, 0x200, 0x70bd2b, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4000) (async) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg1\x00'}) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x800) 07:59:13 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) accept4$packet(r0, 0x0, 0x0, 0x800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x7, 0xaf45}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x400}, @window={0x3, 0x2, 0x9}, @sack_perm, @sack_perm], 0x7) 07:59:13 executing program 0: r0 = openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) (async) write$eventfd(r2, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x14, 0x0, r2, @prog_id}, 0x20) r3 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) r5 = openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f00000000c0)={r1, 0x9, 0x8, r5}) (async) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f00000000c0)={r1, 0x9, 0x8, r5}) 07:59:13 executing program 1: getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000000)=""/135, &(0x7f00000000c0)=0x87) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async, rerun: 32) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 32) write$eventfd(r0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000100), 0x80000, 0x0) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) r4 = syz_io_uring_setup(0x5a35, &(0x7f00000001c0)={0x0, 0x25c9, 0x80, 0x3, 0x1d3, 0x0, r3}, &(0x7f0000000140), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000280)=r2, 0x1) (async) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) 07:59:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote, r1}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'gretap0\x00', r1, 0x700, 0x8000, 0x3f, 0x0, {{0xa, 0x4, 0x1, 0x4, 0x28, 0x68, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @generic={0x44, 0x12, "eaf2a8c9fd686525bd81815cf8c6fc8b"}]}}}}}) r2 = socket(0x29, 0x5, 0x10000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x1403, 0x200, 0x70bd2b, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4000) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg1\x00'}) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x800) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote, r1}, 0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'gretap0\x00', r1, 0x700, 0x8000, 0x3f, 0x0, {{0xa, 0x4, 0x1, 0x4, 0x28, 0x68, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @generic={0x44, 0x12, "eaf2a8c9fd686525bd81815cf8c6fc8b"}]}}}}}) (async) socket(0x29, 0x5, 0x10000) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x1403, 0x200, 0x70bd2b, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4000) (async) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg1\x00'}) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x800) (async) 07:59:13 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) accept4$packet(r0, 0x0, 0x0, 0x800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x7, 0xaf45}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x400}, @window={0x3, 0x2, 0x9}, @sack_perm, @sack_perm], 0x7) (async) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x7, 0xaf45}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x400}, @window={0x3, 0x2, 0x9}, @sack_perm, @sack_perm], 0x7) 07:59:13 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:13 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) accept4$packet(r0, 0x0, 0x0, 0x800) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x7, 0xaf45}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x400}, @window={0x3, 0x2, 0x9}, @sack_perm, @sack_perm], 0x7) 07:59:13 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:13 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:13 executing program 3: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) 07:59:13 executing program 0: r0 = openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x14, 0x0, r2, @prog_id}, 0x20) r3 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) r5 = openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f00000000c0)={r1, 0x9, 0x8, r5}) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r1, 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r2, 0x0, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x14, 0x0, r2, @prog_id}, 0x20) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r4, 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f00000000c0)={r1, 0x9, 0x8, r5}) (async) 07:59:13 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) 07:59:13 executing program 3: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) 07:59:13 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = socket(0x3, 0x80000, 0x2) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000000)=0x5, 0x4) 07:59:13 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async, rerun: 64) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 64) write$eventfd(r1, 0x0, 0x0) (async, rerun: 32) r2 = socket(0x3, 0x80000, 0x2) (rerun: 32) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000000)=0x5, 0x4) 07:59:13 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) 07:59:13 executing program 3: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) 07:59:14 executing program 0: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000280), 0x701240, 0x0) r0 = syz_io_uring_setup(0x933, &(0x7f0000000140)={0x0, 0x9ab6, 0x200, 0x0, 0x2b9}, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000240), 0x1) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x29, 0xff, 0x2, 0x1000, 0x24, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x10, 0x20, 0x1, 0x1}}) 07:59:14 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) socket(0x3, 0x80000, 0x2) (async) r2 = socket(0x3, 0x80000, 0x2) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000000)=0x5, 0x4) 07:59:14 executing program 3: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x4040, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xfff, @none, 0x7}, 0xe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r1, 0x0, 0x0, 0x80000) 07:59:14 executing program 2: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:14 executing program 3: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x4040, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xfff, @none, 0x7}, 0xe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r1, 0x0, 0x0, 0x80000) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x4040, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xfff, @none, 0x7}, 0xe) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) accept4$packet(r1, 0x0, 0x0, 0x80000) (async) 07:59:14 executing program 0: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async, rerun: 64) openat$kvm(0xffffff9c, &(0x7f0000000280), 0x701240, 0x0) (async, rerun: 64) r0 = syz_io_uring_setup(0x933, &(0x7f0000000140)={0x0, 0x9ab6, 0x200, 0x0, 0x2b9}, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000240), 0x1) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x29, 0xff, 0x2, 0x1000, 0x24, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x10, 0x20, 0x1, 0x1}}) 07:59:14 executing program 2: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) write$eventfd(r1, 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:14 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:14 executing program 3: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x4040, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xfff, @none, 0x7}, 0xe) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r1, 0x0, 0x0, 0x80000) 07:59:14 executing program 0: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000280), 0x701240, 0x0) r0 = syz_io_uring_setup(0x933, &(0x7f0000000140)={0x0, 0x9ab6, 0x200, 0x0, 0x2b9}, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000240), 0x1) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x29, 0xff, 0x2, 0x1000, 0x24, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x10, 0x20, 0x1, 0x1}}) 07:59:14 executing program 2: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000000040)) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:14 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) accept4$packet(r0, 0x0, 0x0, 0x80000) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000140), 0x82000, 0x0) read$eventfd(r1, &(0x7f00000001c0), 0x8) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) setsockopt$packet_int(r4, 0x107, 0x7, &(0x7f0000000100)=0x5, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote, r6}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', r6, 0x29, 0x1, 0xf9, 0x8, 0x4, @remote, @mcast2, 0x8000, 0x700, 0x1, 0x6}}) write$eventfd(r2, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 07:59:14 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000000914020401000000006458daa8d6644b3204c9fe44d949c9f0d41a355cab9cd009e2cd1a2b134e09953c1c672c2406e5293fe06426c3bdcc0eacde1a9cb326b24a9c962976729a2cd1deb86f3e4624f0e916f4ba2845fd4203efdfbab620dc3929db48e99340025e5735108fc7a300748836dbd0d2761da7bee75d77358c97ac031fd628b5ca93eda04f47809e9cd23f7ec600bea8ddf0f11dec39b5fa427f17dd28205f0af0edc6d7112a914f8bee3a8ae3828388fe2b595df81dd5e06fca4e1485466452eec4d6e53d9d41057d2eb600d8fe98f0bcb0543292e8db45124eb6aee634dede37d972150b0df51b3e54fb00"/255], 0x18}, 0x1, 0x0, 0x0, 0x40844}, 0x4000844) openat$binder_debug(0xffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000140), 0x412001, 0x0) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={0xffffffffffffffff, 0x101, 0x0, r3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'sit0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x0, 0x20, 0x3f, 0x6, {{0x1f, 0x4, 0x3, 0x8, 0x7c, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast2, @loopback, {[@timestamp_addr={0x44, 0x1c, 0x28, 0x1, 0xc, [{@dev={0xac, 0x14, 0x14, 0xf}, 0x301e}, {@broadcast, 0x80000001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @noop, @timestamp_addr={0x44, 0x1c, 0xbb, 0x1, 0x7, [{@private=0xa010100, 0x4}, {@empty, 0xfffffff9}, {@loopback, 0x40}]}, @ssrr={0x89, 0x17, 0xd9, [@loopback, @empty, @loopback, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x18, 0xe9, 0x0, 0xf, [0x2, 0xfffffff9, 0x55, 0xfffffffb, 0x1f]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0xa8, r5, 0x8, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0xfffffdfe, 0x2, 'caif0\x00'}]}, @HEADER={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0xaac7ebf3b1b7fa6}, 0x20040004) socket$nl_rdma(0x10, 0x3, 0x14) 07:59:14 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0xc420c0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) 07:59:14 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) accept4$packet(r0, 0x0, 0x0, 0x80000) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000140), 0x82000, 0x0) read$eventfd(r1, &(0x7f00000001c0), 0x8) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) setsockopt$packet_int(r4, 0x107, 0x7, &(0x7f0000000100)=0x5, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote, r6}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', r6, 0x29, 0x1, 0xf9, 0x8, 0x4, @remote, @mcast2, 0x8000, 0x700, 0x1, 0x6}}) write$eventfd(r2, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r0, 0x0, 0x0) (async) accept4$packet(r0, 0x0, 0x0, 0x80000) (async) openat$hwrng(0xffffff9c, &(0x7f0000000140), 0x82000, 0x0) (async) read$eventfd(r1, &(0x7f00000001c0), 0x8) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r3, 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r4, 0x0, 0x0) (async) setsockopt$packet_int(r4, 0x107, 0x7, &(0x7f0000000100)=0x5, 0x4) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)) (async) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote, r6}, 0x14) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', r6, 0x29, 0x1, 0xf9, 0x8, 0x4, @remote, @mcast2, 0x8000, 0x700, 0x1, 0x6}}) (async) write$eventfd(r2, 0x0, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) (async) 07:59:14 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) 07:59:14 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) accept4$packet(r0, 0x0, 0x0, 0x80000) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000140), 0x82000, 0x0) read$eventfd(r1, &(0x7f00000001c0), 0x8) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) setsockopt$packet_int(r4, 0x107, 0x7, &(0x7f0000000100)=0x5, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote, r6}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', r6, 0x29, 0x1, 0xf9, 0x8, 0x4, @remote, @mcast2, 0x8000, 0x700, 0x1, 0x6}}) write$eventfd(r2, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r0, 0x0, 0x0) (async) accept4$packet(r0, 0x0, 0x0, 0x80000) (async) openat$hwrng(0xffffff9c, &(0x7f0000000140), 0x82000, 0x0) (async) read$eventfd(r1, &(0x7f00000001c0), 0x8) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r3, 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r4, 0x0, 0x0) (async) setsockopt$packet_int(r4, 0x107, 0x7, &(0x7f0000000100)=0x5, 0x4) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)) (async) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote, r6}, 0x14) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', r6, 0x29, 0x1, 0xf9, 0x8, 0x4, @remote, @mcast2, 0x8000, 0x700, 0x1, 0x6}}) (async) write$eventfd(r2, 0x0, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) (async) 07:59:14 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0xc420c0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) 07:59:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xffffffff, 0x2}, 0x20) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x24, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_MRU={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000040)=[@mss={0x2, 0x8}, @sack_perm, @mss={0x2, 0xfffffff8}], 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote, r6}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000100)={'sit0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="d1b096c73ba4eb9ab8174e96b96f1fabe1f48c7b58a6d1c9ea50c43cd9c66a", @ANYRES32=r6, @ANYBLOB="0010002000000005000000204214008800660000802f9078ac141437ac1414aa442824b0000000090000037e000000810000001f0000000100000005000000090000000200001200071736ac1e0001e00000020a010102640101010a0101004424d3910000000000000000e00000010000077fffffffff000000010000000000000807820cd7a6201036b50f5489104404315100"]}) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:14 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000000914020401000000006458daa8d6644b3204c9fe44d949c9f0d41a355cab9cd009e2cd1a2b134e09953c1c672c2406e5293fe06426c3bdcc0eacde1a9cb326b24a9c962976729a2cd1deb86f3e4624f0e916f4ba2845fd4203efdfbab620dc3929db48e99340025e5735108fc7a300748836dbd0d2761da7bee75d77358c97ac031fd628b5ca93eda04f47809e9cd23f7ec600bea8ddf0f11dec39b5fa427f17dd28205f0af0edc6d7112a914f8bee3a8ae3828388fe2b595df81dd5e06fca4e1485466452eec4d6e53d9d41057d2eb600d8fe98f0bcb0543292e8db45124eb6aee634dede37d972150b0df51b3e54fb00"/255], 0x18}, 0x1, 0x0, 0x0, 0x40844}, 0x4000844) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r1 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000140), 0x412001, 0x0) (async) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) (async) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={0xffffffffffffffff, 0x101, 0x0, r3}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x1c}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'sit0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x0, 0x20, 0x3f, 0x6, {{0x1f, 0x4, 0x3, 0x8, 0x7c, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast2, @loopback, {[@timestamp_addr={0x44, 0x1c, 0x28, 0x1, 0xc, [{@dev={0xac, 0x14, 0x14, 0xf}, 0x301e}, {@broadcast, 0x80000001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @noop, @timestamp_addr={0x44, 0x1c, 0xbb, 0x1, 0x7, [{@private=0xa010100, 0x4}, {@empty, 0xfffffff9}, {@loopback, 0x40}]}, @ssrr={0x89, 0x17, 0xd9, [@loopback, @empty, @loopback, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x18, 0xe9, 0x0, 0xf, [0x2, 0xfffffff9, 0x55, 0xfffffffb, 0x1f]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0xa8, r5, 0x8, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0xfffffdfe, 0x2, 'caif0\x00'}]}, @HEADER={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0xaac7ebf3b1b7fa6}, 0x20040004) (async) socket$nl_rdma(0x10, 0x3, 0x14) 07:59:14 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) 07:59:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xffffffff, 0x2}, 0x20) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x24, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_MRU={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x14) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000040)=[@mss={0x2, 0x8}, @sack_perm, @mss={0x2, 0xfffffff8}], 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote, r6}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000100)={'sit0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="d1b096c73ba4eb9ab8174e96b96f1fabe1f48c7b58a6d1c9ea50c43cd9c66a", @ANYRES32=r6, @ANYBLOB="0010002000000005000000204214008800660000802f9078ac141437ac1414aa442824b0000000090000037e000000810000001f0000000100000005000000090000000200001200071736ac1e0001e00000020a010102640101010a0101004424d3910000000000000000e00000010000077fffffffff000000010000000000000807820cd7a6201036b50f5489104404315100"]}) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async, rerun: 32) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xffffffff, 0x2}, 0x20) (async, rerun: 32) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x24, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_MRU={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x14) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000040)=[@mss={0x2, 0x8}, @sack_perm, @mss={0x2, 0xfffffff8}], 0x3) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote, r6}, 0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000100)={'sit0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="d1b096c73ba4eb9ab8174e96b96f1fabe1f48c7b58a6d1c9ea50c43cd9c66a", @ANYRES32=r6, @ANYBLOB="0010002000000005000000204214008800660000802f9078ac141437ac1414aa442824b0000000090000037e000000810000001f0000000100000005000000090000000200001200071736ac1e0001e00000020a010102640101010a0101004424d3910000000000000000e00000010000077fffffffff000000010000000000000807820cd7a6201036b50f5489104404315100"]}) (async) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:14 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x82b02, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f0000000040), 0x1, r4, 0x1}) r5 = getpid() r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000003b4d290cb33895e1805", @ANYRES16=r6, @ANYBLOB="040029bd7000fbdbdf25060000000500210000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x9d9ce7cd029fa062}, 0x8000) syz_open_procfs$pagemap(r5, 0x0) r7 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f00000000c0)={r7}) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:14 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0xc420c0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) (rerun: 64) 07:59:14 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) (async) write$eventfd(r2, 0x0, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x82b02, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) (async) write$eventfd(r4, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f0000000040), 0x1, r4, 0x1}) r5 = getpid() r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000003b4d290cb33895e1805", @ANYRES16=r6, @ANYBLOB="040029bd7000fbdbdf25060000000500210000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x9d9ce7cd029fa062}, 0x8000) syz_open_procfs$pagemap(r5, 0x0) r7 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f00000000c0)={r7}) (async) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f00000000c0)={r7}) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:14 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 32) write$eventfd(r0, 0x0, 0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) (async, rerun: 32) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 32) write$eventfd(r2, 0x0, 0x0) (async, rerun: 32) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x82b02, 0x0) (async, rerun: 32) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f0000000040), 0x1, r4, 0x1}) r5 = getpid() (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000003b4d290cb33895e1805", @ANYRES16=r6, @ANYBLOB="040029bd7000fbdbdf25060000000500210000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x9d9ce7cd029fa062}, 0x8000) (async) syz_open_procfs$pagemap(r5, 0x0) (async) r7 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f00000000c0)={r7}) (async) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:14 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000000914020401000000006458daa8d6644b3204c9fe44d949c9f0d41a355cab9cd009e2cd1a2b134e09953c1c672c2406e5293fe06426c3bdcc0eacde1a9cb326b24a9c962976729a2cd1deb86f3e4624f0e916f4ba2845fd4203efdfbab620dc3929db48e99340025e5735108fc7a300748836dbd0d2761da7bee75d77358c97ac031fd628b5ca93eda04f47809e9cd23f7ec600bea8ddf0f11dec39b5fa427f17dd28205f0af0edc6d7112a914f8bee3a8ae3828388fe2b595df81dd5e06fca4e1485466452eec4d6e53d9d41057d2eb600d8fe98f0bcb0543292e8db45124eb6aee634dede37d972150b0df51b3e54fb00"/255], 0x18}, 0x1, 0x0, 0x0, 0x40844}, 0x4000844) openat$binder_debug(0xffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000140), 0x412001, 0x0) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={0xffffffffffffffff, 0x101, 0x0, r3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'sit0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x0, 0x20, 0x3f, 0x6, {{0x1f, 0x4, 0x3, 0x8, 0x7c, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast2, @loopback, {[@timestamp_addr={0x44, 0x1c, 0x28, 0x1, 0xc, [{@dev={0xac, 0x14, 0x14, 0xf}, 0x301e}, {@broadcast, 0x80000001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @noop, @timestamp_addr={0x44, 0x1c, 0xbb, 0x1, 0x7, [{@private=0xa010100, 0x4}, {@empty, 0xfffffff9}, {@loopback, 0x40}]}, @ssrr={0x89, 0x17, 0xd9, [@loopback, @empty, @loopback, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x18, 0xe9, 0x0, 0xf, [0x2, 0xfffffff9, 0x55, 0xfffffffb, 0x1f]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0xa8, r5, 0x8, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0xfffffdfe, 0x2, 'caif0\x00'}]}, @HEADER={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0xaac7ebf3b1b7fa6}, 0x20040004) socket$nl_rdma(0x10, 0x3, 0x14) openat$binder_debug(0xffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000000914020401000000006458daa8d6644b3204c9fe44d949c9f0d41a355cab9cd009e2cd1a2b134e09953c1c672c2406e5293fe06426c3bdcc0eacde1a9cb326b24a9c962976729a2cd1deb86f3e4624f0e916f4ba2845fd4203efdfbab620dc3929db48e99340025e5735108fc7a300748836dbd0d2761da7bee75d77358c97ac031fd628b5ca93eda04f47809e9cd23f7ec600bea8ddf0f11dec39b5fa427f17dd28205f0af0edc6d7112a914f8bee3a8ae3828388fe2b595df81dd5e06fca4e1485466452eec4d6e53d9d41057d2eb600d8fe98f0bcb0543292e8db45124eb6aee634dede37d972150b0df51b3e54fb00"/255], 0x18}, 0x1, 0x0, 0x0, 0x40844}, 0x4000844) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) openat$vcsu(0xffffff9c, &(0x7f0000000140), 0x412001, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r3, 0x0, 0x0) (async) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={0xffffffffffffffff, 0x101, 0x0, r3}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x1c}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'sit0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x0, 0x20, 0x3f, 0x6, {{0x1f, 0x4, 0x3, 0x8, 0x7c, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast2, @loopback, {[@timestamp_addr={0x44, 0x1c, 0x28, 0x1, 0xc, [{@dev={0xac, 0x14, 0x14, 0xf}, 0x301e}, {@broadcast, 0x80000001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @noop, @timestamp_addr={0x44, 0x1c, 0xbb, 0x1, 0x7, [{@private=0xa010100, 0x4}, {@empty, 0xfffffff9}, {@loopback, 0x40}]}, @ssrr={0x89, 0x17, 0xd9, [@loopback, @empty, @loopback, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x18, 0xe9, 0x0, 0xf, [0x2, 0xfffffff9, 0x55, 0xfffffffb, 0x1f]}]}}}}}) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0xa8, r5, 0x8, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0xfffffdfe, 0x2, 'caif0\x00'}]}, @HEADER={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0xaac7ebf3b1b7fa6}, 0x20040004) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) 07:59:14 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) 07:59:14 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x12480, 0x0) 07:59:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 07:59:14 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x12480, 0x0) 07:59:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) (async) accept4$packet(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (async) 07:59:14 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x12480, 0x0) 07:59:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 07:59:14 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x101300, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000040), 0xc900, 0x0) 07:59:14 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote, r5}, 0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote, r7}, 0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1d0, r1, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4000000}, 0xc001) 07:59:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x4) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:14 executing program 2: ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"0ef8e7e6f0e291b87c28a21a8779a1542b2d799785c372f4177ca4a6afbda415", 0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000240)={"866c44553c16f5622feacea6efe13b6b1a2a36511e387e7768cd11f14de0a9ce", r0}) ioctl$MEDIA_REQUEST_IOC_QUEUE(r1, 0x7c80, 0x0) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000040)={"d7a127f361e0a0580849cf73ce5563d4bf541484d4e58a5eeafab66fbf3e27e3"}) r2 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0xb4000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xf800}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) ioctl$KVM_CREATE_VM(r2, 0x541b, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x1000, 0x3}) 07:59:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x4) (async) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:14 executing program 2: ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"0ef8e7e6f0e291b87c28a21a8779a1542b2d799785c372f4177ca4a6afbda415", 0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000240)={"866c44553c16f5622feacea6efe13b6b1a2a36511e387e7768cd11f14de0a9ce", r0}) ioctl$MEDIA_REQUEST_IOC_QUEUE(r1, 0x7c80, 0x0) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000040)={"d7a127f361e0a0580849cf73ce5563d4bf541484d4e58a5eeafab66fbf3e27e3"}) r2 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0xb4000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xf800}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) ioctl$KVM_CREATE_VM(r2, 0x541b, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x1000, 0x3}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"0ef8e7e6f0e291b87c28a21a8779a1542b2d799785c372f4177ca4a6afbda415"}) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000240)={"866c44553c16f5622feacea6efe13b6b1a2a36511e387e7768cd11f14de0a9ce", r0}) (async) ioctl$MEDIA_REQUEST_IOC_QUEUE(r1, 0x7c80, 0x0) (async) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000040)={"d7a127f361e0a0580849cf73ce5563d4bf541484d4e58a5eeafab66fbf3e27e3"}) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0xb4000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xf800}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) (async) ioctl$KVM_CREATE_VM(r2, 0x541b, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r4, 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x1000, 0x3}) (async) 07:59:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x4) accept4$packet(r0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r1, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x4) (async) accept4$packet(r0, 0x0, 0x0, 0x0) (async) 07:59:14 executing program 2: ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"0ef8e7e6f0e291b87c28a21a8779a1542b2d799785c372f4177ca4a6afbda415", 0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000240)={"866c44553c16f5622feacea6efe13b6b1a2a36511e387e7768cd11f14de0a9ce", r0}) (async) ioctl$MEDIA_REQUEST_IOC_QUEUE(r1, 0x7c80, 0x0) (async) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000040)={"d7a127f361e0a0580849cf73ce5563d4bf541484d4e58a5eeafab66fbf3e27e3"}) (async, rerun: 32) r2 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0xb4000, 0x0) (rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xf800}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) ioctl$KVM_CREATE_VM(r2, 0x541b, 0x0) (async, rerun: 64) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 64) write$eventfd(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x1000, 0x3}) 07:59:14 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x101300, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000040), 0xc900, 0x0) 07:59:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x80000) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x34}, 0x1, 0x0, 0x0, 0x8020}, 0xc0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) read$eventfd(r1, &(0x7f00000002c0), 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r2, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x12}}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0xa}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x80) 07:59:14 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x10200, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = getgid() getgroups(0x9, &(0x7f0000000000)=[r1, 0xffffffffffffffff, 0xee00, 0xee00, 0xee01, 0xee01, 0xffffffffffffffff, 0x0, 0x0]) 07:59:14 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote, r5}, 0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote, r7}, 0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1d0, r1, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4000000}, 0xc001) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) (async) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) (async) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote, r5}, 0x14) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)) (async) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote, r7}, 0x14) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1d0, r1, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4000000}, 0xc001) (async) 07:59:14 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x10200, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) r1 = getgid() getgroups(0x9, &(0x7f0000000000)=[r1, 0xffffffffffffffff, 0xee00, 0xee00, 0xee01, 0xee01, 0xffffffffffffffff, 0x0, 0x0]) 07:59:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x80000) (async) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x34}, 0x1, 0x0, 0x0, 0x8020}, 0xc0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) read$eventfd(r1, &(0x7f00000002c0), 0x8) (async) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r2, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x12}}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0xa}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x80) 07:59:14 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x10200, 0x0) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x10200, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = getgid() getgroups(0x9, &(0x7f0000000000)=[r1, 0xffffffffffffffff, 0xee00, 0xee00, 0xee01, 0xee01, 0xffffffffffffffff, 0x0, 0x0]) 07:59:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x80000) (async) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x34}, 0x1, 0x0, 0x0, 0x8020}, 0xc0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) read$eventfd(r1, &(0x7f00000002c0), 0x8) (async) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r2, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x12}}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0xa}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x80) 07:59:14 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x101300, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) openat$hwrng(0xffffff9c, &(0x7f0000000040), 0xc900, 0x0) (rerun: 32) 07:59:14 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x2a0000, 0x0) write$cgroup_type(r2, &(0x7f0000000080), 0x9) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0xdfffffff}) 07:59:14 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x800) 07:59:15 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x800) (rerun: 32) 07:59:15 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async, rerun: 32) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (rerun: 32) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote, r5}, 0x14) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote, r7}, 0x14) (async, rerun: 64) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1d0, r1, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4000000}, 0xc001) (rerun: 64) 07:59:15 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x2a0000, 0x0) write$cgroup_type(r2, &(0x7f0000000080), 0x9) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0xdfffffff}) 07:59:15 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x2a0000, 0x0) write$cgroup_type(r2, &(0x7f0000000080), 0x9) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0xdfffffff}) 07:59:15 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x800) 07:59:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6a5e957e6609bb2d0f04edb809eb90ba14000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000b000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:17 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x4203, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="3deaa9d5f3997fd1747b76ff4572bb291692f1faa7192b64bc22ae5d4cf1190572b4eb2fa74e5c323f27d741b44c0c0346e7f8", 0x33, 0x80, 0x0, 0x0) 07:59:17 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', 0x0, 0x8}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) getpeername$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x14) bind$packet(r1, &(0x7f0000000340)={0x11, 0xf7, r7, 0x1, 0x9, 0x6, @remote}, 0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote, r6}, 0x14) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000080)={@local, r9}, 0x14) r10 = openat$vcsu(0xffffff9c, &(0x7f0000000280), 0x490800, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="04010000", @ANYRES16=r0, @ANYBLOB="100026bd7000ffdbdf250d00000020000180140002007866726d30000000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="0c000180080003000100000028000180140002007767320000000000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="200001800800030002000000140002006970365f7674693000000000000000000400018028000180140002006772657461703000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="01aa2000", @ANYRES32=r6, @ANYBLOB="0c000180080003000300000028000180140002006970766c616e31000000000000000000080003000300000008000100", @ANYRES32=r9, @ANYBLOB="1c0001800800030003000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB], 0x104}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000000) r11 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r11, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r11, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5400c02ab5a0fef3ce0000", @ANYRES16=r0, @ANYBLOB="000227bd7000fbdbdf2500000008000600a900000008000800070000000800060006e9cd641d053e850a325d010000000800060000000000080009001c00000008acf3983c5e9fb51dad3b615911e90600f7b7139743b57b00"/98], 0x54}, 0x1, 0x0, 0x0, 0x48890}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote, r12}, 0x14) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r10, &(0x7f00000000c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYBLOB="b0000000", @ANYRES16=0x0, @ANYBLOB="200029bd7000fddbdf25b60df661c246006509000000080007003f0000006174616476300000000cdf1571c59f32a002006970766c616e3000000000000000000008000100"/78, @ANYRES32=0x0, @ANYBLOB="08000800090000005c00018008000300030000000800030001000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800010092027be7fdb096a402f95ba62cc694801ce96c85a5ffe95ca0d60d4265b082342c", @ANYRES32=r12, @ANYBLOB="06000200767863616e31000000000000000000000a0002006e6574706369300000000000000000000800030001000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20040014}, 0x80) r13 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r14 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r14, 0x6, 0x1d, &(0x7f0000000440)={0x3, 0x8, 0x0, 0x7f, 0x7}, 0x14) 07:59:17 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x8201, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x24, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffff}, {}, {}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x24df396a, 0x0, 0x0, 0x0, 0xffff}, @jmp={0x5, 0x1, 0x5, 0x0, 0xa, 0x6, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x80000001}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[{0x0, 0x5, 0x4, 0xd}, {0x1, 0x3, 0x7, 0xb}], 0x10, 0x4e66}, 0x90) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x108, 0x0, &(0x7f00000007c0)=[@release={0x40046306, 0x1}, @clear_death={0x400c630f, 0x2}, @release={0x40046306, 0x1}, @exit_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x6ab78c9d8588ea0b, 0x0, 0x0, 0x68, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000080), 0x0, 0x0, 0x1e}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/209, 0xd1, 0x1, 0x8}, @flat=@handle={0x73682a85, 0x10b, 0x3}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}}, @exit_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000005c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x0, 0x2, 0x25}}, &(0x7f0000000340)={0x0, 0x18, 0x30}}}, @dead_binder_done, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)={@ptr={0x70742a85, 0x1, &(0x7f0000000640)=""/148, 0x94, 0x1, 0x3a}, @flat=@handle={0x73682a85, 0x1, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000780)={0x0, 0x28, 0x40}}, 0x400}], 0xa, 0x0, &(0x7f0000000900)="33650fde2494e936f89b"}) r3 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x640000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote, r5}, 0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a40)={@ifindex=r5, 0x29, 0x1, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 07:59:17 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x4203, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="3deaa9d5f3997fd1747b76ff4572bb291692f1faa7192b64bc22ae5d4cf1190572b4eb2fa74e5c323f27d741b44c0c0346e7f8", 0x33, 0x80, 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x4203, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="3deaa9d5f3997fd1747b76ff4572bb291692f1faa7192b64bc22ae5d4cf1190572b4eb2fa74e5c323f27d741b44c0c0346e7f8", 0x33, 0x80, 0x0, 0x0) (async) 07:59:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6a5e957e6609bb2d0f04edb809eb90ba14000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000b000000"], 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:17 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x4203, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="3deaa9d5f3997fd1747b76ff4572bb291692f1faa7192b64bc22ae5d4cf1190572b4eb2fa74e5c323f27d741b44c0c0346e7f8", 0x33, 0x80, 0x0, 0x0) 07:59:17 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x8201, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x24, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffff}, {}, {}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x24df396a, 0x0, 0x0, 0x0, 0xffff}, @jmp={0x5, 0x1, 0x5, 0x0, 0xa, 0x6, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x80000001}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[{0x0, 0x5, 0x4, 0xd}, {0x1, 0x3, 0x7, 0xb}], 0x10, 0x4e66}, 0x90) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x108, 0x0, &(0x7f00000007c0)=[@release={0x40046306, 0x1}, @clear_death={0x400c630f, 0x2}, @release={0x40046306, 0x1}, @exit_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x6ab78c9d8588ea0b, 0x0, 0x0, 0x68, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000080), 0x0, 0x0, 0x1e}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/209, 0xd1, 0x1, 0x8}, @flat=@handle={0x73682a85, 0x10b, 0x3}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}}, @exit_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000005c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x0, 0x2, 0x25}}, &(0x7f0000000340)={0x0, 0x18, 0x30}}}, @dead_binder_done, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)={@ptr={0x70742a85, 0x1, &(0x7f0000000640)=""/148, 0x94, 0x1, 0x3a}, @flat=@handle={0x73682a85, 0x1, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000780)={0x0, 0x28, 0x40}}, 0x400}], 0xa, 0x0, &(0x7f0000000900)="33650fde2494e936f89b"}) r3 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x640000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote, r5}, 0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a40)={@ifindex=r5, 0x29, 0x1, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x8201, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x24, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffff}, {}, {}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x24df396a, 0x0, 0x0, 0x0, 0xffff}, @jmp={0x5, 0x1, 0x5, 0x0, 0xa, 0x6, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x80000001}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[{0x0, 0x5, 0x4, 0xd}, {0x1, 0x3, 0x7, 0xb}], 0x10, 0x4e66}, 0x90) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x108, 0x0, &(0x7f00000007c0)=[@release={0x40046306, 0x1}, @clear_death={0x400c630f, 0x2}, @release={0x40046306, 0x1}, @exit_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x6ab78c9d8588ea0b, 0x0, 0x0, 0x68, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000080), 0x0, 0x0, 0x1e}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/209, 0xd1, 0x1, 0x8}, @flat=@handle={0x73682a85, 0x10b, 0x3}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}}, @exit_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000005c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x0, 0x2, 0x25}}, &(0x7f0000000340)={0x0, 0x18, 0x30}}}, @dead_binder_done, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)={@ptr={0x70742a85, 0x1, &(0x7f0000000640)=""/148, 0x94, 0x1, 0x3a}, @flat=@handle={0x73682a85, 0x1, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000780)={0x0, 0x28, 0x40}}, 0x400}], 0xa, 0x0, &(0x7f0000000900)="33650fde2494e936f89b"}) (async) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x640000, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) (async) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote, r5}, 0x14) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a40)={@ifindex=r5, 0x29, 0x1, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) 07:59:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6a5e957e6609bb2d0f04edb809eb90ba14000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000b000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) accept4$packet(r0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6a5e957e6609bb2d0f04edb809eb90ba14000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000b000000"], 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async) accept4$packet(r0, 0x0, 0x0, 0x0) (async) 07:59:17 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x606000, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x501000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000080), 0x4000, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0x541b, 0x0) 07:59:17 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) (async, rerun: 64) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', 0x0, 0x8}, 0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) (async) getpeername$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x14) bind$packet(r1, &(0x7f0000000340)={0x11, 0xf7, r7, 0x1, 0x9, 0x6, @remote}, 0x14) (async) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote, r6}, 0x14) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000080)={@local, r9}, 0x14) (async) r10 = openat$vcsu(0xffffff9c, &(0x7f0000000280), 0x490800, 0x0) (async, rerun: 32) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="04010000", @ANYRES16=r0, @ANYBLOB="100026bd7000ffdbdf250d00000020000180140002007866726d30000000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="0c000180080003000100000028000180140002007767320000000000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="200001800800030002000000140002006970365f7674693000000000000000000400018028000180140002006772657461703000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="01aa2000", @ANYRES32=r6, @ANYBLOB="0c000180080003000300000028000180140002006970766c616e31000000000000000000080003000300000008000100", @ANYRES32=r9, @ANYBLOB="1c0001800800030003000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB], 0x104}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000000) (rerun: 32) r11 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r11, 0x0, 0x0) (async, rerun: 32) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r11, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5400c02ab5a0fef3ce0000", @ANYRES16=r0, @ANYBLOB="000227bd7000fbdbdf2500000008000600a900000008000800070000000800060006e9cd641d053e850a325d010000000800060000000000080009001c00000008acf3983c5e9fb51dad3b615911e90600f7b7139743b57b00"/98], 0x54}, 0x1, 0x0, 0x0, 0x48890}, 0x4000000) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote, r12}, 0x14) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r10, &(0x7f00000000c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYBLOB="b0000000", @ANYRES16=0x0, @ANYBLOB="200029bd7000fddbdf25b60df661c246006509000000080007003f0000006174616476300000000cdf1571c59f32a002006970766c616e3000000000000000000008000100"/78, @ANYRES32=0x0, @ANYBLOB="08000800090000005c00018008000300030000000800030001000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800010092027be7fdb096a402f95ba62cc694801ce96c85a5ffe95ca0d60d4265b082342c", @ANYRES32=r12, @ANYBLOB="06000200767863616e31000000000000000000000a0002006e6574706369300000000000000000000800030001000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20040014}, 0x80) r13 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) r14 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r14, 0x6, 0x1d, &(0x7f0000000440)={0x3, 0x8, 0x0, 0x7f, 0x7}, 0x14) 07:59:17 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x8201, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x24, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffff}, {}, {}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x24df396a, 0x0, 0x0, 0x0, 0xffff}, @jmp={0x5, 0x1, 0x5, 0x0, 0xa, 0x6, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x80000001}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[{0x0, 0x5, 0x4, 0xd}, {0x1, 0x3, 0x7, 0xb}], 0x10, 0x4e66}, 0x90) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x108, 0x0, &(0x7f00000007c0)=[@release={0x40046306, 0x1}, @clear_death={0x400c630f, 0x2}, @release={0x40046306, 0x1}, @exit_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x6ab78c9d8588ea0b, 0x0, 0x0, 0x68, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000080), 0x0, 0x0, 0x1e}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/209, 0xd1, 0x1, 0x8}, @flat=@handle={0x73682a85, 0x10b, 0x3}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}}, @exit_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000005c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x0, 0x2, 0x25}}, &(0x7f0000000340)={0x0, 0x18, 0x30}}}, @dead_binder_done, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)={@ptr={0x70742a85, 0x1, &(0x7f0000000640)=""/148, 0x94, 0x1, 0x3a}, @flat=@handle={0x73682a85, 0x1, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000780)={0x0, 0x28, 0x40}}, 0x400}], 0xa, 0x0, &(0x7f0000000900)="33650fde2494e936f89b"}) (async) r3 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x640000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote, r5}, 0x14) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a40)={@ifindex=r5, 0x29, 0x1, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 07:59:17 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x606000, 0x0) (async, rerun: 64) r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x501000, 0x0) (rerun: 64) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000080), 0x4000, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0x541b, 0x0) 07:59:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x0, 0xa0000000, 0x30, @dev={0xfe, 0x80, '\x00', 0x14}, @mcast1, 0x80, 0x8, 0x9, 0x559}}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x11) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x101}, 0x14}}, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r4, 0xf08, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010102}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000840}, 0x8880) accept4$packet(r2, 0x0, 0x0, 0x0) r5 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x4200, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) 07:59:17 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x606000, 0x0) (async) openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x606000, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x501000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000080), 0x4000, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0x541b, 0x0) 07:59:17 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x14) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x140f, 0x0, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x38}}, 0x4040004) 07:59:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x0, 0xa0000000, 0x30, @dev={0xfe, 0x80, '\x00', 0x14}, @mcast1, 0x80, 0x8, 0x9, 0x559}}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x11) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x14) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x101}, 0x14}}, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r4, 0xf08, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010102}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000840}, 0x8880) (async) accept4$packet(r2, 0x0, 0x0, 0x0) (async) r5 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x4200, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) 07:59:17 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x112001}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x140b, 0x10, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x48}}, 0xc010) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) socket$l2tp(0x2, 0x2, 0x73) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x9) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000280), 0x200180, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x1000, 0x1}) 07:59:17 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) (async, rerun: 32) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', 0x0, 0x8}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) (async) getpeername$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x14) bind$packet(r1, &(0x7f0000000340)={0x11, 0xf7, r7, 0x1, 0x9, 0x6, @remote}, 0x14) (async) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote, r6}, 0x14) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000080)={@local, r9}, 0x14) r10 = openat$vcsu(0xffffff9c, &(0x7f0000000280), 0x490800, 0x0) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="04010000", @ANYRES16=r0, @ANYBLOB="100026bd7000ffdbdf250d00000020000180140002007866726d30000000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="0c000180080003000100000028000180140002007767320000000000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="200001800800030002000000140002006970365f7674693000000000000000000400018028000180140002006772657461703000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="01aa2000", @ANYRES32=r6, @ANYBLOB="0c000180080003000300000028000180140002006970766c616e31000000000000000000080003000300000008000100", @ANYRES32=r9, @ANYBLOB="1c0001800800030003000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB], 0x104}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000000) r11 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r11, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r11, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5400c02ab5a0fef3ce0000", @ANYRES16=r0, @ANYBLOB="000227bd7000fbdbdf2500000008000600a900000008000800070000000800060006e9cd641d053e850a325d010000000800060000000000080009001c00000008acf3983c5e9fb51dad3b615911e90600f7b7139743b57b00"/98], 0x54}, 0x1, 0x0, 0x0, 0x48890}, 0x4000000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote, r12}, 0x14) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r10, &(0x7f00000000c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYBLOB="b0000000", @ANYRES16=0x0, @ANYBLOB="200029bd7000fddbdf25b60df661c246006509000000080007003f0000006174616476300000000cdf1571c59f32a002006970766c616e3000000000000000000008000100"/78, @ANYRES32=0x0, @ANYBLOB="08000800090000005c00018008000300030000000800030001000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800010092027be7fdb096a402f95ba62cc694801ce96c85a5ffe95ca0d60d4265b082342c", @ANYRES32=r12, @ANYBLOB="06000200767863616e31000000000000000000000a0002006e6574706369300000000000000000000800030001000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20040014}, 0x80) (async) r13 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) r14 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r14, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r14, 0x6, 0x1d, &(0x7f0000000440)={0x3, 0x8, 0x0, 0x7f, 0x7}, 0x14) 07:59:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x0, 0xa0000000, 0x30, @dev={0xfe, 0x80, '\x00', 0x14}, @mcast1, 0x80, 0x8, 0x9, 0x559}}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x11) (async, rerun: 64) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x14) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) (rerun: 64) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x101}, 0x14}}, 0x0) (async) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r4, 0xf08, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010102}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000840}, 0x8880) (async) accept4$packet(r2, 0x0, 0x0, 0x0) (async) r5 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x4200, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) 07:59:17 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x112001}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x140b, 0x10, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x48}}, 0xc010) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) socket$l2tp(0x2, 0x2, 0x73) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x9) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000280), 0x200180, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x1000, 0x1}) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r1, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x112001}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x140b, 0x10, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x48}}, 0xc010) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x9) (async) openat$vcsu(0xffffff9c, &(0x7f0000000280), 0x200180, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x1000, 0x1}) (async) 07:59:17 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x112001}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x140b, 0x10, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x48}}, 0xc010) (async, rerun: 32) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (rerun: 32) socket$l2tp(0x2, 0x2, 0x73) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x9) (async) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000280), 0x200180, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x1000, 0x1}) 07:59:17 executing program 1: r0 = getgid() getgroups(0x8, &(0x7f0000000000)=[0xee00, 0x0, 0xffffffffffffffff, 0xee00, 0xee01, 0xffffffffffffffff, r0, 0x0]) r1 = socket(0xf, 0x80803, 0xff) syz_genetlink_get_family_id$ethtool(0x0, r1) r2 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x210000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) 07:59:17 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x14) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x140f, 0x0, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x38}}, 0x4040004) (rerun: 32) 07:59:17 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000040)=0x8000, 0x4) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x40010, r1, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:17 executing program 1: r0 = getgid() getgroups(0x8, &(0x7f0000000000)=[0xee00, 0x0, 0xffffffffffffffff, 0xee00, 0xee01, 0xffffffffffffffff, r0, 0x0]) (async) r1 = socket(0xf, 0x80803, 0xff) syz_genetlink_get_family_id$ethtool(0x0, r1) (async) r2 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x210000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) 07:59:17 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000040)=0x8000, 0x4) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x40010, r1, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:17 executing program 1: r0 = getgid() getgroups(0x8, &(0x7f0000000000)=[0xee00, 0x0, 0xffffffffffffffff, 0xee00, 0xee01, 0xffffffffffffffff, r0, 0x0]) (async, rerun: 64) r1 = socket(0xf, 0x80803, 0xff) (rerun: 64) syz_genetlink_get_family_id$ethtool(0x0, r1) (async) r2 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x210000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:17 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000040)=0x8000, 0x4) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x40010, r1, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r1, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) accept4$packet(r0, 0x0, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) (async) 07:59:20 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x14) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x140f, 0x0, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x38}}, 0x4040004) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x14) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x140f, 0x0, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x38}}, 0x4040004) (async) 07:59:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) accept4$packet(r1, 0x0, 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x13, &(0x7f0000000040)="20ea53bc554566ded0b10f48f6eeb9d5e076f62d56e722a118099ccba6cdf15ae96f6d56d400a566076c0ba86bbd00931aac7f84f1f3b092e1cc053e4559467f174224683fe7c4ab5867468b084ae9ea6ff2d612c52363b675e13b19694227c6bb4b14f125b4084610a05866691fdd2535b60364ae08e57fd9d770443f4b6b9358c2a0a580a3e9efc67e622df1864530508905726b66f8de9e4a9e525f8b02f7c8beba575b5f71fe9c74719c8ebe00662ef3a6", 0xb3) 07:59:20 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x204100, 0x0) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x20) 07:59:20 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x88a00, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) accept4$packet(r1, 0x0, 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x13, &(0x7f0000000040)="20ea53bc554566ded0b10f48f6eeb9d5e076f62d56e722a118099ccba6cdf15ae96f6d56d400a566076c0ba86bbd00931aac7f84f1f3b092e1cc053e4559467f174224683fe7c4ab5867468b084ae9ea6ff2d612c52363b675e13b19694227c6bb4b14f125b4084610a05866691fdd2535b60364ae08e57fd9d770443f4b6b9358c2a0a580a3e9efc67e622df1864530508905726b66f8de9e4a9e525f8b02f7c8beba575b5f71fe9c74719c8ebe00662ef3a6", 0xb3) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r1, 0x0, 0x0) (async) accept4$packet(r1, 0x0, 0x0, 0x0) (async) setsockopt$packet_buf(r1, 0x107, 0x13, &(0x7f0000000040)="20ea53bc554566ded0b10f48f6eeb9d5e076f62d56e722a118099ccba6cdf15ae96f6d56d400a566076c0ba86bbd00931aac7f84f1f3b092e1cc053e4559467f174224683fe7c4ab5867468b084ae9ea6ff2d612c52363b675e13b19694227c6bb4b14f125b4084610a05866691fdd2535b60364ae08e57fd9d770443f4b6b9358c2a0a580a3e9efc67e622df1864530508905726b66f8de9e4a9e525f8b02f7c8beba575b5f71fe9c74719c8ebe00662ef3a6", 0xb3) (async) 07:59:20 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x204100, 0x0) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x20) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x204100, 0x0) (async) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x20) (async) 07:59:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) accept4$packet(r1, 0x0, 0x0, 0x0) (async) setsockopt$packet_buf(r1, 0x107, 0x13, &(0x7f0000000040)="20ea53bc554566ded0b10f48f6eeb9d5e076f62d56e722a118099ccba6cdf15ae96f6d56d400a566076c0ba86bbd00931aac7f84f1f3b092e1cc053e4559467f174224683fe7c4ab5867468b084ae9ea6ff2d612c52363b675e13b19694227c6bb4b14f125b4084610a05866691fdd2535b60364ae08e57fd9d770443f4b6b9358c2a0a580a3e9efc67e622df1864530508905726b66f8de9e4a9e525f8b02f7c8beba575b5f71fe9c74719c8ebe00662ef3a6", 0xb3) 07:59:20 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) openat$vcsu(0xffffff9c, &(0x7f00000001c0), 0x10000, 0x0) r5 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r5, 0x0, 0x0) r6 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r6, 0x0, 0x0) eventfd(0x7f) write$eventfd(r2, 0x0, 0xffffffffffffff68) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000000c0)={0x4, 0x10001, 0x1, 0x2, 0x1f}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0xffff, 0x7, 0x3, 0x2, 0x1, 0xffffffff, '\x00', r1, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x48) r7 = openat$hwrng(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)) 07:59:20 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x204100, 0x0) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x20) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x204100, 0x0) (async) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x20) (async) 07:59:20 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) openat$vcsu(0xffffff9c, &(0x7f00000001c0), 0x10000, 0x0) r5 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r5, 0x0, 0x0) (async) r6 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r6, 0x0, 0x0) (async) eventfd(0x7f) (async) write$eventfd(r2, 0x0, 0xffffffffffffff68) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000000c0)={0x4, 0x10001, 0x1, 0x2, 0x1f}, 0x14) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0xffff, 0x7, 0x3, 0x2, 0x1, 0xffffffff, '\x00', r1, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x48) (async) r7 = openat$hwrng(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)) 07:59:20 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x88a00, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (rerun: 32) 07:59:20 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="200027bd7000fedbdf25040000000c001600080000000000000006001d00000400000500040000000000b005000400000000000500060001000000"], 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x48080) r3 = shmget$private(0x0, 0x14000, 0x2, &(0x7f0000fec000/0x14000)=nil) getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r6 = getgid() shmctl$IPC_SET(r3, 0x1, &(0x7f0000000300)={{0x0, r5, r6, r5, 0xee01, 0x0, 0x8}, 0xffff, 0x7fff, 0x3, 0x6, 0x0, 0x0, 0x7fff}) r7 = getpid() r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r1) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r8, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x30}, 0x1, 0x0, 0x0, 0x40084}, 0x4040040) shmctl$IPC_SET(r3, 0x1, &(0x7f00000000c0)={{0x1, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0x20, 0x3ff}, 0xc1cf, 0x3, 0x7, 0x10001, r7, 0x0, 0x1}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:20 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x24a41, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 07:59:20 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) (async) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) (async, rerun: 64) openat$vcsu(0xffffff9c, &(0x7f00000001c0), 0x10000, 0x0) (async, rerun: 64) r5 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r5, 0x0, 0x0) r6 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r6, 0x0, 0x0) (async) eventfd(0x7f) (async) write$eventfd(r2, 0x0, 0xffffffffffffff68) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000000c0)={0x4, 0x10001, 0x1, 0x2, 0x1f}, 0x14) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0xffff, 0x7, 0x3, 0x2, 0x1, 0xffffffff, '\x00', r1, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x48) (async) r7 = openat$hwrng(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)) 07:59:20 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x24a41, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x24a41, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r1, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) 07:59:20 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) accept4$packet(r0, 0x0, 0x0, 0x800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote, r2}, 0x14) bind$packet(r0, &(0x7f00000001c0)={0x11, 0xc, r2, 0x1, 0x40, 0x6, @multicast}, 0x14) r3 = socket(0x1d, 0x801, 0xf371) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl0\x00', r2, 0x0, 0x7, 0xb2, 0x40, 0x38, @private2, @local, 0x8, 0x40, 0x8c, 0x49b0}}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000880)={@empty, r6}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000040)={'gretap0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x80, 0x10, 0xb70, 0x8000, {{0xf, 0x4, 0x1, 0x2c, 0x3c, 0x65, 0x0, 0x1f, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@timestamp={0x44, 0x8, 0x66, 0x0, 0x8, [0x2]}, @lsrr={0x83, 0x17, 0xa8, [@local, @broadcast, @multicast1, @local, @empty]}, @cipso={0x86, 0x6, 0x1}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r8 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000003c0), &(0x7f0000000400)=0x14) write$eventfd(r8, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r8, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227bd7000fcdadf250800000005002900000000000508cf2f3cd72a332ffd2c00b2ad9e4aa29e316411abefc79eef2decb276c8d4b2cd36c1aa8ff1b537aed6d1a819c0dcda15dfc01e00c2105d2057303f458e154af86ca7a3026cccc86141353d8c3164b107450d7cf3f24d6f18fd8265fea8ca0afade0255ccab6de2c0b3aca06dd1d371ec69bbed731cfbd4df0698bd92ef83ddefbb886a7b6bcc0b20f797c2ea5a8cc327ee146ca0737c855f6aa330eb2ff4477b2c79b1eb04010fed3f0ee01d7423a0bda1e53a09ad8f157e484e3a7466702a44e7e6d905d9d1c44ba4c5bdafa5aab723fb5e03f812964ae212d9db6bf19feb20ff4e545874af105130568217137e8e8dd0c9ac3043144fb084d7ae7a841e961eb300"/291], 0x2c}}, 0x20000000) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote, r7}, 0x14) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000000)={r7, 0x1, 0x6, @multicast}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="200029bd7000ffdbdf250700000008001700", @ANYRES32=r3, @ANYBLOB="05000400050000000600020001000000050021000100000008000b000300000008000a0003000000"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x488d0) r9 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r9, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x80}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x56}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40400d0}, 0x4060000) 07:59:20 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) (async) accept4$packet(r0, 0x0, 0x0, 0x800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote, r2}, 0x14) (async) bind$packet(r0, &(0x7f00000001c0)={0x11, 0xc, r2, 0x1, 0x40, 0x6, @multicast}, 0x14) (async) r3 = socket(0x1d, 0x801, 0xf371) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl0\x00', r2, 0x0, 0x7, 0xb2, 0x40, 0x38, @private2, @local, 0x8, 0x40, 0x8c, 0x49b0}}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000880)={@empty, r6}, 0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000040)={'gretap0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x80, 0x10, 0xb70, 0x8000, {{0xf, 0x4, 0x1, 0x2c, 0x3c, 0x65, 0x0, 0x1f, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@timestamp={0x44, 0x8, 0x66, 0x0, 0x8, [0x2]}, @lsrr={0x83, 0x17, 0xa8, [@local, @broadcast, @multicast1, @local, @empty]}, @cipso={0x86, 0x6, 0x1}, @end]}}}}}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) (rerun: 64) r8 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000003c0), &(0x7f0000000400)=0x14) (async) write$eventfd(r8, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r8, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"/291], 0x2c}}, 0x20000000) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote, r7}, 0x14) (async) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000000)={r7, 0x1, 0x6, @multicast}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="200029bd7000ffdbdf250700000008001700", @ANYRES32=r3, @ANYBLOB="05000400050000000600020001000000050021000100000008000b000300000008000a0003000000"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x488d0) (async) r9 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r9, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x80}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x56}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40400d0}, 0x4060000) 07:59:20 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x24a41, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async, rerun: 32) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 32) write$eventfd(r1, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (rerun: 64) 07:59:22 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x88a00, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:22 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="200027bd7000fedbdf25040000000c001600080000000000000006001d00000400000500040000000000b005000400000000000500060001000000"], 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x48080) r3 = shmget$private(0x0, 0x14000, 0x2, &(0x7f0000fec000/0x14000)=nil) getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) getgid() (async) r6 = getgid() shmctl$IPC_SET(r3, 0x1, &(0x7f0000000300)={{0x0, r5, r6, r5, 0xee01, 0x0, 0x8}, 0xffff, 0x7fff, 0x3, 0x6, 0x0, 0x0, 0x7fff}) r7 = getpid() r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r1) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r8, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x30}, 0x1, 0x0, 0x0, 0x40084}, 0x4040040) shmctl$IPC_SET(r3, 0x1, &(0x7f00000000c0)={{0x1, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0x20, 0x3ff}, 0xc1cf, 0x3, 0x7, 0x10001, r7, 0x0, 0x1}) (async) shmctl$IPC_SET(r3, 0x1, &(0x7f00000000c0)={{0x1, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0x20, 0x3ff}, 0xc1cf, 0x3, 0x7, 0x10001, r7, 0x0, 0x1}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:22 executing program 2: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xc37e, @private0, 0x7, 0x3}, 0x20) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:22 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) accept4$packet(r0, 0x0, 0x0, 0x800) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote, r2}, 0x14) (async) bind$packet(r0, &(0x7f00000001c0)={0x11, 0xc, r2, 0x1, 0x40, 0x6, @multicast}, 0x14) r3 = socket(0x1d, 0x801, 0xf371) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl0\x00', r2, 0x0, 0x7, 0xb2, 0x40, 0x38, @private2, @local, 0x8, 0x40, 0x8c, 0x49b0}}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000880)={@empty, r6}, 0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000040)={'gretap0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x80, 0x10, 0xb70, 0x8000, {{0xf, 0x4, 0x1, 0x2c, 0x3c, 0x65, 0x0, 0x1f, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@timestamp={0x44, 0x8, 0x66, 0x0, 0x8, [0x2]}, @lsrr={0x83, 0x17, 0xa8, [@local, @broadcast, @multicast1, @local, @empty]}, @cipso={0x86, 0x6, 0x1}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) (async) r8 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000003c0), &(0x7f0000000400)=0x14) (async) write$eventfd(r8, 0x0, 0x0) (async, rerun: 32) sendmsg$BATADV_CMD_GET_ORIGINATORS(r8, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"/291], 0x2c}}, 0x20000000) (rerun: 32) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote, r7}, 0x14) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000000)={r7, 0x1, 0x6, @multicast}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="200029bd7000ffdbdf250700000008001700", @ANYRES32=r3, @ANYBLOB="05000400050000000600020001000000050021000100000008000b000300000008000a0003000000"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x488d0) (async) r9 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r9, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x80}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x56}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40400d0}, 0x4060000) 07:59:22 executing program 3: getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', r0, r1, 0x0, 0x2, 0x3}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = accept4$packet(r2, 0x0, 0x0, 0x0) r4 = accept4$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) recvfrom$packet(r3, &(0x7f0000000200)=""/196, 0xc4, 0x10000, 0x0, 0x0) 07:59:23 executing program 2: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xc37e, @private0, 0x7, 0x3}, 0x20) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xc37e, @private0, 0x7, 0x3}, 0x20) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r0, 0x0, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x1c) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) 07:59:23 executing program 3: getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) (async, rerun: 64) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 64) write$eventfd(r1, 0x0, 0x0) (async, rerun: 32) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', r0, r1, 0x0, 0x2, 0x3}, 0x48) (rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = accept4$packet(r2, 0x0, 0x0, 0x0) r4 = accept4$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) recvfrom$packet(r3, &(0x7f0000000200)=""/196, 0xc4, 0x10000, 0x0, 0x0) 07:59:23 executing program 2: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xc37e, @private0, 0x7, 0x3}, 0x20) (async, rerun: 64) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async, rerun: 64) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:23 executing program 3: getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', r0, r1, 0x0, 0x2, 0x3}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = accept4$packet(r2, 0x0, 0x0, 0x0) r4 = accept4$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) recvfrom$packet(r3, &(0x7f0000000200)=""/196, 0xc4, 0x10000, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r1, 0x0, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', r0, r1, 0x0, 0x2, 0x3}, 0x48) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) accept4$packet(r2, 0x0, 0x0, 0x0) (async) accept4$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14, 0x800) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) (async) recvfrom$packet(r3, &(0x7f0000000200)=""/196, 0xc4, 0x10000, 0x0, 0x0) (async) 07:59:23 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x410080, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:23 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="200027bd7000fedbdf25040000000c001600080000000000000006001d00000400000500040000000000b005000400000000000500060001000000"], 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x48080) (async) r3 = shmget$private(0x0, 0x14000, 0x2, &(0x7f0000fec000/0x14000)=nil) (async) getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) (async, rerun: 64) r6 = getgid() (rerun: 64) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000300)={{0x0, r5, r6, r5, 0xee01, 0x0, 0x8}, 0xffff, 0x7fff, 0x3, 0x6, 0x0, 0x0, 0x7fff}) (async) r7 = getpid() (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r1) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r8, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x30}, 0x1, 0x0, 0x0, 0x40084}, 0x4040040) (async) shmctl$IPC_SET(r3, 0x1, &(0x7f00000000c0)={{0x1, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0x20, 0x3ff}, 0xc1cf, 0x3, 0x7, 0x10001, r7, 0x0, 0x1}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:23 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:23 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x410080, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000)="b01a58d43f9375ce5788fff9b6d95ef6b439e6faba51cc89328b2e30dfa8384b834f251200c9d2b1db12b02e72e287e2b8c55d937548842505d56a999cc17b908427e4929939de5d19b7ef40fb699693114b86bdb94e57cf5be2664a2f0598886f24a96150df872b90f8", &(0x7f0000000080)=@buf="80a9a8544d38d30baf4ae00ae869179df2ab5c22eadbdcbae2973a2593e1d4ab31f7c7abd4060d3b16f00076d1ac761d6cb0753e1068846577cf1576f4a588b0ec0f7b3c9da3e6a905b6650d7d47a61880f1eacc2a387350e0f635d3489cde475602692e04c9e14ce4f9d52114c9610200d93b12aa958014a3e2d06b114b436d16075b5c989b400604aed82b4b5d5070bd7218d5ba3c32cbbc1799bbd983825de2241e550ed80d969d03a6926608f1ceed3a22a206"}, 0x1c) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000180)="10db44be249a21b0280b95e765d8fb27350c4ae02d26638fe42332a570d11021fc0cb371c7550207eb4dd3aca42d79d0511143e0aa83ef77b9ee2fa7d1951aa10c052a8254fe5915819c0bbd006dfc38f9e71c8540d6b838b89611170a152116619bfa4bdce285c5ea4093ad7a27ddc04197742cce8cc625179124e41fc5fa327e0cf125a23a32533183a6365934a6bce035614f6bde821fa1cad849906d262abf365523a064ea6fe270b942636c5397111f4c6ce85cbc14", 0xb8, 0x20044804, &(0x7f0000000240)={0xa, 0x0, 0x2, @loopback, 0x3, 0x1}, 0x20) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x800) 07:59:23 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:23 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x410080, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x410080, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) 07:59:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000)="b01a58d43f9375ce5788fff9b6d95ef6b439e6faba51cc89328b2e30dfa8384b834f251200c9d2b1db12b02e72e287e2b8c55d937548842505d56a999cc17b908427e4929939de5d19b7ef40fb699693114b86bdb94e57cf5be2664a2f0598886f24a96150df872b90f8", &(0x7f0000000080)=@buf="80a9a8544d38d30baf4ae00ae869179df2ab5c22eadbdcbae2973a2593e1d4ab31f7c7abd4060d3b16f00076d1ac761d6cb0753e1068846577cf1576f4a588b0ec0f7b3c9da3e6a905b6650d7d47a61880f1eacc2a387350e0f635d3489cde475602692e04c9e14ce4f9d52114c9610200d93b12aa958014a3e2d06b114b436d16075b5c989b400604aed82b4b5d5070bd7218d5ba3c32cbbc1799bbd983825de2241e550ed80d969d03a6926608f1ceed3a22a206"}, 0x1c) (async) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000180)="10db44be249a21b0280b95e765d8fb27350c4ae02d26638fe42332a570d11021fc0cb371c7550207eb4dd3aca42d79d0511143e0aa83ef77b9ee2fa7d1951aa10c052a8254fe5915819c0bbd006dfc38f9e71c8540d6b838b89611170a152116619bfa4bdce285c5ea4093ad7a27ddc04197742cce8cc625179124e41fc5fa327e0cf125a23a32533183a6365934a6bce035614f6bde821fa1cad849906d262abf365523a064ea6fe270b942636c5397111f4c6ce85cbc14", 0xb8, 0x20044804, &(0x7f0000000240)={0xa, 0x0, 0x2, @loopback, 0x3, 0x1}, 0x20) (async) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x800) 07:59:23 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:23 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) r3 = socket$packet(0x11, 0x3, 0x300) accept4$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0xf5, r4, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:23 executing program 2: r0 = eventfd2(0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) write$eventfd(r1, &(0x7f0000000500)=0x6, 0x8) write$eventfd(r0, 0x0, 0xffffff68) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) accept4$phonet_pipe(r2, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x457484a46afad601) r3 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x6, 0x1, 0x2, 0x100, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x8000, 0x3ce1, 0xfffffffe}}) r6 = openat$vcsu(0xffffff9c, &(0x7f00000003c0), 0x420000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x12, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ldst={0x2, 0x1, 0x2, 0x0, 0xb, 0x50, 0xfffffffffffffff0}, @map_idx={0x18, 0xc, 0x5, 0x0, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x7f, 0xd5, &(0x7f00000001c0)=""/213, 0x41000, 0x2d, '\x00', r5, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000400)=[{0x0, 0x1, 0xa, 0x82e5d9d79d97c17e}, {0x5, 0x1, 0x1, 0x6}], 0x10, 0x9}, 0x90) ioctl$KVM_CREATE_VM(r3, 0x541b, 0x0) 07:59:23 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x8000000000000fc}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x4004) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) getpeername$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10001}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffff8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfff0}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffff000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008005}, 0x4044881) 07:59:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000)="b01a58d43f9375ce5788fff9b6d95ef6b439e6faba51cc89328b2e30dfa8384b834f251200c9d2b1db12b02e72e287e2b8c55d937548842505d56a999cc17b908427e4929939de5d19b7ef40fb699693114b86bdb94e57cf5be2664a2f0598886f24a96150df872b90f8", &(0x7f0000000080)=@buf="80a9a8544d38d30baf4ae00ae869179df2ab5c22eadbdcbae2973a2593e1d4ab31f7c7abd4060d3b16f00076d1ac761d6cb0753e1068846577cf1576f4a588b0ec0f7b3c9da3e6a905b6650d7d47a61880f1eacc2a387350e0f635d3489cde475602692e04c9e14ce4f9d52114c9610200d93b12aa958014a3e2d06b114b436d16075b5c989b400604aed82b4b5d5070bd7218d5ba3c32cbbc1799bbd983825de2241e550ed80d969d03a6926608f1ceed3a22a206"}, 0x1c) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000180)="10db44be249a21b0280b95e765d8fb27350c4ae02d26638fe42332a570d11021fc0cb371c7550207eb4dd3aca42d79d0511143e0aa83ef77b9ee2fa7d1951aa10c052a8254fe5915819c0bbd006dfc38f9e71c8540d6b838b89611170a152116619bfa4bdce285c5ea4093ad7a27ddc04197742cce8cc625179124e41fc5fa327e0cf125a23a32533183a6365934a6bce035614f6bde821fa1cad849906d262abf365523a064ea6fe270b942636c5397111f4c6ce85cbc14", 0xb8, 0x20044804, &(0x7f0000000240)={0xa, 0x0, 0x2, @loopback, 0x3, 0x1}, 0x20) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x800) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000)="b01a58d43f9375ce5788fff9b6d95ef6b439e6faba51cc89328b2e30dfa8384b834f251200c9d2b1db12b02e72e287e2b8c55d937548842505d56a999cc17b908427e4929939de5d19b7ef40fb699693114b86bdb94e57cf5be2664a2f0598886f24a96150df872b90f8", &(0x7f0000000080)=@buf="80a9a8544d38d30baf4ae00ae869179df2ab5c22eadbdcbae2973a2593e1d4ab31f7c7abd4060d3b16f00076d1ac761d6cb0753e1068846577cf1576f4a588b0ec0f7b3c9da3e6a905b6650d7d47a61880f1eacc2a387350e0f635d3489cde475602692e04c9e14ce4f9d52114c9610200d93b12aa958014a3e2d06b114b436d16075b5c989b400604aed82b4b5d5070bd7218d5ba3c32cbbc1799bbd983825de2241e550ed80d969d03a6926608f1ceed3a22a206"}, 0x1c) (async) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000180)="10db44be249a21b0280b95e765d8fb27350c4ae02d26638fe42332a570d11021fc0cb371c7550207eb4dd3aca42d79d0511143e0aa83ef77b9ee2fa7d1951aa10c052a8254fe5915819c0bbd006dfc38f9e71c8540d6b838b89611170a152116619bfa4bdce285c5ea4093ad7a27ddc04197742cce8cc625179124e41fc5fa327e0cf125a23a32533183a6365934a6bce035614f6bde821fa1cad849906d262abf365523a064ea6fe270b942636c5397111f4c6ce85cbc14", 0xb8, 0x20044804, &(0x7f0000000240)={0xa, 0x0, 0x2, @loopback, 0x3, 0x1}, 0x20) (async) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x800) (async) 07:59:23 executing program 2: r0 = eventfd2(0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) write$eventfd(r1, &(0x7f0000000500)=0x6, 0x8) (async) write$eventfd(r0, 0x0, 0xffffff68) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) accept4$phonet_pipe(r2, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x457484a46afad601) (async) r3 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x6, 0x1, 0x2, 0x100, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x8000, 0x3ce1, 0xfffffffe}}) (async) r6 = openat$vcsu(0xffffff9c, &(0x7f00000003c0), 0x420000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x12, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ldst={0x2, 0x1, 0x2, 0x0, 0xb, 0x50, 0xfffffffffffffff0}, @map_idx={0x18, 0xc, 0x5, 0x0, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x7f, 0xd5, &(0x7f00000001c0)=""/213, 0x41000, 0x2d, '\x00', r5, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000400)=[{0x0, 0x1, 0xa, 0x82e5d9d79d97c17e}, {0x5, 0x1, 0x1, 0x6}], 0x10, 0x9}, 0x90) (async) ioctl$KVM_CREATE_VM(r3, 0x541b, 0x0) 07:59:23 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x8000000000000fc}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x4004) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) (async, rerun: 32) getpeername$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) (rerun: 32) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10001}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffff8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfff0}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffff000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008005}, 0x4044881) 07:59:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x80800) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) recvfrom$packet(r1, &(0x7f0000000040)=""/200, 0xc8, 0x12001, &(0x7f0000000140)={0x11, 0xf8, r3, 0x1, 0x81, 0x6, @broadcast}, 0x14) 07:59:23 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x8000000000000fc}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x4004) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) getpeername$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10001}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffff8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfff0}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffff000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008005}, 0x4044881) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x8000000000000fc}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x4004) (async) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) (async) getpeername$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10001}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffff8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfff0}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffff000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008005}, 0x4044881) (async) 07:59:23 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) (async) r3 = socket$packet(0x11, 0x3, 0x300) accept4$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14, 0x80800) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0xf5, r4, 0x1, 0x0, 0x6, @remote}, 0x14) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x80800) (async) accept4$packet(r0, 0x0, 0x0, 0x80800) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) recvfrom$packet(r1, &(0x7f0000000040)=""/200, 0xc8, 0x12001, &(0x7f0000000140)={0x11, 0xf8, r3, 0x1, 0x81, 0x6, @broadcast}, 0x14) 07:59:23 executing program 2: r0 = eventfd2(0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) write$eventfd(r1, &(0x7f0000000500)=0x6, 0x8) write$eventfd(r0, 0x0, 0xffffff68) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) (async) accept4$phonet_pipe(r2, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x457484a46afad601) (async) r3 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x6, 0x1, 0x2, 0x100, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x8000, 0x3ce1, 0xfffffffe}}) (async) r6 = openat$vcsu(0xffffff9c, &(0x7f00000003c0), 0x420000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x12, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ldst={0x2, 0x1, 0x2, 0x0, 0xb, 0x50, 0xfffffffffffffff0}, @map_idx={0x18, 0xc, 0x5, 0x0, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x7f, 0xd5, &(0x7f00000001c0)=""/213, 0x41000, 0x2d, '\x00', r5, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000400)=[{0x0, 0x1, 0xa, 0x82e5d9d79d97c17e}, {0x5, 0x1, 0x1, 0x6}], 0x10, 0x9}, 0x90) (async) ioctl$KVM_CREATE_VM(r3, 0x541b, 0x0) 07:59:23 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) syz_io_uring_setup(0x69e3, &(0x7f00000001c0)={0x0, 0x1b37, 0x0, 0x0, 0x31d, 0x0, r1}, &(0x7f0000000240), &(0x7f0000000280)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup=r1, 0xd, 0x0, 0xb1f, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x23, 0x1411, 0x400, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x14}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004841}, 0x840) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x80800) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) recvfrom$packet(r1, &(0x7f0000000040)=""/200, 0xc8, 0x12001, &(0x7f0000000140)={0x11, 0xf8, r3, 0x1, 0x81, 0x6, @broadcast}, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) (async) accept4$packet(r0, 0x0, 0x0, 0x80800) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) (async) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) (async) recvfrom$packet(r1, &(0x7f0000000040)=""/200, 0xc8, 0x12001, &(0x7f0000000140)={0x11, 0xf8, r3, 0x1, 0x81, 0x6, @broadcast}, 0x14) (async) 07:59:23 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1001000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 07:59:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)='%pI4 \x00'}, 0x1c) accept4$packet(r0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x4a1b5032, 0x1) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x1, &(0x7f00000000c0), 0x0, r3, 0x2}) 07:59:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)='%pI4 \x00'}, 0x1c) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)='%pI4 \x00'}, 0x1c) accept4$packet(r0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x4a1b5032, 0x1) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x1, &(0x7f00000000c0), 0x0, r3, 0x2}) (async) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x1, &(0x7f00000000c0), 0x0, r3, 0x2}) 07:59:23 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) (async) r3 = socket$packet(0x11, 0x3, 0x300) accept4$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14, 0x80800) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0xf5, r4, 0x1, 0x0, 0x6, @remote}, 0x14) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async, rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)='%pI4 \x00'}, 0x1c) (async, rerun: 64) accept4$packet(r0, 0x0, 0x0, 0x0) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (rerun: 64) r3 = eventfd2(0x4a1b5032, 0x1) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x1, &(0x7f00000000c0), 0x0, r3, 0x2}) 07:59:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x80800) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x303}, "1ae17087a2a1dc62", "067f0e31cc268d06fff8e46bddd4a2b0ebe581183c3791749d4c730603f84dcc", "1af12d02", "913233dabd435853"}, 0x38) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r3, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3f}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x26000800}, 0x4) 07:59:23 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) syz_io_uring_setup(0x69e3, &(0x7f00000001c0)={0x0, 0x1b37, 0x0, 0x0, 0x31d, 0x0, r1}, &(0x7f0000000240), &(0x7f0000000280)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup=r1, 0xd, 0x0, 0xb1f, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x23, 0x1411, 0x400, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x14}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004841}, 0x840) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x20000, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r1, 0x0, 0x0) (async) syz_io_uring_setup(0x69e3, &(0x7f00000001c0)={0x0, 0x1b37, 0x0, 0x0, 0x31d, 0x0, r1}, &(0x7f0000000240), &(0x7f0000000280)) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup=r1, 0xd, 0x0, 0xb1f, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r2, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x23, 0x1411, 0x400, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x14}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004841}, 0x840) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) 07:59:23 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async, rerun: 64) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 64) write$eventfd(r1, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1001000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 07:59:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x80800) (async) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x303}, "1ae17087a2a1dc62", "067f0e31cc268d06fff8e46bddd4a2b0ebe581183c3791749d4c730603f84dcc", "1af12d02", "913233dabd435853"}, 0x38) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r3, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3f}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x26000800}, 0x4) 07:59:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x80800) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x303}, "1ae17087a2a1dc62", "067f0e31cc268d06fff8e46bddd4a2b0ebe581183c3791749d4c730603f84dcc", "1af12d02", "913233dabd435853"}, 0x38) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r3, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3f}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x26000800}, 0x4) 07:59:23 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x3) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000180), 0x80082, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r2, 0x9, 0x2, r3}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x140d, 0x10, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x40) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r5, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1c}]}, 0x50}, 0x1, 0x0, 0x0, 0x8c0}, 0x10) 07:59:23 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x1404, 0x800, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x2400c014) r2 = socket$packet(0x11, 0x2, 0x300) accept4$packet(r2, 0x0, 0x0, 0x180800) 07:59:23 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x1404, 0x800, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x2400c014) (async) r2 = socket$packet(0x11, 0x2, 0x300) accept4$packet(r2, 0x0, 0x0, 0x180800) 07:59:23 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) (async) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x1404, 0x800, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x2400c014) (async) r2 = socket$packet(0x11, 0x2, 0x300) accept4$packet(r2, 0x0, 0x0, 0x180800) 07:59:23 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) syz_io_uring_setup(0x69e3, &(0x7f00000001c0)={0x0, 0x1b37, 0x0, 0x0, 0x31d, 0x0, r1}, &(0x7f0000000240), &(0x7f0000000280)) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup=r1, 0xd, 0x0, 0xb1f, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x23, 0x1411, 0x400, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x14}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004841}, 0x840) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:23 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x800) 07:59:23 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1001000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (async) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1001000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 07:59:23 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x800) (async) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x800) 07:59:23 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = eventfd(0x3) (async) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000180), 0x80082, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r2, 0x9, 0x2, r3}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x140d, 0x10, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x40) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r5, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1c}]}, 0x50}, 0x1, 0x0, 0x0, 0x8c0}, 0x10) 07:59:23 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x800) 07:59:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) r1 = eventfd(0xbe6) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={r1, 0x7fffffff, 0xea5a}) 07:59:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) (async) r1 = eventfd(0xbe6) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={r1, 0x7fffffff, 0xea5a}) 07:59:23 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6(0xa, 0x5, 0x3) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:23 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x20040, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x28a080, 0x0) sendto$l2tp6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3a}, 0xfffffffffffffce1) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x406001, 0x0) r2 = socket$inet6(0xa, 0x4, 0x400) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080), &(0x7f0000000100)=0x14) write$eventfd(r0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x80000000) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) (async) r1 = eventfd(0xbe6) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={r1, 0x7fffffff, 0xea5a}) 07:59:23 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)='%pK \x00'}, 0x1c) write$eventfd(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) accept4$packet(r1, 0x0, 0x0, 0x80800) openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x80000, 0x0) 07:59:24 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = eventfd(0x3) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000180), 0x80082, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r2, 0x9, 0x2, r3}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x140d, 0x10, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x40) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r5, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1c}]}, 0x50}, 0x1, 0x0, 0x0, 0x8c0}, 0x10) 07:59:24 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x20040, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x28a080, 0x0) sendto$l2tp6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3a}, 0xfffffffffffffce1) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x406001, 0x0) (async) r2 = socket$inet6(0xa, 0x4, 0x400) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080), &(0x7f0000000100)=0x14) write$eventfd(r0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x80000000) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:24 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)='%pK \x00'}, 0x1c) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)='%pK \x00'}, 0x1c) write$eventfd(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) write$eventfd(r1, 0x0, 0x0) accept4$packet(r1, 0x0, 0x0, 0x80800) openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x80000, 0x0) 07:59:24 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6(0xa, 0x5, 0x3) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:24 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)='%pK \x00'}, 0x1c) (async) write$eventfd(r0, 0x0, 0x0) (async, rerun: 64) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 64) write$eventfd(r1, 0x0, 0x0) (async) accept4$packet(r1, 0x0, 0x0, 0x80800) openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x80000, 0x0) 07:59:24 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x20040, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x28a080, 0x0) sendto$l2tp6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3a}, 0xfffffffffffffce1) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x406001, 0x0) r2 = socket$inet6(0xa, 0x4, 0x400) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080), &(0x7f0000000100)=0x14) write$eventfd(r0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x80000000) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x20040, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x28a080, 0x0) (async) sendto$l2tp6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3a}, 0xfffffffffffffce1) (async) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x406001, 0x0) (async) socket$inet6(0xa, 0x4, 0x400) (async) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080), &(0x7f0000000100)=0x14) (async) write$eventfd(r0, 0x0, 0x0) (async) socket$inet6(0xa, 0x2, 0x80000000) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) 07:59:24 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x325983, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5be3f01b6c678c0b77a4590eb3e7f52c67984d67a1044b4e9c7b99d4884465f2dcf22c15c160794a", @ANYRES64=r3, @ANYBLOB="04002abd7000fbdbde250a0000000a000900aaaaaaaaaaaa0000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r4 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x84a02, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r2, 0x1, 0x8, r4}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000000}, 0x20008000) 07:59:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x40400, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp-reno\x00', 0xb) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:24 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x64, 0x0, &(0x7f00000000c0)=[@release={0x40046306, 0x1}, @increfs={0x40046304, 0x2}, @decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x1, 0x18}, @flat=@binder={0x73622a85, 0x100, 0x3}}, &(0x7f0000000080)={0x0, 0x18, 0x34}}}], 0xdd, 0x0, &(0x7f0000000140)="4943a4dca4c59afb87f872f371c898c4aaf2f04b72deef05c7e07fe320ad6aa5e675ca8fd9c3964b4dbce84b88ed266606031bc493ef40345430571987257eaff90af6362da261d39da62e8423b9e121cbe24b18a4f8f29aa3c13562da867fe407e3696067ef44e329ec564188e3eb5bcdaca93337db7d38af7ae0290f5dd57e6e607b78cf7651964b59dacb2a6392e778db9688f89036bb81fa8028f30962be4eb7b82590ab6d8cbd941c6281855675d7d23fd935f41cb346576c214b55302f6399d24a3e6e7a75046cd3ac0513686fa748bfa8857677657a58e7c9a5"}) 07:59:24 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x325983, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async, rerun: 32) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) (rerun: 32) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5be3f01b6c678c0b77a4590eb3e7f52c67984d67a1044b4e9c7b99d4884465f2dcf22c15c160794a", @ANYRES64=r3, @ANYBLOB="04002abd7000fbdbde250a0000000a000900aaaaaaaaaaaa0000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async) r4 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x84a02, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r2, 0x1, 0x8, r4}) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000000}, 0x20008000) 07:59:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x40400, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp-reno\x00', 0xb) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:24 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$inet6(0xa, 0x5, 0x3) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x40400, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp-reno\x00', 0xb) (async) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:24 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x64, 0x0, &(0x7f00000000c0)=[@release={0x40046306, 0x1}, @increfs={0x40046304, 0x2}, @decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x1, 0x18}, @flat=@binder={0x73622a85, 0x100, 0x3}}, &(0x7f0000000080)={0x0, 0x18, 0x34}}}], 0xdd, 0x0, &(0x7f0000000140)="4943a4dca4c59afb87f872f371c898c4aaf2f04b72deef05c7e07fe320ad6aa5e675ca8fd9c3964b4dbce84b88ed266606031bc493ef40345430571987257eaff90af6362da261d39da62e8423b9e121cbe24b18a4f8f29aa3c13562da867fe407e3696067ef44e329ec564188e3eb5bcdaca93337db7d38af7ae0290f5dd57e6e607b78cf7651964b59dacb2a6392e778db9688f89036bb81fa8028f30962be4eb7b82590ab6d8cbd941c6281855675d7d23fd935f41cb346576c214b55302f6399d24a3e6e7a75046cd3ac0513686fa748bfa8857677657a58e7c9a5"}) 07:59:24 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x325983, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5be3f01b6c678c0b77a4590eb3e7f52c67984d67a1044b4e9c7b99d4884465f2dcf22c15c160794a", @ANYRES64=r3, @ANYBLOB="04002abd7000fbdbde250a0000000a000900aaaaaaaaaaaa0000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r4 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x84a02, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r2, 0x1, 0x8, r4}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000000}, 0x20008000) openat$kvm(0xffffff9c, &(0x7f0000000100), 0x325983, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5be3f01b6c678c0b77a4590eb3e7f52c67984d67a1044b4e9c7b99d4884465f2dcf22c15c160794a", @ANYRES64=r3, @ANYBLOB="04002abd7000fbdbde250a0000000a000900aaaaaaaaaaaa0000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async) openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x84a02, 0x0) (async) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r2, 0x1, 0x8, r4}) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000000}, 0x20008000) (async) 07:59:24 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) accept4$packet(r0, 0x0, 0x0, 0x80000) 07:59:24 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x26b40, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:24 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x64, 0x0, &(0x7f00000000c0)=[@release={0x40046306, 0x1}, @increfs={0x40046304, 0x2}, @decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x1, 0x18}, @flat=@binder={0x73622a85, 0x100, 0x3}}, &(0x7f0000000080)={0x0, 0x18, 0x34}}}], 0xdd, 0x0, &(0x7f0000000140)="4943a4dca4c59afb87f872f371c898c4aaf2f04b72deef05c7e07fe320ad6aa5e675ca8fd9c3964b4dbce84b88ed266606031bc493ef40345430571987257eaff90af6362da261d39da62e8423b9e121cbe24b18a4f8f29aa3c13562da867fe407e3696067ef44e329ec564188e3eb5bcdaca93337db7d38af7ae0290f5dd57e6e607b78cf7651964b59dacb2a6392e778db9688f89036bb81fa8028f30962be4eb7b82590ab6d8cbd941c6281855675d7d23fd935f41cb346576c214b55302f6399d24a3e6e7a75046cd3ac0513686fa748bfa8857677657a58e7c9a5"}) 07:59:24 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) accept4$packet(r0, 0x0, 0x0, 0x80000) 07:59:24 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket(0x25, 0x3, 0x81) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:24 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x26b40, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:24 executing program 0: getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000180)=""/139, &(0x7f0000000240)=0x8b) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000280), 0x204001, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000002c0)) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044804}, 0x4000000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5e83}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x3c}}, 0x50) r4 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$packet(0x11, 0x3, 0x300) 07:59:24 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) (async) accept4$packet(r0, 0x0, 0x0, 0x80000) 07:59:24 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x26b40, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x26b40, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) 07:59:24 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:24 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) (async) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:24 executing program 2: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0, 0xffffffffffffffff}, 0x4) r2 = socket(0x1a, 0x1, 0x101) socket(0x1a, 0xa, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="83c51c2f2d4d1953057bc6f40f1385811f1946ad4aec81845ff00ebbbc7cb9cbe3213d098b4e4171c406c41556e5f65700b199dc5df0df5f7237e8ae9793db2733780d42d63668d0c0de7893908df8559d8085ac9df312a2c0f6eafaa981a21903b4ce745f0546c16b5f5b0dbd1db541c9716b3f750076726f1681fe24dbfd7ac0984c3026da4e3678a23633c75ba8426d33927cf8ffb66e0773d0881228387a98a5", @ANYRES16=r4, @ANYBLOB="010000000000000000000b000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004040) r5 = openat$vcsu(0xffffff9c, &(0x7f0000000240), 0x2000, 0x0) r6 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r6, 0x0, 0x0) userfaultfd(0x800) r7 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r9, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r9, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x1c}}, 0x28040054) write$eventfd(r7, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000580)={0x1000, &(0x7f0000000540), 0x4, r6, 0xb}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xe, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbc}}, @alu={0x4, 0x1, 0xa, 0x6, 0xb, 0x18, 0x1}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}], &(0x7f00000000c0)='GPL\x00', 0x0, 0x36, &(0x7f0000000100)=""/54, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000140)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0xe, 0x4, 0x80000001}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000280)=[r0, r1, r5, r6], &(0x7f00000002c0)=[{0x4, 0x2, 0x6}, {0x2, 0x3, 0x4, 0x8}, {0x4, 0x3, 0x2, 0x1}, {0x1, 0x2, 0x6, 0x6}, {0x3, 0x1, 0xe, 0xa}, {0x0, 0x2, 0xa, 0x4}, {0x5, 0x5, 0x5, 0x9}, {0x3, 0x2, 0xa, 0x8}], 0x10, 0x7ff}, 0x90) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r10 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0x541b, 0x0) r11 = openat$vcsu(0xffffff9c, &(0x7f0000000780), 0x280, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r11, 0x6, 0x1d, &(0x7f00000007c0)={0x5, 0xfffffffd, 0x6, 0xfffffffd, 0x6}, 0x14) 07:59:24 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket(0x25, 0x3, 0x81) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:24 executing program 2: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0, 0xffffffffffffffff}, 0x4) (async) r2 = socket(0x1a, 0x1, 0x101) socket(0x1a, 0xa, 0x2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="83c51c2f2d4d1953057bc6f40f1385811f1946ad4aec81845ff00ebbbc7cb9cbe3213d098b4e4171c406c41556e5f65700b199dc5df0df5f7237e8ae9793db2733780d42d63668d0c0de7893908df8559d8085ac9df312a2c0f6eafaa981a21903b4ce745f0546c16b5f5b0dbd1db541c9716b3f750076726f1681fe24dbfd7ac0984c3026da4e3678a23633c75ba8426d33927cf8ffb66e0773d0881228387a98a5", @ANYRES16=r4, @ANYBLOB="010000000000000000000b000000"], 0x14}}, 0x0) (async, rerun: 32) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004040) (async, rerun: 32) r5 = openat$vcsu(0xffffff9c, &(0x7f0000000240), 0x2000, 0x0) (async) r6 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r6, 0x0, 0x0) (async) userfaultfd(0x800) r7 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async, rerun: 64) write$eventfd(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r9, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r9, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x1c}}, 0x28040054) (async) write$eventfd(r7, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000580)={0x1000, &(0x7f0000000540), 0x4, r6, 0xb}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xe, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbc}}, @alu={0x4, 0x1, 0xa, 0x6, 0xb, 0x18, 0x1}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}], &(0x7f00000000c0)='GPL\x00', 0x0, 0x36, &(0x7f0000000100)=""/54, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000140)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0xe, 0x4, 0x80000001}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000280)=[r0, r1, r5, r6], &(0x7f00000002c0)=[{0x4, 0x2, 0x6}, {0x2, 0x3, 0x4, 0x8}, {0x4, 0x3, 0x2, 0x1}, {0x1, 0x2, 0x6, 0x6}, {0x3, 0x1, 0xe, 0xa}, {0x0, 0x2, 0xa, 0x4}, {0x5, 0x5, 0x5, 0x9}, {0x3, 0x2, 0xa, 0x8}], 0x10, 0x7ff}, 0x90) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) (async, rerun: 64) r10 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (rerun: 64) ioctl$KVM_CREATE_VM(r10, 0x541b, 0x0) r11 = openat$vcsu(0xffffff9c, &(0x7f0000000780), 0x280, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r11, 0x6, 0x1d, &(0x7f00000007c0)={0x5, 0xfffffffd, 0x6, 0xfffffffd, 0x6}, 0x14) 07:59:24 executing program 0: getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000180)=""/139, &(0x7f0000000240)=0x8b) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000280), 0x204001, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000002c0)) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x2000, 0x0) (async) r2 = openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044804}, 0x4000000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5e83}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x3c}}, 0x50) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5e83}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x3c}}, 0x50) r4 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$packet(0x11, 0x3, 0x300) 07:59:24 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) (async, rerun: 32) accept4$packet(r0, 0x0, 0x0, 0x0) (rerun: 32) 07:59:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept4$packet(r0, 0x0, 0x0, 0x0) accept4$packet(r1, &(0x7f0000000000), &(0x7f0000000040)=0x14, 0x80800) 07:59:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept4$packet(r0, 0x0, 0x0, 0x0) accept4$packet(r1, &(0x7f0000000000), &(0x7f0000000040)=0x14, 0x80800) 07:59:24 executing program 2: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0, 0xffffffffffffffff}, 0x4) (async) r2 = socket(0x1a, 0x1, 0x101) socket(0x1a, 0xa, 0x2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="83c51c2f2d4d1953057bc6f40f1385811f1946ad4aec81845ff00ebbbc7cb9cbe3213d098b4e4171c406c41556e5f65700b199dc5df0df5f7237e8ae9793db2733780d42d63668d0c0de7893908df8559d8085ac9df312a2c0f6eafaa981a21903b4ce745f0546c16b5f5b0dbd1db541c9716b3f750076726f1681fe24dbfd7ac0984c3026da4e3678a23633c75ba8426d33927cf8ffb66e0773d0881228387a98a5", @ANYRES16=r4, @ANYBLOB="010000000000000000000b000000"], 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004040) (async, rerun: 32) r5 = openat$vcsu(0xffffff9c, &(0x7f0000000240), 0x2000, 0x0) (async, rerun: 32) r6 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r6, 0x0, 0x0) (async) userfaultfd(0x800) (async, rerun: 32) r7 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 32) write$eventfd(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r9, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r9, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x1c}}, 0x28040054) (async) write$eventfd(r7, 0x0, 0x0) (async) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000580)={0x1000, &(0x7f0000000540), 0x4, r6, 0xb}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xe, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbc}}, @alu={0x4, 0x1, 0xa, 0x6, 0xb, 0x18, 0x1}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}], &(0x7f00000000c0)='GPL\x00', 0x0, 0x36, &(0x7f0000000100)=""/54, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000140)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0xe, 0x4, 0x80000001}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000280)=[r0, r1, r5, r6], &(0x7f00000002c0)=[{0x4, 0x2, 0x6}, {0x2, 0x3, 0x4, 0x8}, {0x4, 0x3, 0x2, 0x1}, {0x1, 0x2, 0x6, 0x6}, {0x3, 0x1, 0xe, 0xa}, {0x0, 0x2, 0xa, 0x4}, {0x5, 0x5, 0x5, 0x9}, {0x3, 0x2, 0xa, 0x8}], 0x10, 0x7ff}, 0x90) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) (async, rerun: 32) r10 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (rerun: 32) ioctl$KVM_CREATE_VM(r10, 0x541b, 0x0) (async, rerun: 32) r11 = openat$vcsu(0xffffff9c, &(0x7f0000000780), 0x280, 0x0) (rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r11, 0x6, 0x1d, &(0x7f00000007c0)={0x5, 0xfffffffd, 0x6, 0xfffffffd, 0x6}, 0x14) 07:59:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept4$packet(r0, 0x0, 0x0, 0x0) accept4$packet(r1, &(0x7f0000000000), &(0x7f0000000040)=0x14, 0x80800) 07:59:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:24 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r0 = socket(0x25, 0x3, 0x81) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) (async) r1 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:24 executing program 0: getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000180)=""/139, &(0x7f0000000240)=0x8b) (async) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000280), 0x204001, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000002c0)) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r2 = openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044804}, 0x4000000) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5e83}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x3c}}, 0x50) (async) r4 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$packet(0x11, 0x3, 0x300) 07:59:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:24 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000040), 0x2080, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x8001, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0x541b, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000080)=r1, 0x1) 07:59:24 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:24 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000040), 0x2080, 0x0) (async) openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x8001, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0x541b, 0x0) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000080)=r1, 0x1) 07:59:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) accept4$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x80000) r2 = openat$hwrng(0xffffff9c, &(0x7f00000000c0), 0x602602, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x60004}, 0x40) 07:59:24 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000040), 0x2080, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x8001, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0x541b, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000080)=r1, 0x1) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x2080, 0x0) (async) openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x8001, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r0, 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r1, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0x541b, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r2, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000080)=r1, 0x1) (async) 07:59:24 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:24 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0xed, 0x4, 0x7, @empty, @dev={0xfe, 0x80, '\x00', 0x13}, 0x66afd03c0247d7e0, 0x20, 0x5, 0x8}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xd3c0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040840}, 0x4) r3 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r4 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x2900, 0x0) r5 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x410002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x2, 0xffffab22, 0x6, 0x1, r4, 0x1f, '\x00', 0x0, r5, 0x0, 0x1, 0x1, 0x4}, 0x48) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 07:59:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) accept4$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x80000) (async) r2 = openat$hwrng(0xffffff9c, &(0x7f00000000c0), 0x602602, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x60004}, 0x40) 07:59:24 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:24 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:24 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:24 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) accept4$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x80000) (async) accept4$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x80000) r2 = openat$hwrng(0xffffff9c, &(0x7f00000000c0), 0x602602, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x60004}, 0x40) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x60004}, 0x40) 07:59:24 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x4) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000040)=""/138, &(0x7f0000000280)=0x8a) write$eventfd(r1, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x9c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4a}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x4000054) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 07:59:24 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0xed, 0x4, 0x7, @empty, @dev={0xfe, 0x80, '\x00', 0x13}, 0x66afd03c0247d7e0, 0x20, 0x5, 0x8}}) (rerun: 32) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xd3c0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040840}, 0x4) (async, rerun: 32) r3 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (rerun: 32) r4 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x2900, 0x0) (async) r5 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x410002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x2, 0xffffab22, 0x6, 0x1, r4, 0x1f, '\x00', 0x0, r5, 0x0, 0x1, 0x1, 0x4}, 0x48) (async, rerun: 32) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (rerun: 32) 07:59:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000000)={0x1}) 07:59:24 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x4) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000040)=""/138, &(0x7f0000000280)=0x8a) write$eventfd(r1, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x9c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4a}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x4000054) (async) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x9c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4a}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x4000054) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 07:59:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000000)={0x1}) 07:59:24 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x4) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000040)=""/138, &(0x7f0000000280)=0x8a) write$eventfd(r1, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x9c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4a}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x4000054) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 07:59:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000000)={0x1}) 07:59:24 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:24 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x62d00, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:27 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0xed, 0x4, 0x7, @empty, @dev={0xfe, 0x80, '\x00', 0x13}, 0x66afd03c0247d7e0, 0x20, 0x5, 0x8}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xd3c0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040840}, 0x4) r3 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r4 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x2900, 0x0) r5 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x410002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x2, 0xffffab22, 0x6, 0x1, r4, 0x1f, '\x00', 0x0, r5, 0x0, 0x1, 0x1, 0x4}, 0x48) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r0, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0xed, 0x4, 0x7, @empty, @dev={0xfe, 0x80, '\x00', 0x13}, 0x66afd03c0247d7e0, 0x20, 0x5, 0x8}}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xd3c0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040840}, 0x4) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x2900, 0x0) (async) openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x410002, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x2, 0xffffab22, 0x6, 0x1, r4, 0x1f, '\x00', 0x0, r5, 0x0, 0x1, 0x1, 0x4}, 0x48) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) 07:59:27 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x62d00, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x62d00, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) 07:59:27 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) accept4$packet(r0, 0x0, 0x0, 0x0) socket(0x1, 0x800, 0x9) 07:59:27 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x52d986, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:27 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x62d00, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:27 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) accept4$packet(r0, 0x0, 0x0, 0x0) (async) socket(0x1, 0x800, 0x9) 07:59:27 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x52d986, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x52d986, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) 07:59:27 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x5) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000001c0)={0x4, r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0xa4, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="85616466060000000000000002000000000000004000000000000000856164660100000000000008000000000000008500000002000000000000001600"/80], &(0x7f0000000080)={0x0, 0x1c, 0x38}}, 0x40}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x1, &(0x7f00000003c0)=""/186, 0xba, 0x2, 0x27}, @flat=@binder={0x73622a85, 0x0, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)={0x0, 0x28, 0x40}}}, @free_buffer={0x40086303, r3}], 0xc1, 0x0, &(0x7f0000000200)="ef2da7b564510db3f2f44fa3c3ffe6944b1e7183fbf27ecc6e7ca86ec26cdb2c5bd90f2fad9db652629bd58cecd50c0adb079a44e346c6635e2dd7633108216c1fb68626dcef5f9f3668c54478f6bcf22c2005f363eae98ce389d120b2922aef18af26ef44f4ff9faffc592cecc44542f1ed34c230183673869eda87b5607bd9f07eb02adfc580f68364957dc17f0b85942ebcc22eba6b614f14de45598e43ebf843db2a6e3963a8a18678ee438553f1c8abeebc799ca4c8ffd5a762bc287bbba6"}) 07:59:27 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) (async) accept4$packet(r0, 0x0, 0x0, 0x0) (async) socket(0x1, 0x800, 0x9) 07:59:27 executing program 0: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x3404, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000240), 0x83, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000280)=0x1, 0x4) write$eventfd(r1, 0x0, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x212000, 0x0) connect$packet(r3, &(0x7f0000000040)={0x11, 0x2, 0x0, 0x1, 0x2, 0x6, @link_local}, 0x14) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xb0, 0x1405, 0x200, 0x70bd2c, 0x25dfdbfc, "", [{{0x8}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000001}, 0x2004c010) 07:59:27 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x5) (async) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000001c0)={0x4, r4}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0xa4, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="85616466060000000000000002000000000000004000000000000000856164660100000000000008000000000000008500000002000000000000001600"/80], &(0x7f0000000080)={0x0, 0x1c, 0x38}}, 0x40}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x1, &(0x7f00000003c0)=""/186, 0xba, 0x2, 0x27}, @flat=@binder={0x73622a85, 0x0, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)={0x0, 0x28, 0x40}}}, @free_buffer={0x40086303, r3}], 0xc1, 0x0, &(0x7f0000000200)="ef2da7b564510db3f2f44fa3c3ffe6944b1e7183fbf27ecc6e7ca86ec26cdb2c5bd90f2fad9db652629bd58cecd50c0adb079a44e346c6635e2dd7633108216c1fb68626dcef5f9f3668c54478f6bcf22c2005f363eae98ce389d120b2922aef18af26ef44f4ff9faffc592cecc44542f1ed34c230183673869eda87b5607bd9f07eb02adfc580f68364957dc17f0b85942ebcc22eba6b614f14de45598e43ebf843db2a6e3963a8a18678ee438553f1c8abeebc799ca4c8ffd5a762bc287bbba6"}) 07:59:27 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x52d986, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:27 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 07:59:27 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x100800) 07:59:27 executing program 0: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x3404, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x3404, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) (async) write$eventfd(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000240), 0x83, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000280)=0x1, 0x4) write$eventfd(r1, 0x0, 0x0) (async) write$eventfd(r1, 0x0, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x212000, 0x0) connect$packet(r3, &(0x7f0000000040)={0x11, 0x2, 0x0, 0x1, 0x2, 0x6, @link_local}, 0x14) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xb0, 0x1405, 0x200, 0x70bd2c, 0x25dfdbfc, "", [{{0x8}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000001}, 0x2004c010) 07:59:27 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x100800) socket$inet6_tcp(0xa, 0x1, 0x0) (async) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x100800) (async) 07:59:27 executing program 0: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x3404, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000240), 0x83, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000280)=0x1, 0x4) write$eventfd(r1, 0x0, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x212000, 0x0) connect$packet(r3, &(0x7f0000000040)={0x11, 0x2, 0x0, 0x1, 0x2, 0x6, @link_local}, 0x14) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xb0, 0x1405, 0x200, 0x70bd2c, 0x25dfdbfc, "", [{{0x8}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000001}, 0x2004c010) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x3404, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r0, 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) openat$hwrng(0xffffff9c, &(0x7f0000000240), 0x83, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000280)=0x1, 0x4) (async) write$eventfd(r1, 0x0, 0x0) (async) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x212000, 0x0) (async) connect$packet(r3, &(0x7f0000000040)={0x11, 0x2, 0x0, 0x1, 0x2, 0x6, @link_local}, 0x14) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xb0, 0x1405, 0x200, 0x70bd2c, 0x25dfdbfc, "", [{{0x8}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000001}, 0x2004c010) (async) 07:59:27 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) (async) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x100800) 07:59:27 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async, rerun: 32) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 32) write$eventfd(r2, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x5) (async) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000001c0)={0x4, r4}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0xa4, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="85616466060000000000000002000000000000004000000000000000856164660100000000000008000000000000008500000002000000000000001600"/80], &(0x7f0000000080)={0x0, 0x1c, 0x38}}, 0x40}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x1, &(0x7f00000003c0)=""/186, 0xba, 0x2, 0x27}, @flat=@binder={0x73622a85, 0x0, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)={0x0, 0x28, 0x40}}}, @free_buffer={0x40086303, r3}], 0xc1, 0x0, &(0x7f0000000200)="ef2da7b564510db3f2f44fa3c3ffe6944b1e7183fbf27ecc6e7ca86ec26cdb2c5bd90f2fad9db652629bd58cecd50c0adb079a44e346c6635e2dd7633108216c1fb68626dcef5f9f3668c54478f6bcf22c2005f363eae98ce389d120b2922aef18af26ef44f4ff9faffc592cecc44542f1ed34c230183673869eda87b5607bd9f07eb02adfc580f68364957dc17f0b85942ebcc22eba6b614f14de45598e43ebf843db2a6e3963a8a18678ee438553f1c8abeebc799ca4c8ffd5a762bc287bbba6"}) 07:59:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept4$packet(r0, 0x0, 0x0, 0x0) r2 = accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14, 0xc0000) connect$packet(r2, &(0x7f0000000080)={0x11, 0x5, 0x0, 0x1, 0x24, 0x6, @broadcast}, 0x14) 07:59:27 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x4}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3f}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4) write$eventfd(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x9, 0x2d06, 0x7, 0x203, r1, 0x9, '\x00', r3, r4, 0x1, 0x2, 0x1, 0x1}, 0x48) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept4$packet(r0, 0x0, 0x0, 0x0) r2 = accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14, 0xc0000) connect$packet(r2, &(0x7f0000000080)={0x11, 0x5, 0x0, 0x1, 0x24, 0x6, @broadcast}, 0x14) 07:59:27 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 07:59:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept4$packet(r0, 0x0, 0x0, 0x0) r2 = accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14, 0xc0000) connect$packet(r2, &(0x7f0000000080)={0x11, 0x5, 0x0, 0x1, 0x24, 0x6, @broadcast}, 0x14) 07:59:27 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x10000, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=r2) accept4$packet(r0, 0x0, 0x0, 0x0) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) accept4$phonet_pipe(r3, &(0x7f0000000100), &(0x7f0000000140)=0xfffffd29, 0x80800) 07:59:27 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x10000, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x10000, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) 07:59:27 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=r2) accept4$packet(r0, 0x0, 0x0, 0x0) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) accept4$phonet_pipe(r3, &(0x7f0000000100), &(0x7f0000000140)=0xfffffd29, 0x80800) 07:59:27 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) (async) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x4}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3f}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async) write$eventfd(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x9, 0x2d06, 0x7, 0x203, r1, 0x9, '\x00', r3, r4, 0x1, 0x2, 0x1, 0x1}, 0x48) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:27 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x10000, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:27 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 07:59:27 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = socket(0x19, 0x3, 0x1) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 07:59:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=r2) (async) accept4$packet(r0, 0x0, 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) accept4$phonet_pipe(r3, &(0x7f0000000100), &(0x7f0000000140)=0xfffffd29, 0x80800) 07:59:27 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote, r1}, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, 0x140f, 0x4, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'smc_ib\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x800) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x501000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000200)={'tunl0\x00', r1, 0x8000, 0x8, 0x4, 0x3, {{0x37, 0x4, 0x2, 0x3b, 0xdc, 0x68, 0x0, 0x1b, 0x29, 0x0, @private=0xa010100, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x4, 0x8d, 0x1, 0x6}, @timestamp_prespec={0x44, 0x2c, 0x18, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb5f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x81}, {@multicast1, 0x4}, {@remote, 0x7}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x80}]}, @generic={0x83, 0x11, "04c54df83564bfaa1bd20022b05b71"}, @timestamp_prespec={0x44, 0x24, 0xa2, 0x3, 0x9, [{@loopback, 0x7}, {@empty, 0x3}, {@empty, 0x1}, {@rand_addr=0x64010100, 0x5}]}, @cipso={0x86, 0x3a, 0x2, [{0x7, 0x5, "36349e"}, {0x0, 0x3, "9d"}, {0x7, 0x3, "cc"}, {0x5, 0x2}, {0x7, 0x6, "e2adb5a6"}, {0x7, 0x5, "33599b"}, {0x2, 0xe, "dcfc219781436a43f8018817"}, {0x7, 0x6, "2781853a"}, {0x1, 0x8, "137f958846d9"}]}, @rr={0x7, 0x1b, 0x85, [@remote, @empty, @empty, @rand_addr=0x64010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @rr={0x7, 0xb, 0x35, [@multicast1, @empty]}]}}}}}) 07:59:27 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) r1 = socket(0x19, 0x3, 0x1) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 07:59:27 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote, r1}, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, 0x140f, 0x4, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'smc_ib\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x800) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x501000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000200)={'tunl0\x00', r1, 0x8000, 0x8, 0x4, 0x3, {{0x37, 0x4, 0x2, 0x3b, 0xdc, 0x68, 0x0, 0x1b, 0x29, 0x0, @private=0xa010100, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x4, 0x8d, 0x1, 0x6}, @timestamp_prespec={0x44, 0x2c, 0x18, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb5f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x81}, {@multicast1, 0x4}, {@remote, 0x7}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x80}]}, @generic={0x83, 0x11, "04c54df83564bfaa1bd20022b05b71"}, @timestamp_prespec={0x44, 0x24, 0xa2, 0x3, 0x9, [{@loopback, 0x7}, {@empty, 0x3}, {@empty, 0x1}, {@rand_addr=0x64010100, 0x5}]}, @cipso={0x86, 0x3a, 0x2, [{0x7, 0x5, "36349e"}, {0x0, 0x3, "9d"}, {0x7, 0x3, "cc"}, {0x5, 0x2}, {0x7, 0x6, "e2adb5a6"}, {0x7, 0x5, "33599b"}, {0x2, 0xe, "dcfc219781436a43f8018817"}, {0x7, 0x6, "2781853a"}, {0x1, 0x8, "137f958846d9"}]}, @rr={0x7, 0x1b, 0x85, [@remote, @empty, @empty, @rand_addr=0x64010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @rr={0x7, 0xb, 0x35, [@multicast1, @empty]}]}}}}}) 07:59:27 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x7fff, 0x80000001, 0xfffffff9, 0x81, 0x7fffffff}, 0x14) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x410000, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x5000, &(0x7f0000000080), 0x0, r1}) 07:59:27 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x4}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3f}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4) write$eventfd(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x9, 0x2d06, 0x7, 0x203, r1, 0x9, '\x00', r3, r4, 0x1, 0x2, 0x1, 0x1}, 0x48) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r1, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) (async) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x4}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3f}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async) write$eventfd(r4, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x9, 0x2d06, 0x7, 0x203, r1, 0x9, '\x00', r3, r4, 0x1, 0x2, 0x1, 0x1}, 0x48) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) 07:59:27 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote, r1}, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, 0x140f, 0x4, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'smc_ib\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x800) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x501000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000200)={'tunl0\x00', r1, 0x8000, 0x8, 0x4, 0x3, {{0x37, 0x4, 0x2, 0x3b, 0xdc, 0x68, 0x0, 0x1b, 0x29, 0x0, @private=0xa010100, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x4, 0x8d, 0x1, 0x6}, @timestamp_prespec={0x44, 0x2c, 0x18, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb5f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x81}, {@multicast1, 0x4}, {@remote, 0x7}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x80}]}, @generic={0x83, 0x11, "04c54df83564bfaa1bd20022b05b71"}, @timestamp_prespec={0x44, 0x24, 0xa2, 0x3, 0x9, [{@loopback, 0x7}, {@empty, 0x3}, {@empty, 0x1}, {@rand_addr=0x64010100, 0x5}]}, @cipso={0x86, 0x3a, 0x2, [{0x7, 0x5, "36349e"}, {0x0, 0x3, "9d"}, {0x7, 0x3, "cc"}, {0x5, 0x2}, {0x7, 0x6, "e2adb5a6"}, {0x7, 0x5, "33599b"}, {0x2, 0xe, "dcfc219781436a43f8018817"}, {0x7, 0x6, "2781853a"}, {0x1, 0x8, "137f958846d9"}]}, @rr={0x7, 0x1b, 0x85, [@remote, @empty, @empty, @rand_addr=0x64010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @rr={0x7, 0xb, 0x35, [@multicast1, @empty]}]}}}}}) 07:59:27 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) r1 = socket(0x19, 0x3, 0x1) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 07:59:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init() accept4$packet(r0, 0x0, 0x0, 0x800) 07:59:27 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000080), 0xf266620c1f5868a0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) 07:59:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init() accept4$packet(r0, 0x0, 0x0, 0x800) (async) accept4$packet(r0, 0x0, 0x0, 0x800) 07:59:27 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000080), 0xf266620c1f5868a0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) 07:59:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init() accept4$packet(r0, 0x0, 0x0, 0x800) 07:59:28 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="cb46f3cb", @ANYRES16=0x0, @ANYBLOB="00012abd7000fedbdf25060000000c0010000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x7a18592fa25fdb8a) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x4, &(0x7f0000000040), 0x2, r1, 0xd}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x14) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000200), 0x501, 0x0) r4 = openat$vcsu(0xffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x8, 0x700, 0x3, 0x8, {{0xe, 0x4, 0x2, 0x4, 0x38, 0x66, 0x0, 0xff, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1e}, {[@noop, @timestamp={0x44, 0x20, 0xa, 0x0, 0x8, [0x5, 0x90, 0x7, 0x9, 0x3, 0x7ff, 0x9]}]}}}}}) r6 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r6, 0x0, 0x0) r7 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r7, 0x0, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0xfffffffe, 0x0, r0, 0x0, '\x00', 0x0, r0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r1}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x1a, &(0x7f0000000280)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x81, 0x4, 0x9, 0x1, 0x401}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], &(0x7f0000000380)='syzkaller\x00', 0x800, 0x65, &(0x7f00000003c0)=""/101, 0x41100, 0x19, '\x00', r5, 0x25, r1, 0x8, &(0x7f0000000500)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000680)=[r0, r2, 0x1, r1, r1, 0x1, r6, r7, r8, r9], &(0x7f00000006c0)=[{0x2, 0x3, 0x10, 0xb}, {0x4, 0x3, 0x8, 0x5}, {0x1, 0x5, 0x8, 0xc}, {0x3, 0x3, 0x0, 0x3}, {0x3, 0x5, 0xe, 0x3}, {0x4, 0x3, 0x4, 0xa}, {0x5, 0x5, 0x5, 0xb}, {0x4, 0x2, 0x0, 0x9}], 0x10, 0x836}, 0x90) 07:59:28 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) write$eventfd(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x7fff, 0x80000001, 0xfffffff9, 0x81, 0x7fffffff}, 0x14) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x7fff, 0x80000001, 0xfffffff9, 0x81, 0x7fffffff}, 0x14) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x410000, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x5000, &(0x7f0000000080), 0x0, r1}) 07:59:28 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000080), 0xf266620c1f5868a0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000080), 0xf266620c1f5868a0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) (async) 07:59:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote, r2}, 0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x1407, 0x20, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000) accept4$packet(r0, 0x0, 0x0, 0x0) r4 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) syz_io_uring_setup(0x7c4a, &(0x7f0000000340)={0x0, 0x67cd, 0x40, 0x0, 0x296, 0x0, r4}, &(0x7f00000003c0), &(0x7f0000000400)) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) 07:59:28 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xbe2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000084}, 0x44000) 07:59:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote, r2}, 0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x1407, 0x20, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000) accept4$packet(r0, 0x0, 0x0, 0x0) r4 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) syz_io_uring_setup(0x7c4a, &(0x7f0000000340)={0x0, 0x67cd, 0x40, 0x0, 0x296, 0x0, r4}, &(0x7f00000003c0), &(0x7f0000000400)) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) (async) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote, r2}, 0x14) (async) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r3, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x1407, 0x20, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) accept4$packet(r0, 0x0, 0x0, 0x0) (async) openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) (async) syz_io_uring_setup(0x7c4a, &(0x7f0000000340)={0x0, 0x67cd, 0x40, 0x0, 0x296, 0x0, r4}, &(0x7f00000003c0), &(0x7f0000000400)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) (async) 07:59:28 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="cb46f3cb", @ANYRES16=0x0, @ANYBLOB="00012abd7000fedbdf25060000000c0010000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x7a18592fa25fdb8a) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) (async) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x4, &(0x7f0000000040), 0x2, r1, 0xd}) (async) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x14) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000200), 0x501, 0x0) r4 = openat$vcsu(0xffffff9c, &(0x7f0000000240), 0x80, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x8, 0x700, 0x3, 0x8, {{0xe, 0x4, 0x2, 0x4, 0x38, 0x66, 0x0, 0xff, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1e}, {[@noop, @timestamp={0x44, 0x20, 0xa, 0x0, 0x8, [0x5, 0x90, 0x7, 0x9, 0x3, 0x7ff, 0x9]}]}}}}}) r6 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r6, 0x0, 0x0) r7 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r7, 0x0, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0xfffffffe, 0x0, r0, 0x0, '\x00', 0x0, r0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r1}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x1a, &(0x7f0000000280)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x81, 0x4, 0x9, 0x1, 0x401}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], &(0x7f0000000380)='syzkaller\x00', 0x800, 0x65, &(0x7f00000003c0)=""/101, 0x41100, 0x19, '\x00', r5, 0x25, r1, 0x8, &(0x7f0000000500)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000680)=[r0, r2, 0x1, r1, r1, 0x1, r6, r7, r8, r9], &(0x7f00000006c0)=[{0x2, 0x3, 0x10, 0xb}, {0x4, 0x3, 0x8, 0x5}, {0x1, 0x5, 0x8, 0xc}, {0x3, 0x3, 0x0, 0x3}, {0x3, 0x5, 0xe, 0x3}, {0x4, 0x3, 0x4, 0xa}, {0x5, 0x5, 0x5, 0xb}, {0x4, 0x2, 0x0, 0x9}], 0x10, 0x836}, 0x90) 07:59:28 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xbe2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000084}, 0x44000) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xbe2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000084}, 0x44000) (async) 07:59:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote, r2}, 0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x1407, 0x20, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000) accept4$packet(r0, 0x0, 0x0, 0x0) r4 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) syz_io_uring_setup(0x7c4a, &(0x7f0000000340)={0x0, 0x67cd, 0x40, 0x0, 0x296, 0x0, r4}, &(0x7f00000003c0), &(0x7f0000000400)) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) (async) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote, r2}, 0x14) (async) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r3, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x1407, 0x20, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) accept4$packet(r0, 0x0, 0x0, 0x0) (async) openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) (async) syz_io_uring_setup(0x7c4a, &(0x7f0000000340)={0x0, 0x67cd, 0x40, 0x0, 0x296, 0x0, r4}, &(0x7f00000003c0), &(0x7f0000000400)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) (async) 07:59:28 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x7fff, 0x80000001, 0xfffffff9, 0x81, 0x7fffffff}, 0x14) (async) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x410000, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x5000, &(0x7f0000000080), 0x0, r1}) 07:59:28 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="cb46f3cb", @ANYRES16=0x0, @ANYBLOB="00012abd7000fedbdf25060000000c0010000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x7a18592fa25fdb8a) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) (async) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x4, &(0x7f0000000040), 0x2, r1, 0xd}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x14) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000200), 0x501, 0x0) (async) r4 = openat$vcsu(0xffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x8, 0x700, 0x3, 0x8, {{0xe, 0x4, 0x2, 0x4, 0x38, 0x66, 0x0, 0xff, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1e}, {[@noop, @timestamp={0x44, 0x20, 0xa, 0x0, 0x8, [0x5, 0x90, 0x7, 0x9, 0x3, 0x7ff, 0x9]}]}}}}}) (async) r6 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r6, 0x0, 0x0) r7 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r7, 0x0, 0x0) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0xfffffffe, 0x0, r0, 0x0, '\x00', 0x0, r0}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r1}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x1a, &(0x7f0000000280)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x81, 0x4, 0x9, 0x1, 0x401}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], &(0x7f0000000380)='syzkaller\x00', 0x800, 0x65, &(0x7f00000003c0)=""/101, 0x41100, 0x19, '\x00', r5, 0x25, r1, 0x8, &(0x7f0000000500)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000680)=[r0, r2, 0x1, r1, r1, 0x1, r6, r7, r8, r9], &(0x7f00000006c0)=[{0x2, 0x3, 0x10, 0xb}, {0x4, 0x3, 0x8, 0x5}, {0x1, 0x5, 0x8, 0xc}, {0x3, 0x3, 0x0, 0x3}, {0x3, 0x5, 0xe, 0x3}, {0x4, 0x3, 0x4, 0xa}, {0x5, 0x5, 0x5, 0xb}, {0x4, 0x2, 0x0, 0x9}], 0x10, 0x836}, 0x90) 07:59:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x108, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xa0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x60, 0x5, "e77b268b1bf3f406546abc794dec4b462c560f05f060428d6cc54dd0ee67d384799f4bfbf230c1336d7d4300fe4da666a039c6263d20e8eca20fdb7093132656a2d2ac0ee482327f6da6fbf70b1ec443c6e3596f7e65d2c57b87c81f"}, @ETHTOOL_A_BITSET_MASK={0x37, 0x5, "0b484a5be16937e5738a9140b100a4c43ecb95625e1a2171d5c4fc75be962a945d7487a4098cddf9463a584a07c9e75cf27451"}]}, @ETHTOOL_A_DEBUG_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x8044}, 0x0) 07:59:28 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xbe2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000084}, 0x44000) 07:59:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x108, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xa0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x60, 0x5, "e77b268b1bf3f406546abc794dec4b462c560f05f060428d6cc54dd0ee67d384799f4bfbf230c1336d7d4300fe4da666a039c6263d20e8eca20fdb7093132656a2d2ac0ee482327f6da6fbf70b1ec443c6e3596f7e65d2c57b87c81f"}, @ETHTOOL_A_BITSET_MASK={0x37, 0x5, "0b484a5be16937e5738a9140b100a4c43ecb95625e1a2171d5c4fc75be962a945d7487a4098cddf9463a584a07c9e75cf27451"}]}, @ETHTOOL_A_DEBUG_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x8044}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) accept4$packet(r0, 0x0, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x108, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xa0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x60, 0x5, "e77b268b1bf3f406546abc794dec4b462c560f05f060428d6cc54dd0ee67d384799f4bfbf230c1336d7d4300fe4da666a039c6263d20e8eca20fdb7093132656a2d2ac0ee482327f6da6fbf70b1ec443c6e3596f7e65d2c57b87c81f"}, @ETHTOOL_A_BITSET_MASK={0x37, 0x5, "0b484a5be16937e5738a9140b100a4c43ecb95625e1a2171d5c4fc75be962a945d7487a4098cddf9463a584a07c9e75cf27451"}]}, @ETHTOOL_A_DEBUG_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x8044}, 0x0) (async) 07:59:28 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x1014c0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x10, 0x40, 0x4eb39cc3, 0x4, {{0x9, 0x4, 0x3, 0x3, 0x24, 0x67, 0x0, 0x69, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0x21, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0x46be}]}]}}}}}) r3 = openat$hwrng(0xffffff9c, &(0x7f00000001c0), 0x77f70c80a1dcb414, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) r5 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x17, 0x6, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x1, 0xb, 0x4, 0xb, 0x40, 0x1}, @tail_call], &(0x7f0000000080)='syzkaller\x00', 0xffffffc1, 0x38, &(0x7f00000000c0)=""/56, 0x1e00, 0x6, '\x00', r2, 0x24, r3, 0x8, &(0x7f0000000200)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x5, 0x2956fee9, 0x81}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000280)=[0xffffffffffffffff, r4, r5], &(0x7f00000002c0)=[{0x0, 0x5, 0xa, 0xb}, {0x4, 0x1, 0xb, 0xc}, {0x0, 0x2, 0xf}, {0x4, 0x1, 0xa}, {0x0, 0x3, 0xb, 0x1}], 0x10, 0x3}, 0x90) 07:59:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004004}, 0x810) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000001000000008000800000000008c1751b5709c47fa45689967f03d353a49d7442673b142ccaa8b67a6220f72e899b744e0c7d02e1d0cca04f9d2a1492a22e0d0aa92d5a2d13d2edb3774b1c86316f00ffbe130323de8a191f46b53bd5fc19ccf334ee9f403a9e0c32ebe48cac9"], 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6ccf3d6f2b683bd7}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x200040c5}, 0x4000) r5 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x2, "77641801a2c72aecc143b6530bc45c97b39ecd902be2513f22aa4ad4ab5a5ede"}) ioctl$KVM_CREATE_VM(r5, 0x541b, 0x0) 07:59:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x108, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xa0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x60, 0x5, "e77b268b1bf3f406546abc794dec4b462c560f05f060428d6cc54dd0ee67d384799f4bfbf230c1336d7d4300fe4da666a039c6263d20e8eca20fdb7093132656a2d2ac0ee482327f6da6fbf70b1ec443c6e3596f7e65d2c57b87c81f"}, @ETHTOOL_A_BITSET_MASK={0x37, 0x5, "0b484a5be16937e5738a9140b100a4c43ecb95625e1a2171d5c4fc75be962a945d7487a4098cddf9463a584a07c9e75cf27451"}]}, @ETHTOOL_A_DEBUG_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x8044}, 0x0) 07:59:28 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x14003, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:28 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x1014c0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x10, 0x40, 0x4eb39cc3, 0x4, {{0x9, 0x4, 0x3, 0x3, 0x24, 0x67, 0x0, 0x69, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0x21, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0x46be}]}]}}}}}) (async) r3 = openat$hwrng(0xffffff9c, &(0x7f00000001c0), 0x77f70c80a1dcb414, 0x0) (async) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) (async) r5 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x17, 0x6, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x1, 0xb, 0x4, 0xb, 0x40, 0x1}, @tail_call], &(0x7f0000000080)='syzkaller\x00', 0xffffffc1, 0x38, &(0x7f00000000c0)=""/56, 0x1e00, 0x6, '\x00', r2, 0x24, r3, 0x8, &(0x7f0000000200)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x5, 0x2956fee9, 0x81}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000280)=[0xffffffffffffffff, r4, r5], &(0x7f00000002c0)=[{0x0, 0x5, 0xa, 0xb}, {0x4, 0x1, 0xb, 0xc}, {0x0, 0x2, 0xf}, {0x4, 0x1, 0xa}, {0x0, 0x3, 0xb, 0x1}], 0x10, 0x3}, 0x90) 07:59:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "48f16d410bae0f07", "020d67d9d9a67696db50e97a3f3dcbb0", "37241c03", "05c96a5c0611e33d"}, 0x28) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004004}, 0x810) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000001000000008000800000000008c1751b5709c47fa45689967f03d353a49d7442673b142ccaa8b67a6220f72e899b744e0c7d02e1d0cca04f9d2a1492a22e0d0aa92d5a2d13d2edb3774b1c86316f00ffbe130323de8a191f46b53bd5fc19ccf334ee9f403a9e0c32ebe48cac9"], 0x1c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6ccf3d6f2b683bd7}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x200040c5}, 0x4000) (async) r5 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x2, "77641801a2c72aecc143b6530bc45c97b39ecd902be2513f22aa4ad4ab5a5ede"}) (async) ioctl$KVM_CREATE_VM(r5, 0x541b, 0x0) 07:59:28 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x1014c0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x10, 0x40, 0x4eb39cc3, 0x4, {{0x9, 0x4, 0x3, 0x3, 0x24, 0x67, 0x0, 0x69, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0x21, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0x46be}]}]}}}}}) r3 = openat$hwrng(0xffffff9c, &(0x7f00000001c0), 0x77f70c80a1dcb414, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) r5 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x17, 0x6, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x1, 0xb, 0x4, 0xb, 0x40, 0x1}, @tail_call], &(0x7f0000000080)='syzkaller\x00', 0xffffffc1, 0x38, &(0x7f00000000c0)=""/56, 0x1e00, 0x6, '\x00', r2, 0x24, r3, 0x8, &(0x7f0000000200)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x5, 0x2956fee9, 0x81}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000280)=[0xffffffffffffffff, r4, r5], &(0x7f00000002c0)=[{0x0, 0x5, 0xa, 0xb}, {0x4, 0x1, 0xb, 0xc}, {0x0, 0x2, 0xf}, {0x4, 0x1, 0xa}, {0x0, 0x3, 0xb, 0x1}], 0x10, 0x3}, 0x90) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x1014c0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x10, 0x40, 0x4eb39cc3, 0x4, {{0x9, 0x4, 0x3, 0x3, 0x24, 0x67, 0x0, 0x69, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0x21, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0x46be}]}]}}}}}) (async) openat$hwrng(0xffffff9c, &(0x7f00000001c0), 0x77f70c80a1dcb414, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r4, 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x17, 0x6, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x1, 0xb, 0x4, 0xb, 0x40, 0x1}, @tail_call], &(0x7f0000000080)='syzkaller\x00', 0xffffffc1, 0x38, &(0x7f00000000c0)=""/56, 0x1e00, 0x6, '\x00', r2, 0x24, r3, 0x8, &(0x7f0000000200)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x5, 0x2956fee9, 0x81}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000280)=[0xffffffffffffffff, r4, r5], &(0x7f00000002c0)=[{0x0, 0x5, 0xa, 0xb}, {0x4, 0x1, 0xb, 0xc}, {0x0, 0x2, 0xf}, {0x4, 0x1, 0xa}, {0x0, 0x3, 0xb, 0x1}], 0x10, 0x3}, 0x90) (async) 07:59:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "48f16d410bae0f07", "020d67d9d9a67696db50e97a3f3dcbb0", "37241c03", "05c96a5c0611e33d"}, 0x28) accept4$packet(r0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "48f16d410bae0f07", "020d67d9d9a67696db50e97a3f3dcbb0", "37241c03", "05c96a5c0611e33d"}, 0x28) (async) accept4$packet(r0, 0x0, 0x0, 0x0) (async) 07:59:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0) (async, rerun: 64) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004004}, 0x810) (rerun: 64) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000001000000008000800000000008c1751b5709c47fa45689967f03d353a49d7442673b142ccaa8b67a6220f72e899b744e0c7d02e1d0cca04f9d2a1492a22e0d0aa92d5a2d13d2edb3774b1c86316f00ffbe130323de8a191f46b53bd5fc19ccf334ee9f403a9e0c32ebe48cac9"], 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6ccf3d6f2b683bd7}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x200040c5}, 0x4000) (async) r5 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x2, "77641801a2c72aecc143b6530bc45c97b39ecd902be2513f22aa4ad4ab5a5ede"}) (async) ioctl$KVM_CREATE_VM(r5, 0x541b, 0x0) 07:59:28 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x14003, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "48f16d410bae0f07", "020d67d9d9a67696db50e97a3f3dcbb0", "37241c03", "05c96a5c0611e33d"}, 0x28) (async) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "48f16d410bae0f07", "020d67d9d9a67696db50e97a3f3dcbb0", "37241c03", "05c96a5c0611e33d"}, 0x28) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:28 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x30080, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x402, 0x0) getsockname$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x20) 07:59:28 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async, rerun: 32) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async, rerun: 32) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x14003, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:28 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x30080, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x402, 0x0) getsockname$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x20) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x30080, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x402, 0x0) (async) getsockname$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x20) (async) 07:59:28 executing program 3: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x800) 07:59:28 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x5c, 0x0, &(0x7f0000000080)=[@dead_binder_done, @register_looper, @register_looper, @enter_looper, @free_buffer, @acquire_done, @acquire_done={0x40106309, 0x2}, @clear_death={0x400c630f, 0x1}], 0x13, 0x0, &(0x7f0000000100)="a699f6a16db0ee517a28d055efded9d42ce238"}) 07:59:28 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x30080, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x402, 0x0) getsockname$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x20) 07:59:28 executing program 3: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x800) 07:59:28 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r3, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffc9}]}, 0x2c}}, 0x20000000) 07:59:28 executing program 3: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x800) 07:59:28 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48001000", @ANYRES16=0x0, @ANYBLOB="200027bd7000ffdbdf250c00000008000300", @ANYRES32=0x0, @ANYBLOB="08002b00ff7f00000a0009003fd119d3f248000008002c007f00000006002800000000000500290001000000"], 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x40) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x1}]}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 07:59:28 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r3, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffc9}]}, 0x2c}}, 0x20000000) 07:59:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000280), 0x2000, 0x0) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0)=@gcm_256={{}, "a910f765979095ee", "58715357886b313b1d1a9a84fd9caebf33035d6300943b0adcaaa76edb65e064", "ff116255", "489f68122af27b1a"}, 0x38) accept4$packet(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000a55782bab5ceb7ad9975b0dc8516a47a2400f49eddcc75bdcb7c597794a0fd2dd9a17d47eb4f4976", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fcdbdf25080000000c001000008000000000000006000e00ffff000006001c00010000001400080070696d36726567300000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x44801}, 0x40000) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x6c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x42}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r3}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0xc}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_team\x00'}]}, 0x6c}}, 0x2000080) 07:59:28 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x5c, 0x0, &(0x7f0000000080)=[@dead_binder_done, @register_looper, @register_looper, @enter_looper, @free_buffer, @acquire_done, @acquire_done={0x40106309, 0x2}, @clear_death={0x400c630f, 0x1}], 0x13, 0x0, &(0x7f0000000100)="a699f6a16db0ee517a28d055efded9d42ce238"}) 07:59:28 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async, rerun: 32) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 32) write$eventfd(r1, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r3, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffc9}]}, 0x2c}}, 0x20000000) 07:59:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000280), 0x2000, 0x0) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0)=@gcm_256={{}, "a910f765979095ee", "58715357886b313b1d1a9a84fd9caebf33035d6300943b0adcaaa76edb65e064", "ff116255", "489f68122af27b1a"}, 0x38) accept4$packet(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000a55782bab5ceb7ad9975b0dc8516a47a2400f49eddcc75bdcb7c597794a0fd2dd9a17d47eb4f4976", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fcdbdf25080000000c001000008000000000000006000e00ffff000006001c00010000001400080070696d36726567300000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x44801}, 0x40000) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x6c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x42}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r3}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0xc}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_team\x00'}]}, 0x6c}}, 0x2000080) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$hwrng(0xffffff9c, &(0x7f0000000280), 0x2000, 0x0) (async) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0)=@gcm_256={{}, "a910f765979095ee", "58715357886b313b1d1a9a84fd9caebf33035d6300943b0adcaaa76edb65e064", "ff116255", "489f68122af27b1a"}, 0x38) (async) accept4$packet(r0, 0x0, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000a55782bab5ceb7ad9975b0dc8516a47a2400f49eddcc75bdcb7c597794a0fd2dd9a17d47eb4f4976", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fcdbdf25080000000c001000008000000000000006000e00ffff000006001c00010000001400080070696d36726567300000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x44801}, 0x40000) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r2, 0x0, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x6c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x42}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r3}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0xc}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_team\x00'}]}, 0x6c}}, 0x2000080) (async) 07:59:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000280), 0x2000, 0x0) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0)=@gcm_256={{}, "a910f765979095ee", "58715357886b313b1d1a9a84fd9caebf33035d6300943b0adcaaa76edb65e064", "ff116255", "489f68122af27b1a"}, 0x38) accept4$packet(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000a55782bab5ceb7ad9975b0dc8516a47a2400f49eddcc75bdcb7c597794a0fd2dd9a17d47eb4f4976", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fcdbdf25080000000c001000008000000000000006000e00ffff000006001c00010000001400080070696d36726567300000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x44801}, 0x40000) (async) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000a55782bab5ceb7ad9975b0dc8516a47a2400f49eddcc75bdcb7c597794a0fd2dd9a17d47eb4f4976", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fcdbdf25080000000c001000008000000000000006000e00ffff000006001c00010000001400080070696d36726567300000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x44801}, 0x40000) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x6c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x42}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r3}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0xc}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_team\x00'}]}, 0x6c}}, 0x2000080) 07:59:28 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) eventfd(0x180000) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f0000000000)=0x9) 07:59:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote, r2}, 0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000040)={'tunl0\x00', r2, 0xf0, 0x80, 0xfffffff9, 0x6, {{0x4f, 0x4, 0x1, 0x10, 0x13c, 0x67, 0x0, 0x1, 0x2f, 0x0, @loopback, @rand_addr=0x64010101, {[@ssrr={0x89, 0xf, 0x8b, [@broadcast, @multicast2, @broadcast]}, @rr={0x7, 0x1b, 0xf7, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x23}, @dev={0xac, 0x14, 0x14, 0x39}, @loopback, @remote, @multicast2]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x6f, 0x2, [{0x5, 0x10, "8e374b80b8f3adf0cfbf81bec027"}, {0x5, 0xa, "2c2947d687108d38"}, {0x6, 0x7, "225578501f"}, {0x6, 0x11, "4ca50b653d51d9febdc43fd30dfef6"}, {0x0, 0x7, "4fa0800611"}, {0x1, 0x11, "a163cd4df51ad318274c8200d262ea"}, {0x2, 0xa, "32b22e9ae001963d"}, {0x2, 0x3, 'i'}, {0x1, 0x12, "062c7e4f7ce718a9e437db13eef6eb7b"}]}, @timestamp_addr={0x44, 0x44, 0xee, 0x1, 0xd, [{@rand_addr=0x64010101, 0x7}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x81}, {@loopback, 0xb503}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3c}, {@remote, 0x5}, {@rand_addr=0x64010100, 0xfff}, {@local, 0x9}, {@multicast2, 0xfffffff8}]}, @lsrr={0x83, 0x3, 0x4b}, @timestamp_addr={0x44, 0x44, 0x59, 0x1, 0x6, [{@broadcast, 0x3f}, {@local, 0x10001}, {@multicast2, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast1, 0x1}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x200}]}]}}}}}) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 07:59:28 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48001000", @ANYRES16=0x0, @ANYBLOB="200027bd7000ffdbdf250c00000008000300", @ANYRES32=0x0, @ANYBLOB="08002b00ff7f00000a0009003fd119d3f248000008002c007f00000006002800000000000500290001000000"], 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x40) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2) (async, rerun: 64) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x1}]}, 0x1c}}, 0x0) (async, rerun: 64) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 07:59:28 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) eventfd(0x180000) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) write$eventfd(r1, 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f0000000000)=0x9) 07:59:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote, r2}, 0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000040)={'tunl0\x00', r2, 0xf0, 0x80, 0xfffffff9, 0x6, {{0x4f, 0x4, 0x1, 0x10, 0x13c, 0x67, 0x0, 0x1, 0x2f, 0x0, @loopback, @rand_addr=0x64010101, {[@ssrr={0x89, 0xf, 0x8b, [@broadcast, @multicast2, @broadcast]}, @rr={0x7, 0x1b, 0xf7, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x23}, @dev={0xac, 0x14, 0x14, 0x39}, @loopback, @remote, @multicast2]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x6f, 0x2, [{0x5, 0x10, "8e374b80b8f3adf0cfbf81bec027"}, {0x5, 0xa, "2c2947d687108d38"}, {0x6, 0x7, "225578501f"}, {0x6, 0x11, "4ca50b653d51d9febdc43fd30dfef6"}, {0x0, 0x7, "4fa0800611"}, {0x1, 0x11, "a163cd4df51ad318274c8200d262ea"}, {0x2, 0xa, "32b22e9ae001963d"}, {0x2, 0x3, 'i'}, {0x1, 0x12, "062c7e4f7ce718a9e437db13eef6eb7b"}]}, @timestamp_addr={0x44, 0x44, 0xee, 0x1, 0xd, [{@rand_addr=0x64010101, 0x7}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x81}, {@loopback, 0xb503}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3c}, {@remote, 0x5}, {@rand_addr=0x64010100, 0xfff}, {@local, 0x9}, {@multicast2, 0xfffffff8}]}, @lsrr={0x83, 0x3, 0x4b}, @timestamp_addr={0x44, 0x44, 0x59, 0x1, 0x6, [{@broadcast, 0x3f}, {@local, 0x10001}, {@multicast2, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast1, 0x1}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x200}]}]}}}}}) (async) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 07:59:28 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) eventfd(0x180000) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f0000000000)=0x9) 07:59:28 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x5c, 0x0, &(0x7f0000000080)=[@dead_binder_done, @register_looper, @register_looper, @enter_looper, @free_buffer, @acquire_done, @acquire_done={0x40106309, 0x2}, @clear_death={0x400c630f, 0x1}], 0x13, 0x0, &(0x7f0000000100)="a699f6a16db0ee517a28d055efded9d42ce238"}) 07:59:28 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x48) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)='%ps \x00'}, 0x1c) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r5, 0x0, 0x0) sendto$packet(r5, &(0x7f00000005c0)="a4b5fbcf37a2890dba4d3ee6adfe40a54e065dbe0dfeeb77e5dd2ea876592feb097d5ebf1d368ce8bbbac6d750eda56e0e48d749a8c563761bbc4baff872728a70e6ce93bc5b3f1c6760027629340874c41890cae03141bdd42596bde33beca7b34948e5427071913637753804d2911e193fca61d51e8cc8c83d62f621d4db8aff48c66dbd19817c6654c9dfe50b3e769f4dbae8a5b244388fba311c5f9ee0bfe560658ace9e05d1ae15b2474f07af83413fad319c8c0ed3c96872b0b8", 0xbd, 0x20000810, &(0x7f0000000680)={0x11, 0x16, 0x0, 0x1, 0x4, 0x6, @multicast}, 0x14) write$eventfd(r4, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x9, 0x1a, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9}, [@generic={0x7, 0x2, 0x9, 0x0, 0x401}, @func, @cb_func={0x18, 0x4, 0x4, 0x0, 0x4}, @jmp={0x5, 0x1, 0xf, 0x8, 0x6, 0xffffffffffffffc0, 0xffffffffffffffff}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x47e1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffc1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x5d, &(0x7f00000001c0)=""/93, 0x0, 0x40, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000240)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x0, 0x2, 0x8}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000440)=[r3, r4, 0x1, 0x1, r6], &(0x7f0000000480)=[{0x5, 0x1, 0x7, 0x3}, {0x1, 0x1, 0xb, 0x6}, {0x4, 0x4, 0x8, 0x5}, {0x4, 0x3, 0xa, 0x2}, {0x3, 0x4, 0x2}, {0x0, 0x4, 0x1, 0x5}, {0x5, 0x3, 0x9, 0xb}, {0x1, 0x2, 0xd, 0xc}], 0x10, 0x5}, 0x90) 07:59:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) (async) accept4$packet(r0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote, r2}, 0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000040)={'tunl0\x00', r2, 0xf0, 0x80, 0xfffffff9, 0x6, {{0x4f, 0x4, 0x1, 0x10, 0x13c, 0x67, 0x0, 0x1, 0x2f, 0x0, @loopback, @rand_addr=0x64010101, {[@ssrr={0x89, 0xf, 0x8b, [@broadcast, @multicast2, @broadcast]}, @rr={0x7, 0x1b, 0xf7, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x23}, @dev={0xac, 0x14, 0x14, 0x39}, @loopback, @remote, @multicast2]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x6f, 0x2, [{0x5, 0x10, "8e374b80b8f3adf0cfbf81bec027"}, {0x5, 0xa, "2c2947d687108d38"}, {0x6, 0x7, "225578501f"}, {0x6, 0x11, "4ca50b653d51d9febdc43fd30dfef6"}, {0x0, 0x7, "4fa0800611"}, {0x1, 0x11, "a163cd4df51ad318274c8200d262ea"}, {0x2, 0xa, "32b22e9ae001963d"}, {0x2, 0x3, 'i'}, {0x1, 0x12, "062c7e4f7ce718a9e437db13eef6eb7b"}]}, @timestamp_addr={0x44, 0x44, 0xee, 0x1, 0xd, [{@rand_addr=0x64010101, 0x7}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x81}, {@loopback, 0xb503}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3c}, {@remote, 0x5}, {@rand_addr=0x64010100, 0xfff}, {@local, 0x9}, {@multicast2, 0xfffffff8}]}, @lsrr={0x83, 0x3, 0x4b}, @timestamp_addr={0x44, 0x44, 0x59, 0x1, 0x6, [{@broadcast, 0x3f}, {@local, 0x10001}, {@multicast2, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast1, 0x1}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x200}]}]}}}}}) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 07:59:28 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bond_slave_0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="e83d", 0x2, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe5a9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000054) 07:59:28 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48001000", @ANYRES16=0x0, @ANYBLOB="200027bd7000ffdbdf250c00000008000300", @ANYRES32=0x0, @ANYBLOB="08002b00ff7f00000a0009003fd119d3f248000008002c007f00000006002800000000000500290001000000"], 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x40) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x1}]}, 0x1c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 07:59:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 07:59:28 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x48) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)='%ps \x00'}, 0x1c) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r5, 0x0, 0x0) sendto$packet(r5, &(0x7f00000005c0)="a4b5fbcf37a2890dba4d3ee6adfe40a54e065dbe0dfeeb77e5dd2ea876592feb097d5ebf1d368ce8bbbac6d750eda56e0e48d749a8c563761bbc4baff872728a70e6ce93bc5b3f1c6760027629340874c41890cae03141bdd42596bde33beca7b34948e5427071913637753804d2911e193fca61d51e8cc8c83d62f621d4db8aff48c66dbd19817c6654c9dfe50b3e769f4dbae8a5b244388fba311c5f9ee0bfe560658ace9e05d1ae15b2474f07af83413fad319c8c0ed3c96872b0b8", 0xbd, 0x20000810, &(0x7f0000000680)={0x11, 0x16, 0x0, 0x1, 0x4, 0x6, @multicast}, 0x14) (async) write$eventfd(r4, 0x0, 0x0) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x9, 0x1a, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9}, [@generic={0x7, 0x2, 0x9, 0x0, 0x401}, @func, @cb_func={0x18, 0x4, 0x4, 0x0, 0x4}, @jmp={0x5, 0x1, 0xf, 0x8, 0x6, 0xffffffffffffffc0, 0xffffffffffffffff}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x47e1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffc1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x5d, &(0x7f00000001c0)=""/93, 0x0, 0x40, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000240)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x0, 0x2, 0x8}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000440)=[r3, r4, 0x1, 0x1, r6], &(0x7f0000000480)=[{0x5, 0x1, 0x7, 0x3}, {0x1, 0x1, 0xb, 0x6}, {0x4, 0x4, 0x8, 0x5}, {0x4, 0x3, 0xa, 0x2}, {0x3, 0x4, 0x2}, {0x0, 0x4, 0x1, 0x5}, {0x5, 0x3, 0x9, 0xb}, {0x1, 0x2, 0xd, 0xc}], 0x10, 0x5}, 0x90) 07:59:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) (async) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 07:59:28 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x48) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x48) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)='%ps \x00'}, 0x1c) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r5 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r5, 0x0, 0x0) sendto$packet(r5, &(0x7f00000005c0)="a4b5fbcf37a2890dba4d3ee6adfe40a54e065dbe0dfeeb77e5dd2ea876592feb097d5ebf1d368ce8bbbac6d750eda56e0e48d749a8c563761bbc4baff872728a70e6ce93bc5b3f1c6760027629340874c41890cae03141bdd42596bde33beca7b34948e5427071913637753804d2911e193fca61d51e8cc8c83d62f621d4db8aff48c66dbd19817c6654c9dfe50b3e769f4dbae8a5b244388fba311c5f9ee0bfe560658ace9e05d1ae15b2474f07af83413fad319c8c0ed3c96872b0b8", 0xbd, 0x20000810, &(0x7f0000000680)={0x11, 0x16, 0x0, 0x1, 0x4, 0x6, @multicast}, 0x14) write$eventfd(r4, 0x0, 0x0) (async) write$eventfd(r4, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x48) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x9, 0x1a, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9}, [@generic={0x7, 0x2, 0x9, 0x0, 0x401}, @func, @cb_func={0x18, 0x4, 0x4, 0x0, 0x4}, @jmp={0x5, 0x1, 0xf, 0x8, 0x6, 0xffffffffffffffc0, 0xffffffffffffffff}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x47e1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffc1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x5d, &(0x7f00000001c0)=""/93, 0x0, 0x40, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000240)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x0, 0x2, 0x8}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000440)=[r3, r4, 0x1, 0x1, r6], &(0x7f0000000480)=[{0x5, 0x1, 0x7, 0x3}, {0x1, 0x1, 0xb, 0x6}, {0x4, 0x4, 0x8, 0x5}, {0x4, 0x3, 0xa, 0x2}, {0x3, 0x4, 0x2}, {0x0, 0x4, 0x1, 0x5}, {0x5, 0x3, 0x9, 0xb}, {0x1, 0x2, 0xd, 0xc}], 0x10, 0x5}, 0x90) 07:59:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) (async) accept4$packet(r0, 0x0, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) (async) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) (async) 07:59:28 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0xf000, &(0x7f0000000000), 0x1, r2, 0x1}) 07:59:28 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bond_slave_0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="e83d", 0x2, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe5a9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000054) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r1, 0x0, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bond_slave_0\x00'}) (async) sendto$packet(r2, &(0x7f0000000000)="e83d", 0x2, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe5a9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000054) (async) 07:59:28 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 07:59:28 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x8800, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x4040, 0x0) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x7, 0x7}) 07:59:28 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0xf000, &(0x7f0000000000), 0x1, r2, 0x1}) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r2, 0x0, 0x0) (async) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0xf000, &(0x7f0000000000), 0x1, r2, 0x1}) (async) 07:59:28 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) 07:59:28 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 07:59:28 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0xf000, &(0x7f0000000000), 0x1, r2, 0x1}) 07:59:28 executing program 3: setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @random="10763b296daa"}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:28 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bond_slave_0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="e83d", 0x2, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe5a9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000054) 07:59:28 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x8800, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x4040, 0x0) (async, rerun: 32) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x7, 0x7}) 07:59:28 executing program 3: setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @random="10763b296daa"}, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:28 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x18302, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:28 executing program 3: setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @random="10763b296daa"}, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) (async) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:28 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x18302, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:28 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x18302, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:28 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x73e}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x4) getgid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) accept4$packet(r2, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) 07:59:29 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = socket(0x2, 0xa, 0x81) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x48000) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xf7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8081}, 0x4000) 07:59:31 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x8800, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x4040, 0x0) (async) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x7, 0x7}) 07:59:31 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x73e}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x4) getgid() (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) accept4$packet(r2, 0x0, 0x0, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) 07:59:31 executing program 1: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) 07:59:31 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) r1 = socket(0x2, 0xa, 0x81) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x48000) (async) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xf7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8081}, 0x4000) 07:59:31 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x73e}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x4) (async) getgid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) accept4$packet(r2, 0x0, 0x0, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) 07:59:31 executing program 1: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) 07:59:31 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) r1 = socket(0x2, 0xa, 0x81) (async, rerun: 64) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x48000) (async, rerun: 64) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 64) write$eventfd(r3, 0x0, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xf7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8081}, 0x4000) 07:59:31 executing program 3: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x202100, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x7, 0x7800, 0x39c, 0x7, {{0x3a, 0x4, 0x2, 0x0, 0xe8, 0x64, 0x0, 0x6, 0x4, 0x0, @private=0xa010102, @loopback, {[@timestamp_prespec={0x44, 0x3c, 0x80, 0x3, 0x9, [{@loopback, 0x6}, {@remote, 0x6}, {@loopback}, {@local, 0x101}, {@loopback, 0x3}, {@private=0xa010100, 0x80000000}, {@loopback, 0xffffffff}]}, @generic={0x86, 0xa, "5b8a9dd00b76c314"}, @ssrr={0x89, 0xf, 0xa3, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @remote]}, @timestamp_addr={0x44, 0x44, 0xd8, 0x1, 0x6, [{@empty, 0x101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@private=0xa010102, 0x9}, {@local, 0x2}, {@broadcast, 0x7}, {@private=0xa010100, 0x5}, {@loopback, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}, @ssrr={0x89, 0x23, 0x8f, [@empty, @broadcast, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x42}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @empty]}, @end, @end, @generic={0x83, 0x4, "9d05"}, @generic={0x88, 0xf, "d7c2b345a36af279a645f25369"}]}}}}}) 07:59:31 executing program 1: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) 07:59:31 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1e, 0x4, 0x1f, 0x1f, 0x10a1, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x1c) r1 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x140f, 0x100, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x24000090) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 07:59:31 executing program 3: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x202100, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x7, 0x7800, 0x39c, 0x7, {{0x3a, 0x4, 0x2, 0x0, 0xe8, 0x64, 0x0, 0x6, 0x4, 0x0, @private=0xa010102, @loopback, {[@timestamp_prespec={0x44, 0x3c, 0x80, 0x3, 0x9, [{@loopback, 0x6}, {@remote, 0x6}, {@loopback}, {@local, 0x101}, {@loopback, 0x3}, {@private=0xa010100, 0x80000000}, {@loopback, 0xffffffff}]}, @generic={0x86, 0xa, "5b8a9dd00b76c314"}, @ssrr={0x89, 0xf, 0xa3, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @remote]}, @timestamp_addr={0x44, 0x44, 0xd8, 0x1, 0x6, [{@empty, 0x101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@private=0xa010102, 0x9}, {@local, 0x2}, {@broadcast, 0x7}, {@private=0xa010100, 0x5}, {@loopback, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}, @ssrr={0x89, 0x23, 0x8f, [@empty, @broadcast, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x42}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @empty]}, @end, @end, @generic={0x83, 0x4, "9d05"}, @generic={0x88, 0xf, "d7c2b345a36af279a645f25369"}]}}}}}) 07:59:31 executing program 3: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x202100, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x7, 0x7800, 0x39c, 0x7, {{0x3a, 0x4, 0x2, 0x0, 0xe8, 0x64, 0x0, 0x6, 0x4, 0x0, @private=0xa010102, @loopback, {[@timestamp_prespec={0x44, 0x3c, 0x80, 0x3, 0x9, [{@loopback, 0x6}, {@remote, 0x6}, {@loopback}, {@local, 0x101}, {@loopback, 0x3}, {@private=0xa010100, 0x80000000}, {@loopback, 0xffffffff}]}, @generic={0x86, 0xa, "5b8a9dd00b76c314"}, @ssrr={0x89, 0xf, 0xa3, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @remote]}, @timestamp_addr={0x44, 0x44, 0xd8, 0x1, 0x6, [{@empty, 0x101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@private=0xa010102, 0x9}, {@local, 0x2}, {@broadcast, 0x7}, {@private=0xa010100, 0x5}, {@loopback, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}, @ssrr={0x89, 0x23, 0x8f, [@empty, @broadcast, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x42}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @empty]}, @end, @end, @generic={0x83, 0x4, "9d05"}, @generic={0x88, 0xf, "d7c2b345a36af279a645f25369"}]}}}}}) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x202100, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x7, 0x7800, 0x39c, 0x7, {{0x3a, 0x4, 0x2, 0x0, 0xe8, 0x64, 0x0, 0x6, 0x4, 0x0, @private=0xa010102, @loopback, {[@timestamp_prespec={0x44, 0x3c, 0x80, 0x3, 0x9, [{@loopback, 0x6}, {@remote, 0x6}, {@loopback}, {@local, 0x101}, {@loopback, 0x3}, {@private=0xa010100, 0x80000000}, {@loopback, 0xffffffff}]}, @generic={0x86, 0xa, "5b8a9dd00b76c314"}, @ssrr={0x89, 0xf, 0xa3, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @remote]}, @timestamp_addr={0x44, 0x44, 0xd8, 0x1, 0x6, [{@empty, 0x101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@private=0xa010102, 0x9}, {@local, 0x2}, {@broadcast, 0x7}, {@private=0xa010100, 0x5}, {@loopback, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}, @ssrr={0x89, 0x23, 0x8f, [@empty, @broadcast, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x42}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @empty]}, @end, @end, @generic={0x83, 0x4, "9d05"}, @generic={0x88, 0xf, "d7c2b345a36af279a645f25369"}]}}}}}) (async) 07:59:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@window={0x3, 0x5, 0x4}, @timestamp, @timestamp, @sack_perm, @mss={0x2, 0x4ce0}, @mss={0x2, 0x5366}, @sack_perm, @timestamp, @sack_perm, @timestamp], 0xa) r3 = accept4$packet(r1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000000)={'wg2\x00'}) 07:59:31 executing program 1: socket(0x2b, 0x0, 0x1) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x4782, &(0x7f00000002c0)={0x0, 0xa80d, 0x40, 0x3, 0x128}, &(0x7f0000000100), &(0x7f0000000240)) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x400, 0x100, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000), 0x4) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) accept4$phonet_pipe(r3, &(0x7f00000000c0), &(0x7f0000000280)=0x10, 0x80800) 07:59:31 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x282801, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@window={0x3, 0x5, 0x4}, @timestamp, @timestamp, @sack_perm, @mss={0x2, 0x4ce0}, @mss={0x2, 0x5366}, @sack_perm, @timestamp, @sack_perm, @timestamp], 0xa) (async) r3 = accept4$packet(r1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000000)={'wg2\x00'}) 07:59:31 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1e, 0x4, 0x1f, 0x1f, 0x10a1, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x1c) r1 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x140f, 0x100, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x24000090) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 07:59:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@window={0x3, 0x5, 0x4}, @timestamp, @timestamp, @sack_perm, @mss={0x2, 0x4ce0}, @mss={0x2, 0x5366}, @sack_perm, @timestamp, @sack_perm, @timestamp], 0xa) (async, rerun: 64) r3 = accept4$packet(r1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000000)={'wg2\x00'}) 07:59:31 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x282801, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x282801, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) 07:59:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000}, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:31 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x282801, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:31 executing program 1: socket(0x2b, 0x0, 0x1) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x4782, &(0x7f00000002c0)={0x0, 0xa80d, 0x40, 0x3, 0x128}, &(0x7f0000000100), &(0x7f0000000240)) (async) syz_io_uring_setup(0x4782, &(0x7f00000002c0)={0x0, 0xa80d, 0x40, 0x3, 0x128}, &(0x7f0000000100), &(0x7f0000000240)) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x400, 0x100, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000), 0x4) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) accept4$phonet_pipe(r3, &(0x7f00000000c0), &(0x7f0000000280)=0x10, 0x80800) 07:59:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000}, 0x0) (async) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:31 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r1) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r3, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x800}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0xc1}, 0x4004) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip6_vti0\x00'}) 07:59:31 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1e, 0x4, 0x1f, 0x1f, 0x10a1, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x1c) r1 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x140f, 0x100, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x24000090) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1e, 0x4, 0x1f, 0x1f, 0x10a1, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x1c) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x140f, 0x100, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x24000090) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) 07:59:31 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r1) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r3, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x800}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0xc1}, 0x4004) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r3, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x800}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0xc1}, 0x4004) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip6_vti0\x00'}) 07:59:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000}, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r1, 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000}, 0x0) (async) accept4$packet(r0, 0x0, 0x0, 0x0) (async) 07:59:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x28, 0x7, 0x101, 0x5, 0x1}, 0x14) accept4$packet(r0, 0x0, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 07:59:31 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r1) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r3, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x800}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0xc1}, 0x4004) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip6_vti0\x00'}) 07:59:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x28, 0x7, 0x101, 0x5, 0x1}, 0x14) (async, rerun: 64) accept4$packet(r0, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 07:59:31 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x18801, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x600, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000111404002bbd7000fcdbdf2508004a000100000008004b001300000074a75470a5aa3300c0ed9a8ce8c24aedae045f58195f5591080f6f7f3183919a423aa7d6384e9c44a523c7631f09425effb8404ad68b71b9ea8372930264a8b7470d1b75cd36278425d293ec1d0c04811f040f65b4eeca6e988d2643bfed868ef7df0d3271461f93083d5ddbad3c7d344ddfc65803defdc22d145615f969b4367e1bba6aa7bb86304986d10a9e83693910dd5a3e519491d6317eb1"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40000) write$eventfd(r1, 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x616441, 0x0) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x10}, 0x14) write$eventfd(r3, 0x0, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) r5 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r6 = eventfd2(0x47, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000140)={0x0, r6}) write$eventfd(r5, 0x0, 0x0) r7 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x480, 0x0) ioctl$KVM_CREATE_VM(r7, 0x541b, 0x0) 07:59:31 executing program 1: socket(0x2b, 0x0, 0x1) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) syz_io_uring_setup(0x4782, &(0x7f00000002c0)={0x0, 0xa80d, 0x40, 0x3, 0x128}, &(0x7f0000000100), &(0x7f0000000240)) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x400, 0x100, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000), 0x4) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) accept4$phonet_pipe(r3, &(0x7f00000000c0), &(0x7f0000000280)=0x10, 0x80800) 07:59:31 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x18801, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x600, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000111404002bbd7000fcdbdf2508004a000100000008004b001300000074a75470a5aa3300c0ed9a8ce8c24aedae045f58195f5591080f6f7f3183919a423aa7d6384e9c44a523c7631f09425effb8404ad68b71b9ea8372930264a8b7470d1b75cd36278425d293ec1d0c04811f040f65b4eeca6e988d2643bfed868ef7df0d3271461f93083d5ddbad3c7d344ddfc65803defdc22d145615f969b4367e1bba6aa7bb86304986d10a9e83693910dd5a3e519491d6317eb1"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40000) write$eventfd(r1, 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x616441, 0x0) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x10}, 0x14) write$eventfd(r3, 0x0, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) r5 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r6 = eventfd2(0x47, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000140)={0x0, r6}) write$eventfd(r5, 0x0, 0x0) r7 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x480, 0x0) ioctl$KVM_CREATE_VM(r7, 0x541b, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x18801, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r0, 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x600, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000111404002bbd7000fcdbdf2508004a000100000008004b001300000074a75470a5aa3300c0ed9a8ce8c24aedae045f58195f5591080f6f7f3183919a423aa7d6384e9c44a523c7631f09425effb8404ad68b71b9ea8372930264a8b7470d1b75cd36278425d293ec1d0c04811f040f65b4eeca6e988d2643bfed868ef7df0d3271461f93083d5ddbad3c7d344ddfc65803defdc22d145615f969b4367e1bba6aa7bb86304986d10a9e83693910dd5a3e519491d6317eb1"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) write$eventfd(r1, 0x0, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x616441, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x10}, 0x14) (async) write$eventfd(r3, 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r4, 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) eventfd2(0x47, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000140)={0x0, r6}) (async) write$eventfd(r5, 0x0, 0x0) (async) openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x480, 0x0) (async) ioctl$KVM_CREATE_VM(r7, 0x541b, 0x0) (async) 07:59:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x28, 0x7, 0x101, 0x5, 0x1}, 0x14) (async) accept4$packet(r0, 0x0, 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 07:59:31 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = socket(0x15, 0x2, 0x80) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:32 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x18801, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x600, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000111404002bbd7000fcdbdf2508004a000100000008004b001300000074a75470a5aa3300c0ed9a8ce8c24aedae045f58195f5591080f6f7f3183919a423aa7d6384e9c44a523c7631f09425effb8404ad68b71b9ea8372930264a8b7470d1b75cd36278425d293ec1d0c04811f040f65b4eeca6e988d2643bfed868ef7df0d3271461f93083d5ddbad3c7d344ddfc65803defdc22d145615f969b4367e1bba6aa7bb86304986d10a9e83693910dd5a3e519491d6317eb1"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40000) write$eventfd(r1, 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x616441, 0x0) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x10}, 0x14) write$eventfd(r3, 0x0, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) r5 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r6 = eventfd2(0x47, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000140)={0x0, r6}) write$eventfd(r5, 0x0, 0x0) r7 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x480, 0x0) ioctl$KVM_CREATE_VM(r7, 0x541b, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x18801, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r0, 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x600, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000111404002bbd7000fcdbdf2508004a000100000008004b001300000074a75470a5aa3300c0ed9a8ce8c24aedae045f58195f5591080f6f7f3183919a423aa7d6384e9c44a523c7631f09425effb8404ad68b71b9ea8372930264a8b7470d1b75cd36278425d293ec1d0c04811f040f65b4eeca6e988d2643bfed868ef7df0d3271461f93083d5ddbad3c7d344ddfc65803defdc22d145615f969b4367e1bba6aa7bb86304986d10a9e83693910dd5a3e519491d6317eb1"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) write$eventfd(r1, 0x0, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x616441, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x10}, 0x14) (async) write$eventfd(r3, 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r4, 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) eventfd2(0x47, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000140)={0x0, r6}) (async) write$eventfd(r5, 0x0, 0x0) (async) openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x480, 0x0) (async) ioctl$KVM_CREATE_VM(r7, 0x541b, 0x0) (async) 07:59:32 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x18, 0x800, 0x10000) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:32 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) write$eventfd(r0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000, r0}, 0x14) openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xb0a81, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:32 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x18, 0x800, 0x10000) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:32 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x30040, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYRESHEX=r1], 0x34}}, 0x14) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) getsockname$l2tp6(r1, &(0x7f0000000140), &(0x7f0000000180)=0x20) getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) 07:59:32 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x30040, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYRESHEX=r1], 0x34}}, 0x14) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) getsockname$l2tp6(r1, &(0x7f0000000140), &(0x7f0000000180)=0x20) getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) 07:59:32 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket(0x18, 0x800, 0x10000) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:32 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) (async) write$eventfd(r0, 0x0, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000, r0}, 0x14) openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xb0a81, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:32 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = socket(0x15, 0x2, 0x80) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) (async) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:32 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x30040, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYRESHEX=r1], 0x34}}, 0x14) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) getsockname$l2tp6(r1, &(0x7f0000000140), &(0x7f0000000180)=0x20) getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) (async) getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) 07:59:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) accept4$packet(r0, 0x0, 0x0, 0x80800) 07:59:32 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) write$eventfd(r0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000, r0}, 0x14) openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xb0a81, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) (async) write$eventfd(r0, 0x0, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000, r0}, 0x14) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xb0a81, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) 07:59:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) accept4$packet(r0, 0x0, 0x0, 0x80800) 07:59:32 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x400, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x501241, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 07:59:32 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="40007966e10f8000", @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250500000008000a000000000008000b000200000014001f000000000000000000000000000000000106001d0000800000"], 0x40}, 0x1, 0x0, 0x0, 0x40040}, 0x40020) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x51d180, 0x0) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000040)) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async, rerun: 64) accept4$packet(r0, 0x0, 0x0, 0x80800) (rerun: 64) 07:59:32 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = socket(0x15, 0x2, 0x80) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:32 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x400, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x501241, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 07:59:32 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffff9c, &(0x7f00000001c0), 0x80000, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x1402, 0x300, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x0) write$eventfd(r0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000380)={0x1, "ecfc4d5aab75f6488a84a58833ae980fe9590837d63b97d5f78705df20f682bd"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r3, 0x0, 0x0, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000340)={@rand_addr=' \x01\x00', r6}, 0x14) bind$packet(r4, &(0x7f0000000180)={0x11, 0x1c, r6, 0x1, 0xc0}, 0x14) 07:59:32 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x400, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x501241, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 07:59:32 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$hwrng(0xffffff9c, &(0x7f00000001c0), 0x80000, 0x0) (async) r2 = openat$hwrng(0xffffff9c, &(0x7f00000001c0), 0x80000, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x1402, 0x300, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x0) write$eventfd(r0, 0x0, 0x0) (async) write$eventfd(r0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000380)={0x1, "ecfc4d5aab75f6488a84a58833ae980fe9590837d63b97d5f78705df20f682bd"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r3, 0x0, 0x0, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) (async) write$eventfd(r4, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000340)={@rand_addr=' \x01\x00', r6}, 0x14) bind$packet(r4, &(0x7f0000000180)={0x11, 0x1c, r6, 0x1, 0xc0}, 0x14) 07:59:32 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x5, 0x8000) 07:59:32 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="40007966e10f8000", @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250500000008000a000000000008000b000200000014001f000000000000000000000000000000000106001d0000800000"], 0x40}, 0x1, 0x0, 0x0, 0x40040}, 0x40020) (async, rerun: 32) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (rerun: 32) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x51d180, 0x0) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000040)) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:32 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async, rerun: 64) r2 = openat$hwrng(0xffffff9c, &(0x7f00000001c0), 0x80000, 0x0) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x1402, 0x300, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async) write$eventfd(r0, 0x0, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000380)={0x1, "ecfc4d5aab75f6488a84a58833ae980fe9590837d63b97d5f78705df20f682bd"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r3, 0x0, 0x0, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000340)={@rand_addr=' \x01\x00', r6}, 0x14) bind$packet(r4, &(0x7f0000000180)={0x11, 0x1c, r6, 0x1, 0xc0}, 0x14) 07:59:32 executing program 0: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0x1, &(0x7f0000000000)="af13ee1ac4ae6971879d1459cf45090bbeea54a5a034d5d93fdab56f78bb673d3dec0204def596c373d16b07cda6a3cce4058a77a0b33c90cd04cbd987358b79b5031b9fb1d853c8f4936d49da0bcaa3191804c2bed51e8e605c4c4e4b278bbe30aa7878e1d44ab8da6ea14f81b493946921f020716a0b70a355175e07a8446b632fa636", &(0x7f00000000c0)=@tcp6, 0x4}, 0x1c) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x85, 0x2, 0x1f}]}, 0x8) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:32 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) syz_open_dev$media(&(0x7f0000000000), 0x5, 0x8000) 07:59:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:32 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x5, 0x8000) 07:59:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:32 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x8000, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x1ff, 0x3, 0x5, 0x9}, {0x3, 0x1, 0x9, 0xc7}, {0x7, 0x0, 0x9b, 0x800}, {0x3ff, 0x40, 0x8, 0x1}, {0x39, 0x1, 0x80}, {0x8, 0x1f, 0x9, 0x2}, {0xff, 0xf3, 0xc5, 0xa760}, {0x200, 0x3, 0x0, 0x4}]}, 0x8) r0 = socket(0x10, 0x800, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x40, 0x8, 0xfff, 0xffff, 0x8001}, 0x14) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0x541b, 0x0) 07:59:32 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="40007966e10f8000", @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250500000008000a000000000008000b000200000014001f000000000000000000000000000000000106001d0000800000"], 0x40}, 0x1, 0x0, 0x0, 0x40040}, 0x40020) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x51d180, 0x0) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000040)) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="40007966e10f8000", @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250500000008000a000000000008000b000200000014001f000000000000000000000000000000000106001d0000800000"], 0x40}, 0x1, 0x0, 0x0, 0x40040}, 0x40020) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x51d180, 0x0) (async) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000040)) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) 07:59:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) accept4$packet(r0, 0x0, 0x0, 0x0) (async) accept4$packet(r0, 0x0, 0x0, 0x0) 07:59:32 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x8000, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x1ff, 0x3, 0x5, 0x9}, {0x3, 0x1, 0x9, 0xc7}, {0x7, 0x0, 0x9b, 0x800}, {0x3ff, 0x40, 0x8, 0x1}, {0x39, 0x1, 0x80}, {0x8, 0x1f, 0x9, 0x2}, {0xff, 0xf3, 0xc5, 0xa760}, {0x200, 0x3, 0x0, 0x4}]}, 0x8) r0 = socket(0x10, 0x800, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x40, 0x8, 0xfff, 0xffff, 0x8001}, 0x14) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0x541b, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x8000, 0x0) (async) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x1ff, 0x3, 0x5, 0x9}, {0x3, 0x1, 0x9, 0xc7}, {0x7, 0x0, 0x9b, 0x800}, {0x3ff, 0x40, 0x8, 0x1}, {0x39, 0x1, 0x80}, {0x8, 0x1f, 0x9, 0x2}, {0xff, 0xf3, 0xc5, 0xa760}, {0x200, 0x3, 0x0, 0x4}]}, 0x8) (async) socket(0x10, 0x800, 0x2) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x40, 0x8, 0xfff, 0xffff, 0x8001}, 0x14) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r1, 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r2, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0x541b, 0x0) (async) 07:59:32 executing program 0: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0x1, &(0x7f0000000000)="af13ee1ac4ae6971879d1459cf45090bbeea54a5a034d5d93fdab56f78bb673d3dec0204def596c373d16b07cda6a3cce4058a77a0b33c90cd04cbd987358b79b5031b9fb1d853c8f4936d49da0bcaa3191804c2bed51e8e605c4c4e4b278bbe30aa7878e1d44ab8da6ea14f81b493946921f020716a0b70a355175e07a8446b632fa636", &(0x7f00000000c0)=@tcp6, 0x4}, 0x1c) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x85, 0x2, 0x1f}]}, 0x8) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:32 executing program 3: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="40007966e10f8000", @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250500000008000a000000000008000b000200000014001f000000000000000000000000000000000106001d0000800000"], 0x40}, 0x1, 0x0, 0x0, 0x40040}, 0x40020) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x51d180, 0x0) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000040)) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:32 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x8000, 0x0) (async) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x1ff, 0x3, 0x5, 0x9}, {0x3, 0x1, 0x9, 0xc7}, {0x7, 0x0, 0x9b, 0x800}, {0x3ff, 0x40, 0x8, 0x1}, {0x39, 0x1, 0x80}, {0x8, 0x1f, 0x9, 0x2}, {0xff, 0xf3, 0xc5, 0xa760}, {0x200, 0x3, 0x0, 0x4}]}, 0x8) (async) r0 = socket(0x10, 0x800, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x40, 0x8, 0xfff, 0xffff, 0x8001}, 0x14) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0x541b, 0x0) 07:59:32 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x76142, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x10280, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) getpeername$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote, r6}, 0x14) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000080)={@remote, r8}, 0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x40, 0x40, 0x3, 0x1, {{0x10, 0x4, 0x1, 0xc, 0x40, 0x64, 0x0, 0x80, 0x2f, 0x0, @remote, @multicast2, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x23, 0x3, [{0x7, 0xb, "e5d281f5cceca2654d"}, {0x5, 0x3, '%'}, {0x7, 0xf, "efa15e8a11534fb7b1f222b5ba"}]}, @noop, @end, @noop]}}}}}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000080)={@remote, r11}, 0x14) r12 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r12, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00', 0x0}) r14 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r14, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x15, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@call={0x85, 0x0, 0x0, 0xb8}, @ldst={0x0, 0x2, 0x1, 0xb, 0x3, 0x18, 0xfffffffffffffff0}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x46}, @jmp={0x5, 0x0, 0x1, 0xa, 0x7, 0xfffffffffffffffc, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x5, 0x5, 0x5, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000500)='syzkaller\x00', 0x7, 0xa3, &(0x7f0000000540)=""/163, 0x41000, 0x70, '\x00', r13, 0x0, r0, 0x8, &(0x7f0000000640)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0xd, 0x10000, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[r14], &(0x7f0000000700)=[{0x0, 0x3, 0x2, 0xc}, {0x3, 0x4, 0xf, 0x6}, {0x4, 0x2, 0x2, 0xa}], 0x10, 0x8}, 0x90) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0xf0, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0xc040}, 0x20008040) write$eventfd(r0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:32 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x76142, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x10280, 0x0) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) (async) getpeername$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote, r6}, 0x14) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000080)={@remote, r8}, 0x14) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x40, 0x40, 0x3, 0x1, {{0x10, 0x4, 0x1, 0xc, 0x40, 0x64, 0x0, 0x80, 0x2f, 0x0, @remote, @multicast2, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x23, 0x3, [{0x7, 0xb, "e5d281f5cceca2654d"}, {0x5, 0x3, '%'}, {0x7, 0xf, "efa15e8a11534fb7b1f222b5ba"}]}, @noop, @end, @noop]}}}}}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000080)={@remote, r11}, 0x14) (async) r12 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r12, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00', 0x0}) r14 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r14, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x15, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@call={0x85, 0x0, 0x0, 0xb8}, @ldst={0x0, 0x2, 0x1, 0xb, 0x3, 0x18, 0xfffffffffffffff0}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x46}, @jmp={0x5, 0x0, 0x1, 0xa, 0x7, 0xfffffffffffffffc, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x5, 0x5, 0x5, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000500)='syzkaller\x00', 0x7, 0xa3, &(0x7f0000000540)=""/163, 0x41000, 0x70, '\x00', r13, 0x0, r0, 0x8, &(0x7f0000000640)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0xd, 0x10000, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[r14], &(0x7f0000000700)=[{0x0, 0x3, 0x2, 0xc}, {0x3, 0x4, 0xf, 0x6}, {0x4, 0x2, 0x2, 0xa}], 0x10, 0x8}, 0x90) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0xf0, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0xc040}, 0x20008040) (async) write$eventfd(r0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:32 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x34, 0x0, &(0x7f0000000000)=[@release={0x40046306, 0x3}, @release={0x40046306, 0x2}, @acquire={0x40046305, 0x2}, @register_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x1}], 0xc9, 0x0, &(0x7f0000000040)="2f32ec698828d6b0e62f7275539c8a66548f7cc27a81951e304621c1995ad7f4d237f0776ab8003941aaa447f0b0de8ecdb2bdef0748f7479f0af38436591f743d3ceccf04c42623ff0aa479a2426c528cd1c6996b17bb0bc2c15a82fdd4bd7807ba58623332e0bde633b49d193edc301610b0adf4cbbbf6febb32ece9210b792af621b3c272d350d07fefda04d877f2aad35228c25bdd9d66d18b29ac3060807914c7e5e3525d7a98ea3e8bbb2dc808b8bd6dab33d02b2260439a7588491b5bc2ac7c1864ab17d695"}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:32 executing program 3: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x18801, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x600, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000111404002bbd7000fcdbdf2508004a000100000008004b001300000074a75470a5aa3300c0ed9a8ce8c24aedae045f58195f5591080f6f7f3183919a423aa7d6384e9c44a523c7631f09425effb8404ad68b71b9ea8372930264a8b7470d1b75cd36278425d293ec1d0c04811f040f65b4eeca6e988d2643bfed868ef7df0d3271461f93083d5ddbad3c7d344ddfc65803defdc22d145615f969b4367e1bba6aa7bb86304986d10a9e83693910dd5a3e519491d6317eb1"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40000) write$eventfd(r1, 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x616441, 0x0) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x10}, 0x14) write$eventfd(r3, 0x0, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r4, 0x0, 0x0) r5 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r6 = eventfd2(0x47, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000140)={0x0, r6}) write$eventfd(r5, 0x0, 0x0) r7 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x480, 0x0) ioctl$KVM_CREATE_VM(r7, 0x541b, 0x0) 07:59:32 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x76142, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x10280, 0x0) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) (async) getpeername$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote, r6}, 0x14) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000080)={@remote, r8}, 0x14) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x40, 0x40, 0x3, 0x1, {{0x10, 0x4, 0x1, 0xc, 0x40, 0x64, 0x0, 0x80, 0x2f, 0x0, @remote, @multicast2, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x23, 0x3, [{0x7, 0xb, "e5d281f5cceca2654d"}, {0x5, 0x3, '%'}, {0x7, 0xf, "efa15e8a11534fb7b1f222b5ba"}]}, @noop, @end, @noop]}}}}}) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000080)={@remote, r11}, 0x14) (async) r12 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r12, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00', 0x0}) (async) r14 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r14, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x15, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@call={0x85, 0x0, 0x0, 0xb8}, @ldst={0x0, 0x2, 0x1, 0xb, 0x3, 0x18, 0xfffffffffffffff0}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x46}, @jmp={0x5, 0x0, 0x1, 0xa, 0x7, 0xfffffffffffffffc, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x5, 0x5, 0x5, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000500)='syzkaller\x00', 0x7, 0xa3, &(0x7f0000000540)=""/163, 0x41000, 0x70, '\x00', r13, 0x0, r0, 0x8, &(0x7f0000000640)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0xd, 0x10000, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[r14], &(0x7f0000000700)=[{0x0, 0x3, 0x2, 0xc}, {0x3, 0x4, 0xf, 0x6}, {0x4, 0x2, 0x2, 0xa}], 0x10, 0x8}, 0x90) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0xf0, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0xc040}, 0x20008040) (async) write$eventfd(r0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:32 executing program 0: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0x1, &(0x7f0000000000)="af13ee1ac4ae6971879d1459cf45090bbeea54a5a034d5d93fdab56f78bb673d3dec0204def596c373d16b07cda6a3cce4058a77a0b33c90cd04cbd987358b79b5031b9fb1d853c8f4936d49da0bcaa3191804c2bed51e8e605c4c4e4b278bbe30aa7878e1d44ab8da6ea14f81b493946921f020716a0b70a355175e07a8446b632fa636", &(0x7f00000000c0)=@tcp6, 0x4}, 0x1c) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x85, 0x2, 0x1f}]}, 0x8) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:32 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 07:59:32 executing program 3: socket(0x2b, 0x0, 0x1) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x4782, &(0x7f00000002c0)={0x0, 0xa80d, 0x40, 0x3, 0x128}, &(0x7f0000000100), &(0x7f0000000240)) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x400, 0x100, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000), 0x4) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) accept4$phonet_pipe(r3, &(0x7f00000000c0), &(0x7f0000000280)=0x10, 0x80800) 07:59:32 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 07:59:32 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 64) 07:59:32 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000000)) r1 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 07:59:32 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x34, 0x0, &(0x7f0000000000)=[@release={0x40046306, 0x3}, @release={0x40046306, 0x2}, @acquire={0x40046305, 0x2}, @register_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x1}], 0xc9, 0x0, &(0x7f0000000040)="2f32ec698828d6b0e62f7275539c8a66548f7cc27a81951e304621c1995ad7f4d237f0776ab8003941aaa447f0b0de8ecdb2bdef0748f7479f0af38436591f743d3ceccf04c42623ff0aa479a2426c528cd1c6996b17bb0bc2c15a82fdd4bd7807ba58623332e0bde633b49d193edc301610b0adf4cbbbf6febb32ece9210b792af621b3c272d350d07fefda04d877f2aad35228c25bdd9d66d18b29ac3060807914c7e5e3525d7a98ea3e8bbb2dc808b8bd6dab33d02b2260439a7588491b5bc2ac7c1864ab17d695"}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x34, 0x0, &(0x7f0000000000)=[@release={0x40046306, 0x3}, @release={0x40046306, 0x2}, @acquire={0x40046305, 0x2}, @register_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x1}], 0xc9, 0x0, &(0x7f0000000040)="2f32ec698828d6b0e62f7275539c8a66548f7cc27a81951e304621c1995ad7f4d237f0776ab8003941aaa447f0b0de8ecdb2bdef0748f7479f0af38436591f743d3ceccf04c42623ff0aa479a2426c528cd1c6996b17bb0bc2c15a82fdd4bd7807ba58623332e0bde633b49d193edc301610b0adf4cbbbf6febb32ece9210b792af621b3c272d350d07fefda04d877f2aad35228c25bdd9d66d18b29ac3060807914c7e5e3525d7a98ea3e8bbb2dc808b8bd6dab33d02b2260439a7588491b5bc2ac7c1864ab17d695"}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) 07:59:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r1, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x4e, 0x21, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x1, '\x00', r3, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x48) r4 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0x541b, 0x0) 07:59:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r1, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x4e, 0x21, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x1, '\x00', r3, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x48) (async) r4 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0x541b, 0x0) 07:59:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r1, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x4e, 0x21, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x1, '\x00', r3, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x48) (async) r4 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0x541b, 0x0) 07:59:32 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000000)) r1 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r0, 0x0, 0x0) (async) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000000)) (async) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) 07:59:32 executing program 3: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x34, 0x0, &(0x7f0000000000)=[@release={0x40046306, 0x3}, @release={0x40046306, 0x2}, @acquire={0x40046305, 0x2}, @register_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x1}], 0xc9, 0x0, &(0x7f0000000040)="2f32ec698828d6b0e62f7275539c8a66548f7cc27a81951e304621c1995ad7f4d237f0776ab8003941aaa447f0b0de8ecdb2bdef0748f7479f0af38436591f743d3ceccf04c42623ff0aa479a2426c528cd1c6996b17bb0bc2c15a82fdd4bd7807ba58623332e0bde633b49d193edc301610b0adf4cbbbf6febb32ece9210b792af621b3c272d350d07fefda04d877f2aad35228c25bdd9d66d18b29ac3060807914c7e5e3525d7a98ea3e8bbb2dc808b8bd6dab33d02b2260439a7588491b5bc2ac7c1864ab17d695"}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:32 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x541b, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 07:59:32 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x541b, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 07:59:32 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x34, 0x0, &(0x7f0000000000)=[@release={0x40046306, 0x3}, @release={0x40046306, 0x2}, @acquire={0x40046305, 0x2}, @register_looper, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x1}], 0xc9, 0x0, &(0x7f0000000040)="2f32ec698828d6b0e62f7275539c8a66548f7cc27a81951e304621c1995ad7f4d237f0776ab8003941aaa447f0b0de8ecdb2bdef0748f7479f0af38436591f743d3ceccf04c42623ff0aa479a2426c528cd1c6996b17bb0bc2c15a82fdd4bd7807ba58623332e0bde633b49d193edc301610b0adf4cbbbf6febb32ece9210b792af621b3c272d350d07fefda04d877f2aad35228c25bdd9d66d18b29ac3060807914c7e5e3525d7a98ea3e8bbb2dc808b8bd6dab33d02b2260439a7588491b5bc2ac7c1864ab17d695"}) (async, rerun: 64) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:32 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x541b, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x541b, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) 07:59:32 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1e, 0x4, 0x1f, 0x1f, 0x10a1, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x1c) r1 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x140f, 0x100, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x24000090) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 07:59:32 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x141000, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080025bd7000fbdbdf251000000008000900ff0700000800060001000000080006004000000008000700b70000000800070000010000280001801400020073797a6b616c6c65723000000000000008000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x8000010}, 0x4060811) 07:59:32 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000000)) (async) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000000)) r1 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 07:59:32 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x141000, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080025bd7000fbdbdf251000000008000900ff0700000800060001000000080006004000000008000700b70000000800070000010000280001801400020073797a6b616c6c65723000000000000008000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x8000010}, 0x4060811) 07:59:33 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x141000, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080025bd7000fbdbdf251000000008000900ff0700000800060001000000080006004000000008000700b70000000800070000010000280001801400020073797a6b616c6c65723000000000000008000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x8000010}, 0x4060811) 07:59:33 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xff}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 07:59:37 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0xa000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:37 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1e, 0x4, 0x1f, 0x1f, 0x10a1, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x1c) r1 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x140f, 0x100, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x24000090) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 07:59:37 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000040)={0x60, 0x2, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xa274, &(0x7f0000000000)=[{0x6, 0xf5ba, 0x8000}, {0x5, 0x80000001, 0x7f}], 0x2, 0xffffffffffff1e6d, 0x32, 0x2, 0x54, 0x8}) 07:59:37 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xff}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 07:59:37 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xff}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 07:59:37 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:37 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:37 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:37 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0xa000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0xa000, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) 07:59:37 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000040)={0x60, 0x2, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xa274, &(0x7f0000000000)=[{0x6, 0xf5ba, 0x8000}, {0x5, 0x80000001, 0x7f}], 0x2, 0xffffffffffff1e6d, 0x32, 0x2, 0x54, 0x8}) 07:59:37 executing program 3: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) 07:59:37 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x80503, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000080), 0x48080, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000040), 0x8) 07:59:37 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x80503, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000080), 0x48080, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000040), 0x8) 07:59:37 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x80503, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000080), 0x48080, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000040), 0x8) 07:59:37 executing program 3: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x5c, 0x0, &(0x7f0000000080)=[@dead_binder_done, @register_looper, @register_looper, @enter_looper, @free_buffer, @acquire_done, @acquire_done={0x40106309, 0x2}, @clear_death={0x400c630f, 0x1}], 0x13, 0x0, &(0x7f0000000100)="a699f6a16db0ee517a28d055efded9d42ce238"}) 07:59:37 executing program 2: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x2c0080, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="080025bd7000ffdbdf2502000000050013008c000000c547fb7b2b61d64fe7283a091b9d54f8d859cd19be2a4109053a21c66f0177482d6ae8"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x15) r2 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0xa0a01, 0x0) ioctl$KVM_CREATE_VM(r2, 0x541b, 0x0) 07:59:37 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000040)={0x60, 0x2, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xa274, &(0x7f0000000000)=[{0x6, 0xf5ba, 0x8000}, {0x5, 0x80000001, 0x7f}], 0x2, 0xffffffffffff1e6d, 0x32, 0x2, 0x54, 0x8}) 07:59:37 executing program 2: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x2c0080, 0x0) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="080025bd7000ffdbdf2502000000050013008c000000c547fb7b2b61d64fe7283a091b9d54f8d859cd19be2a4109053a21c66f0177482d6ae8"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x15) r2 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0xa0a01, 0x0) ioctl$KVM_CREATE_VM(r2, 0x541b, 0x0) 07:59:37 executing program 3: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 07:59:37 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$kvm(0xffffff9c, &(0x7f0000000380), 0xa000, 0x0) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0xa000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:37 executing program 2: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x2c0080, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="080025bd7000ffdbdf2502000000050013008c000000c547fb7b2b61d64fe7283a091b9d54f8d859cd19be2a4109053a21c66f0177482d6ae8"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x15) r2 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0xa0a01, 0x0) ioctl$KVM_CREATE_VM(r2, 0x541b, 0x0) 07:59:37 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x1ff}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1f}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0xd3}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x101}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x40408d1) 07:59:37 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x1ff}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1f}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0xd3}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x101}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x40408d1) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r1, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x1ff}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1f}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0xd3}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x101}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x40408d1) (async) 07:59:37 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_vlan\x00'}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="70679ed2e7762fc88faad833e70cca833ff2f3b3225e53fd7ebb3d1a0c7956f6b2891ad7f410419d5ce7d31ea39e9fbf0eec24f75fb72a4b0d8e8c538e77be49731c25af3ed121fff450ac3ca0c2d895c9e9a70198722830ecf5184e62f8c218b39c9f2800254e7f52ee77ca3f39ca09157aac5dfaacdc6aa945467b11c9fd6ab46bcaeff134852e13f1c74cfca243ab7699eb841da628d30ef5902b28b4a2a206855e9888ea5b83f179c658004b7d25a323aebeeecebaa5dd", 0xb9, 0x20040080, &(0x7f00000000c0)={0xa, 0x0, 0x80, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3, 0x1}, 0x20) openat$kvm(0xffffff9c, &(0x7f0000000180), 0x201, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='-\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="81000000000001000000433af29c2846547f0600001700005e68a46fe89ecf34684700"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="00012c11fbae0a0566be8cc6fe4763ec9abd7000fbdb76896941d36b8ebf11f2133cb243545a6bf31ca070db8de31f3bc3b3fc44d74e5b9cf9d498036a6495f7b222927a8f200000000042e8b93fba77ee5e84162f6857df477f420769ac503dca9abe6872a7db52341ac49471fe6a8fccbbc66f6992c8d043f35bf33218a4cbb7c9befb64cb7da72d0986e5ddc76770a183a44d01b1ce206ac6c0cd7c0498270654bd33fe6e6b9cd69715d3bb1463648b48c410e7af56810515be8a8b3aa921920ea7e9ed4bc4ca4ff7b387f0f23a1e8fd5eededcd498c580e3c2dff535f75b3393f8efdc0e6896cfd7632fad42f0343c95d15287f003a4415d4e8553f500d8b49fc7b292aa52c65d82d4f384d0634636884a8cd2b9c3d6ccd1c5e1bda42429e8e5ce520cff11d1cef4974cc7dcbf7d86e93e41fc00a96eed098bdc6dcdb77053c4c11849ae50d8c416e01db8cd8daa59b711f8a2c62cd34be3794363044efd69ba6555"], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x800) 07:59:37 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x1c}}, 0x0) (async, rerun: 64) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x1ff}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1f}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0xd3}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x101}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x40408d1) (rerun: 64) 07:59:37 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0xed, 0x4, 0x7, @empty, @dev={0xfe, 0x80, '\x00', 0x13}, 0x66afd03c0247d7e0, 0x20, 0x5, 0x8}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xd3c0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040840}, 0x4) r3 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r4 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x2900, 0x0) r5 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x410002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x2, 0xffffab22, 0x6, 0x1, r4, 0x1f, '\x00', 0x0, r5, 0x0, 0x1, 0x1, 0x4}, 0x48) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 07:59:37 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x24, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x2}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x4000000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000080) 07:59:37 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:38 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_vlan\x00'}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="70679ed2e7762fc88faad833e70cca833ff2f3b3225e53fd7ebb3d1a0c7956f6b2891ad7f410419d5ce7d31ea39e9fbf0eec24f75fb72a4b0d8e8c538e77be49731c25af3ed121fff450ac3ca0c2d895c9e9a70198722830ecf5184e62f8c218b39c9f2800254e7f52ee77ca3f39ca09157aac5dfaacdc6aa945467b11c9fd6ab46bcaeff134852e13f1c74cfca243ab7699eb841da628d30ef5902b28b4a2a206855e9888ea5b83f179c658004b7d25a323aebeeecebaa5dd", 0xb9, 0x20040080, &(0x7f00000000c0)={0xa, 0x0, 0x80, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3, 0x1}, 0x20) openat$kvm(0xffffff9c, &(0x7f0000000180), 0x201, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='-\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="81000000000001000000433af29c2846547f0600001700005e68a46fe89ecf34684700"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="00012c11fbae0a0566be8cc6fe4763ec9abd7000fbdb76896941d36b8ebf11f2133cb243545a6bf31ca070db8de31f3bc3b3fc44d74e5b9cf9d498036a6495f7b222927a8f200000000042e8b93fba77ee5e84162f6857df477f420769ac503dca9abe6872a7db52341ac49471fe6a8fccbbc66f6992c8d043f35bf33218a4cbb7c9befb64cb7da72d0986e5ddc76770a183a44d01b1ce206ac6c0cd7c0498270654bd33fe6e6b9cd69715d3bb1463648b48c410e7af56810515be8a8b3aa921920ea7e9ed4bc4ca4ff7b387f0f23a1e8fd5eededcd498c580e3c2dff535f75b3393f8efdc0e6896cfd7632fad42f0343c95d15287f003a4415d4e8553f500d8b49fc7b292aa52c65d82d4f384d0634636884a8cd2b9c3d6ccd1c5e1bda42429e8e5ce520cff11d1cef4974cc7dcbf7d86e93e41fc00a96eed098bdc6dcdb77053c4c11849ae50d8c416e01db8cd8daa59b711f8a2c62cd34be3794363044efd69ba6555"], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_vlan\x00'}) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="70679ed2e7762fc88faad833e70cca833ff2f3b3225e53fd7ebb3d1a0c7956f6b2891ad7f410419d5ce7d31ea39e9fbf0eec24f75fb72a4b0d8e8c538e77be49731c25af3ed121fff450ac3ca0c2d895c9e9a70198722830ecf5184e62f8c218b39c9f2800254e7f52ee77ca3f39ca09157aac5dfaacdc6aa945467b11c9fd6ab46bcaeff134852e13f1c74cfca243ab7699eb841da628d30ef5902b28b4a2a206855e9888ea5b83f179c658004b7d25a323aebeeecebaa5dd", 0xb9, 0x20040080, &(0x7f00000000c0)={0xa, 0x0, 0x80, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3, 0x1}, 0x20) (async) openat$kvm(0xffffff9c, &(0x7f0000000180), 0x201, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='-\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="81000000000001000000433af29c2846547f0600001700005e68a46fe89ecf34684700"], 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x800) (async) 07:59:38 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:38 executing program 3: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:38 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x24, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x2}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x4000000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000080) 07:59:38 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x26b40, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:38 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x24, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x2}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x4000000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000080) 07:59:38 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:38 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x3) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000180), 0x80082, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r2, 0x9, 0x2, r3}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x140d, 0x10, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x40) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r5, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1c}]}, 0x50}, 0x1, 0x0, 0x0, 0x8c0}, 0x10) 07:59:38 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_vlan\x00'}) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="70679ed2e7762fc88faad833e70cca833ff2f3b3225e53fd7ebb3d1a0c7956f6b2891ad7f410419d5ce7d31ea39e9fbf0eec24f75fb72a4b0d8e8c538e77be49731c25af3ed121fff450ac3ca0c2d895c9e9a70198722830ecf5184e62f8c218b39c9f2800254e7f52ee77ca3f39ca09157aac5dfaacdc6aa945467b11c9fd6ab46bcaeff134852e13f1c74cfca243ab7699eb841da628d30ef5902b28b4a2a206855e9888ea5b83f179c658004b7d25a323aebeeecebaa5dd", 0xb9, 0x20040080, &(0x7f00000000c0)={0xa, 0x0, 0x80, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3, 0x1}, 0x20) (async) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="70679ed2e7762fc88faad833e70cca833ff2f3b3225e53fd7ebb3d1a0c7956f6b2891ad7f410419d5ce7d31ea39e9fbf0eec24f75fb72a4b0d8e8c538e77be49731c25af3ed121fff450ac3ca0c2d895c9e9a70198722830ecf5184e62f8c218b39c9f2800254e7f52ee77ca3f39ca09157aac5dfaacdc6aa945467b11c9fd6ab46bcaeff134852e13f1c74cfca243ab7699eb841da628d30ef5902b28b4a2a206855e9888ea5b83f179c658004b7d25a323aebeeecebaa5dd", 0xb9, 0x20040080, &(0x7f00000000c0)={0xa, 0x0, 0x80, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3, 0x1}, 0x20) openat$kvm(0xffffff9c, &(0x7f0000000180), 0x201, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='-\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="81000000000001000000433af29c2846547f0600001700005e68a46fe89ecf34684700"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x800) 07:59:38 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x151800, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:38 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:38 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x151800, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:38 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x151800, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:38 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000100), 0x9) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)='%pI4 \x00'}, 0x1c) 07:59:38 executing program 2: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x49, 0x4) r1 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x140f, 0x400, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x40004) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x18}, 0x14) ioctl$KVM_CREATE_VM(r1, 0x541b, 0x0) 07:59:38 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x3) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000180), 0x80082, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r2, 0x9, 0x2, r3}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x140d, 0x10, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x40) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r5, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1c}]}, 0x50}, 0x1, 0x0, 0x0, 0x8c0}, 0x10) 07:59:38 executing program 2: openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x49, 0x4) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r1 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x140f, 0x400, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x40004) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x140f, 0x400, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x40004) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x18}, 0x14) ioctl$KVM_CREATE_VM(r1, 0x541b, 0x0) 07:59:38 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:38 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000100), 0x9) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)='%pI4 \x00'}, 0x1c) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) write$cgroup_type(r1, &(0x7f0000000100), 0x9) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)='%pI4 \x00'}, 0x1c) (async) 07:59:38 executing program 2: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x49, 0x4) (async, rerun: 64) r1 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async, rerun: 64) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x140f, 0x400, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x40004) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x18}, 0x14) (async) ioctl$KVM_CREATE_VM(r1, 0x541b, 0x0) 07:59:38 executing program 2: r0 = socket(0x23, 0x803, 0xb2c) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40890}, 0x40080) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x20a100, 0x0) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0x541b, 0x0) 07:59:38 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:38 executing program 2: r0 = socket(0x23, 0x803, 0xb2c) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40890}, 0x40080) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x20a100, 0x0) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0x541b, 0x0) socket(0x23, 0x803, 0xb2c) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40890}, 0x40080) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x20a100, 0x0) (async) openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0x541b, 0x0) (async) 07:59:38 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async, rerun: 64) r1 = openat$binder_debug(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (rerun: 64) write$cgroup_type(r1, &(0x7f0000000100), 0x9) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)='%pI4 \x00'}, 0x1c) 07:59:38 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x3) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000180), 0x80082, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r2, 0x9, 0x2, r3}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x140d, 0x10, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x40) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r5, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1c}]}, 0x50}, 0x1, 0x0, 0x0, 0x8c0}, 0x10) 07:59:38 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 07:59:38 executing program 2: r0 = socket(0x23, 0x803, 0xb2c) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40890}, 0x40080) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x20a100, 0x0) (async) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0x541b, 0x0) 07:59:38 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x105800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x8040, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r2, &(0x7f00000000c0)="65ad19974f3b945a7492e53aa67e718295c57bb94db7270c0e28469362caf837b429310b548be9099e55", 0x2a, 0x44802, &(0x7f0000000100)={0xa, 0x0, 0x71, @private2, 0x1ff, 0x2}, 0x20) 07:59:38 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map, 0x34, 0x0, 0xaf3, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:38 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x105800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x8040, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r2, &(0x7f00000000c0)="65ad19974f3b945a7492e53aa67e718295c57bb94db7270c0e28469362caf837b429310b548be9099e55", 0x2a, 0x44802, &(0x7f0000000100)={0xa, 0x0, 0x71, @private2, 0x1ff, 0x2}, 0x20) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r0, 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x105800, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x8040, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) sendto$l2tp6(r2, &(0x7f00000000c0)="65ad19974f3b945a7492e53aa67e718295c57bb94db7270c0e28469362caf837b429310b548be9099e55", 0x2a, 0x44802, &(0x7f0000000100)={0xa, 0x0, 0x71, @private2, 0x1ff, 0x2}, 0x20) (async) 07:59:38 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map, 0x34, 0x0, 0xaf3, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) (async, rerun: 64) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (rerun: 64) 07:59:38 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x105800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x8040, 0x0) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r2, &(0x7f00000000c0)="65ad19974f3b945a7492e53aa67e718295c57bb94db7270c0e28469362caf837b429310b548be9099e55", 0x2a, 0x44802, &(0x7f0000000100)={0xa, 0x0, 0x71, @private2, 0x1ff, 0x2}, 0x20) 07:59:39 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x3) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000180), 0x80082, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r2, 0x9, 0x2, r3}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x140d, 0x10, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x40) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 07:59:39 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) 07:59:39 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1412, 0x200, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4800}, 0x40800) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 07:59:39 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map, 0x34, 0x0, 0xaf3, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:39 executing program 2: setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @multicast}, 0x10) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:39 executing program 2: setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @multicast}, 0x10) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:39 executing program 2: setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @multicast}, 0x10) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:39 executing program 2: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x4eea02, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) 07:59:39 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x3) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000180), 0x80082, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r2, 0x9, 0x2, r3}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x140d, 0x10, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x40) 07:59:39 executing program 2: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x4eea02, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) 07:59:39 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 07:59:39 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1412, 0x200, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4800}, 0x40800) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1412, 0x200, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4800}, 0x40800) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) 07:59:39 executing program 2: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x4eea02, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) 07:59:39 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x404401, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$vcsu(0xffffff9c, &(0x7f00000001c0), 0x1c1941, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x140d, 0x100, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x30}}, 0x20008000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bond_slave_0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000000)="e83d", 0x2, 0x0, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, r2, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x1c}}, 0x1) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:39 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x404401, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r1) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$vcsu(0xffffff9c, &(0x7f00000001c0), 0x1c1941, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x140d, 0x100, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x30}}, 0x20008000) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bond_slave_0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000000)="e83d", 0x2, 0x0, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, r2, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x1c}}, 0x1) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:39 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1fca9f707291dd45}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x20}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x80}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x663f}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x8}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x4010) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:39 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x3) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000180), 0x80082, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r2, 0x9, 0x2, r3}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 07:59:39 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x404401, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r1) (async, rerun: 32) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) (async) r4 = openat$vcsu(0xffffff9c, &(0x7f00000001c0), 0x1c1941, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x140d, 0x100, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x30}}, 0x20008000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bond_slave_0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000000)="e83d", 0x2, 0x0, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, r2, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x1c}}, 0x1) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:39 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1fca9f707291dd45}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x20}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x80}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x663f}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x8}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x4010) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:39 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1412, 0x200, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4800}, 0x40800) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 07:59:39 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x6, "19adca1434abf8e7a7beedf88023711f64cb4b128e8bca0cdc594ce9e8c5a7df", 0xffffffffffffffff}) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=0xffffffffffffffff, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x50, 0x0, &(0x7f0000000240)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/195, 0xc3, 0x1, 0x40}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}}, @free_buffer], 0x9f, 0x0, &(0x7f00000002c0)="4b8593d31e2a6242fc9222f277e7192ad9f26fa493a1dc4f878e69a61fa2d0246f834435c2eee40460286a618303cbd937df0e5b3e4fcfce851126b0949d2b8159acc8273634874c19925e846c0129fb276c36ef872c60c9a5fb53cf55c9460ddb2aba59396f7c1ceb8836404dc13ccf1c921e59e0ec245cd94a9d9bbba5cd541985c2208f63dff6ab2844b5914f745f1826739973021adc15a9a7de0d0e4d"}) 07:59:39 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x6, "19adca1434abf8e7a7beedf88023711f64cb4b128e8bca0cdc594ce9e8c5a7df", 0xffffffffffffffff}) (async) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=0xffffffffffffffff, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x50, 0x0, &(0x7f0000000240)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/195, 0xc3, 0x1, 0x40}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}}, @free_buffer], 0x9f, 0x0, &(0x7f00000002c0)="4b8593d31e2a6242fc9222f277e7192ad9f26fa493a1dc4f878e69a61fa2d0246f834435c2eee40460286a618303cbd937df0e5b3e4fcfce851126b0949d2b8159acc8273634874c19925e846c0129fb276c36ef872c60c9a5fb53cf55c9460ddb2aba59396f7c1ceb8836404dc13ccf1c921e59e0ec245cd94a9d9bbba5cd541985c2208f63dff6ab2844b5914f745f1826739973021adc15a9a7de0d0e4d"}) 07:59:39 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x6, "19adca1434abf8e7a7beedf88023711f64cb4b128e8bca0cdc594ce9e8c5a7df", 0xffffffffffffffff}) (async, rerun: 32) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=0xffffffffffffffff, 0x4) (rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x50, 0x0, &(0x7f0000000240)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/195, 0xc3, 0x1, 0x40}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}}, @free_buffer], 0x9f, 0x0, &(0x7f00000002c0)="4b8593d31e2a6242fc9222f277e7192ad9f26fa493a1dc4f878e69a61fa2d0246f834435c2eee40460286a618303cbd937df0e5b3e4fcfce851126b0949d2b8159acc8273634874c19925e846c0129fb276c36ef872c60c9a5fb53cf55c9460ddb2aba59396f7c1ceb8836404dc13ccf1c921e59e0ec245cd94a9d9bbba5cd541985c2208f63dff6ab2844b5914f745f1826739973021adc15a9a7de0d0e4d"}) 07:59:39 executing program 0: sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1411, 0x100, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0xc0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x1407, 0x200, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 07:59:39 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x3) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000180), 0x80082, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r2, 0x9, 0x2, r3}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:39 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$kvm(0xffffff9c, &(0x7f0000000280), 0x400, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x20000800) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r1, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xc8b}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7ff}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000040}, 0x80) 07:59:39 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1fca9f707291dd45}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x20}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x80}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x663f}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x8}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x4010) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1fca9f707291dd45}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x20}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x80}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x663f}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x8}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x4010) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) 07:59:39 executing program 0: sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1411, 0x100, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0xc0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) (async) write$eventfd(r0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x1407, 0x200, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 07:59:39 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = openat$kvm(0xffffff9c, &(0x7f0000000280), 0x400, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x20000800) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r1, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xc8b}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7ff}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000040}, 0x80) 07:59:39 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:40 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd(0x3) openat$hwrng(0xffffff9c, &(0x7f0000000180), 0x80082, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:40 executing program 0: sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1411, 0x100, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0xc0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x1407, 0x200, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r1 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 07:59:40 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$kvm(0xffffff9c, &(0x7f0000000280), 0x400, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x20000800) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r1, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xc8b}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7ff}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000040}, 0x80) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) openat$kvm(0xffffff9c, &(0x7f0000000280), 0x400, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x20000800) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r1, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xc8b}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7ff}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000040}, 0x80) (async) 07:59:40 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:40 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40000, 0x0) 07:59:40 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:40 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) 07:59:40 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd(0x3) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:40 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) 07:59:40 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) 07:59:40 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) 07:59:40 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c000000e7f9c65d92a52c7add4b5f8059296d8d2c4f7c68b5b8bf4529", @ANYRES16=r2, @ANYBLOB="000428bd7000fbdbdf2503000000050004008100000008000c00030000000c00160002000000000000000600020001000000060001000000000014001f00ff0200000000000000000000000000010500220001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r3 = socket(0x29, 0x4, 0x6) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r2, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1f}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40020) 07:59:40 executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x48) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000200)=0x88, 0x4) r2 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x3}, 0x48) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x80, 0x10000, 0xfffffff9, 0x282, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x48) r3 = openat$vcsu(0xffffff9c, &(0x7f0000000240), 0x101000, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='nv\x00', 0x3) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:40 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c000000e7f9c65d92a52c7add4b5f8059296d8d2c4f7c68b5b8bf4529", @ANYRES16=r2, @ANYBLOB="000428bd7000fbdbdf2503000000050004008100000008000c00030000000c00160002000000000000000600020001000000060001000000000014001f00ff0200000000000000000000000000010500220001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) r3 = socket(0x29, 0x4, 0x6) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r2, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1f}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40020) 07:59:40 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c000000e7f9c65d92a52c7add4b5f8059296d8d2c4f7c68b5b8bf4529", @ANYRES16=r2, @ANYBLOB="000428bd7000fbdbdf2503000000050004008100000008000c00030000000c00160002000000000000000600020001000000060001000000000014001f00ff0200000000000000000000000000010500220001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) socket(0x29, 0x4, 0x6) (async) r3 = socket(0x29, 0x4, 0x6) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r2, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1f}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40020) 07:59:40 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:40 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_dev$media(&(0x7f0000000040), 0x400, 0x1c080) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000000)={0x3}) 07:59:40 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40000, 0x0) 07:59:40 executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x48) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x48) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000200)=0x88, 0x4) r2 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x3}, 0x48) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x80, 0x10000, 0xfffffff9, 0x282, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x48) r3 = openat$vcsu(0xffffff9c, &(0x7f0000000240), 0x101000, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='nv\x00', 0x3) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='nv\x00', 0x3) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:40 executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x48) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000200)=0x88, 0x4) r2 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x3}, 0x48) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x80, 0x10000, 0xfffffff9, 0x282, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x48) r3 = openat$vcsu(0xffffff9c, &(0x7f0000000240), 0x101000, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='nv\x00', 0x3) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x48) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x48) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000200)=0x88, 0x4) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x3}, 0x48) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x80, 0x10000, 0xfffffff9, 0x282, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x48) (async) openat$vcsu(0xffffff9c, &(0x7f0000000240), 0x101000, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='nv\x00', 0x3) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) 07:59:40 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_dev$media(&(0x7f0000000040), 0x400, 0x1c080) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000000)={0x3}) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r1, 0x0, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000080), 0x400, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) syz_open_dev$media(&(0x7f0000000040), 0x400, 0x1c080) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000000)={0x3}) (async) 07:59:40 executing program 0: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000140), 0x61a500, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="0000f100", @ANYRES16=r1, @ANYBLOB="2001ff070000fbdbdf2506000000080031000400000086f8ff0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8050}, 0x1) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = socket(0x3, 0x3, 0x75d9) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x50, 0x1405, 0x100, 0x70bd2b, 0x25dfdbfc, "", [{{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x7fffffff}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040004) write$eventfd(r2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000040)="cccc553febf974991a44d054570c5c11014ce0d582fe82120c055347bc4ca2e9e7324995d7770f35e7ca6fb9646a9c71dde4f6b4e939aa63006e3d1050dee3fc38393576c6e7d148b68d8e70", &(0x7f00000000c0)=@udp=r2, 0x2}, 0x1c) r4 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 07:59:40 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) r2 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) syz_open_dev$media(&(0x7f0000000040), 0x400, 0x1c080) (async, rerun: 32) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000000)={0x3}) (rerun: 32) 07:59:40 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:40 executing program 0: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000140), 0x61a500, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="0000f100", @ANYRES16=r1, @ANYBLOB="2001ff070000fbdbdf2506000000080031000400000086f8ff0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8050}, 0x1) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="0000f100", @ANYRES16=r1, @ANYBLOB="2001ff070000fbdbdf2506000000080031000400000086f8ff0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8050}, 0x1) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socket(0x3, 0x3, 0x75d9) (async) r3 = socket(0x3, 0x3, 0x75d9) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x50, 0x1405, 0x100, 0x70bd2b, 0x25dfdbfc, "", [{{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x7fffffff}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040004) write$eventfd(r2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000040)="cccc553febf974991a44d054570c5c11014ce0d582fe82120c055347bc4ca2e9e7324995d7770f35e7ca6fb9646a9c71dde4f6b4e939aa63006e3d1050dee3fc38393576c6e7d148b68d8e70", &(0x7f00000000c0)=@udp=r2, 0x2}, 0x1c) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000040)="cccc553febf974991a44d054570c5c11014ce0d582fe82120c055347bc4ca2e9e7324995d7770f35e7ca6fb9646a9c71dde4f6b4e939aa63006e3d1050dee3fc38393576c6e7d148b68d8e70", &(0x7f00000000c0)=@udp=r2, 0x2}, 0x1c) r4 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 07:59:40 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:40 executing program 0: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000140), 0x61a500, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="0000f100", @ANYRES16=r1, @ANYBLOB="2001ff070000fbdbdf2506000000080031000400000086f8ff0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8050}, 0x1) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r3 = socket(0x3, 0x3, 0x75d9) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x50, 0x1405, 0x100, 0x70bd2b, 0x25dfdbfc, "", [{{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x7fffffff}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040004) write$eventfd(r2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000040)="cccc553febf974991a44d054570c5c11014ce0d582fe82120c055347bc4ca2e9e7324995d7770f35e7ca6fb9646a9c71dde4f6b4e939aa63006e3d1050dee3fc38393576c6e7d148b68d8e70", &(0x7f00000000c0)=@udp=r2, 0x2}, 0x1c) r4 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 07:59:40 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_dev$media(&(0x7f0000000040), 0x400, 0x1c080) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000000)={0x3}) 07:59:40 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:40 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:40 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x20) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000000)={0x1, 0x1, 0xff, 0x3, @vifc_lcl_addr=@remote, @rand_addr=0x64210100}, 0x10) r1 = openat$binder_debug(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) sendto$l2tp6(r2, &(0x7f0000000180)="f9c6f519e9ca2ac2dca3b183df80769050f71dd63b2aeeb9318cdbb4c30d57d5583d5a38ea169cf3a58ad09f89a632ec16f28d0c28e265f4b3", 0x39, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x23, @rand_addr=' \x01\x00', 0x6, 0x3}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, r1, 0x1, 0x2, 0x4}, 0x48) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:40 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:40 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:41 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:41 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x20) (async) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000000)={0x1, 0x1, 0xff, 0x3, @vifc_lcl_addr=@remote, @rand_addr=0x64210100}, 0x10) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) (async) sendto$l2tp6(r2, &(0x7f0000000180)="f9c6f519e9ca2ac2dca3b183df80769050f71dd63b2aeeb9318cdbb4c30d57d5583d5a38ea169cf3a58ad09f89a632ec16f28d0c28e265f4b3", 0x39, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x23, @rand_addr=' \x01\x00', 0x6, 0x3}, 0x20) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, r1, 0x1, 0x2, 0x4}, 0x48) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:41 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x404401, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$vcsu(0xffffff9c, &(0x7f00000001c0), 0x1c1941, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x140d, 0x100, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x30}}, 0x20008000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bond_slave_0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000000)="e83d", 0x2, 0x0, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, r2, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x1c}}, 0x1) ioctl$KVM_CREATE_VM(r0, 0x541b, 0x0) 07:59:41 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 07:59:41 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x20) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000000)={0x1, 0x1, 0xff, 0x3, @vifc_lcl_addr=@remote, @rand_addr=0x64210100}, 0x10) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) (async) sendto$l2tp6(r2, &(0x7f0000000180)="f9c6f519e9ca2ac2dca3b183df80769050f71dd63b2aeeb9318cdbb4c30d57d5583d5a38ea169cf3a58ad09f89a632ec16f28d0c28e265f4b3", 0x39, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x23, @rand_addr=' \x01\x00', 0x6, 0x3}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, r1, 0x1, 0x2, 0x4}, 0x48) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:41 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 07:59:41 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x3) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000180), 0x80082, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r2, 0x9, 0x2, r3}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x140d, 0x10, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x40) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 07:59:41 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 07:59:41 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:41 executing program 3: r0 = openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:41 executing program 3: r0 = openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:41 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:41 executing program 3: r0 = openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:41 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:41 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x3) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000180), 0x80082, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r2, 0x9, 0x2, r3}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x140d, 0x10, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x40) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 07:59:41 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x101000, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) 07:59:41 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:41 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:41 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:41 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:41 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:41 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 07:59:41 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x3) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000180), 0x80082, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r2, 0x9, 0x2, r3}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x140d, 0x10, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x40) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 07:59:41 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:41 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:41 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 07:59:41 executing program 1: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x400000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1300000086c0263b9fc284465ae815d864a1ffcb599aa5140a1dd4474c4cbd68619b650b05a534e67c574ddb998c010f", @ANYRES16=r2, @ANYBLOB="01000000000000000000100000000800080000000000"], 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x9}, @ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x4}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x1}, @ETHTOOL_A_RINGS_TX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:41 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:41 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x3) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000180), 0x80082, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r2, 0x9, 0x2, r3}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x140d, 0x10, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x40) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 07:59:41 executing program 1: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x400000, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1300000086c0263b9fc284465ae815d864a1ffcb599aa5140a1dd4474c4cbd68619b650b05a534e67c574ddb998c010f", @ANYRES16=r2, @ANYBLOB="01000000000000000000100000000800080000000000"], 0x1c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x9}, @ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x4}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x1}, @ETHTOOL_A_RINGS_TX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async, rerun: 64) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (rerun: 64) 07:59:41 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 07:59:41 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1406, 0x400, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:42 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 07:59:42 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1406, 0x400, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1406, 0x400, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) 07:59:42 executing program 3: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x400000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1300000086c0263b9fc284465ae815d864a1ffcb599aa5140a1dd4474c4cbd68619b650b05a534e67c574ddb998c010f", @ANYRES16=r2, @ANYBLOB="01000000000000000000100000000800080000000000"], 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x9}, @ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x4}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x1}, @ETHTOOL_A_RINGS_TX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:42 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x3) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000180), 0x80082, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r2, 0x9, 0x2, r3}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x140d, 0x10, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x40) 07:59:42 executing program 3: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:46 executing program 1: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x400000, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1300000086c0263b9fc284465ae815d864a1ffcb599aa5140a1dd4474c4cbd68619b650b05a534e67c574ddb998c010f", @ANYRES16=r2, @ANYBLOB="01000000000000000000100000000800080000000000"], 0x1c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x9}, @ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x4}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x1}, @ETHTOOL_A_RINGS_TX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r3 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:59:46 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:46 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x3) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000180), 0x80082, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r2, 0x9, 0x2, r3}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 07:59:46 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1406, 0x400, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:46 executing program 0: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) write$eventfd(r0, &(0x7f0000000000)=0x9, 0x8) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 07:59:46 executing program 0: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) write$eventfd(r0, &(0x7f0000000000)=0x9, 0x8) (async) write$eventfd(r0, &(0x7f0000000000)=0x9, 0x8) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) write$eventfd(r1, 0x0, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 07:59:46 executing program 3: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 07:59:46 executing program 0: openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) (async, rerun: 32) write$eventfd(r0, &(0x7f0000000000)=0x9, 0x8) (async, rerun: 32) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r1, 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 07:59:46 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x40001) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x107c01, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000041}, 0x20008001) 07:59:46 executing program 0: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0xc1a9}, 0x8) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="58ab0043501470b1250800cb0013f7000008004f000009000000004f000000000008004b0013002000080003b8020052605ff06e700b80000008004f040000004f000500000008005b00130000000000000000000079f5995959"], 0x58}, 0x1, 0x0, 0x0, 0x2400c080}, 0x4044) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = eventfd(0xff) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x4000, 0x6, r3}) read$eventfd(r2, &(0x7f00000000c0), 0x8) 07:59:46 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x3) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000180), 0x80082, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r2, 0x9, 0x2, r3}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:46 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x3) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000180), 0x80082, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r2, 0x9, 0x2, r3}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 07:59:46 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x40001) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x107c01, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000041}, 0x20008001) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x40001) (async) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x107c01, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000041}, 0x20008001) (async) 07:59:47 executing program 0: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0xc1a9}, 0x8) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="58ab0043501470b1250800cb0013f7000008004f000009000000004f000000000008004b0013002000080003b8020052605ff06e700b80000008004f040000004f000500000008005b00130000000000000000000079f5995959"], 0x58}, 0x1, 0x0, 0x0, 0x2400c080}, 0x4044) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = eventfd(0xff) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x4000, 0x6, r3}) read$eventfd(r2, &(0x7f00000000c0), 0x8) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0xc1a9}, 0x8) (async) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="58ab0043501470b1250800cb0013f7000008004f000009000000004f000000000008004b0013002000080003b8020052605ff06e700b80000008004f040000004f000500000008005b00130000000000000000000079f5995959"], 0x58}, 0x1, 0x0, 0x0, 0x2400c080}, 0x4044) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) eventfd(0xff) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$eventfd(r3, 0x0, 0x0) (async) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x4000, 0x6, r3}) (async) read$eventfd(r2, &(0x7f00000000c0), 0x8) (async) 07:59:47 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd(0x3) openat$hwrng(0xffffff9c, &(0x7f0000000180), 0x80082, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:47 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x40001) (async) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x107c01, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000041}, 0x20008001) 07:59:47 executing program 0: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0xc1a9}, 0x8) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0xc1a9}, 0x8) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="58ab0043501470b1250800cb0013f7000008004f000009000000004f000000000008004b0013002000080003b8020052605ff06e700b80000008004f040000004f000500000008005b00130000000000000000000079f5995959"], 0x58}, 0x1, 0x0, 0x0, 0x2400c080}, 0x4044) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = eventfd(0xff) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x4000, 0x6, r3}) read$eventfd(r2, &(0x7f00000000c0), 0x8) (async) read$eventfd(r2, &(0x7f00000000c0), 0x8) 07:59:47 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x3) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000180), 0x80082, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r2, 0x9, 0x2, r3}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x140d, 0x10, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x40) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r5, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1c}]}, 0x50}, 0x1, 0x0, 0x0, 0x8c0}, 0x10) 07:59:47 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000001c0)={0x0, 0xd, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9f2b0000c8c63fbba9c375c1098ae0854e907452ff35ff6171c90b2bb505", @ANYRESOCT=r3, @ANYBLOB="01f31f88f4218593dfd05c234900"], 0x14}, 0x1, 0x0, 0x0, 0xb2}, 0x90) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4001) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000140)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000200)={0x60, 0x1, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r5 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(r5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) openat$hwrng(0xffffff9c, &(0x7f0000000400), 0x100, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x2404c000}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r6, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44800}, 0x0) [ 1285.414145][T17703] ------------[ cut here ]------------ [ 1285.416437][T17703] WARNING: CPU: 1 PID: 17703 at arch/x86/kvm/../../../virt/kvm/kvm_main.c:590 kvm_mmu_notifier_invalidate_range_start+0x920/0xa90 [ 1285.421282][T17703] Modules linked in: [ 1285.422901][T17703] CPU: 1 PID: 17703 Comm: syz-executor.1 Not tainted 6.7.0-rc7-syzkaller-00049-g453f5db0619e #0 [ 1285.426777][T17703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 1285.430531][T17703] RIP: 0010:kvm_mmu_notifier_invalidate_range_start+0x920/0xa90 07:59:47 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd(0x3) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 1285.435184][T17703] Code: 84 e4 0f 85 9f f8 ff ff e8 0d 66 7d 00 90 0f 0b 90 e9 91 f8 ff ff e8 ff 65 7d 00 90 0f 0b 90 e9 d5 fd ff ff e8 f1 65 7d 00 90 <0f> 0b 90 e9 e0 fc ff ff e8 e3 65 7d 00 90 0f 0b 90 e9 a1 fc ff ff [ 1285.443317][T17703] RSP: 0018:ffffc90003e27aa0 EFLAGS: 00010283 [ 1285.445738][T17703] RAX: 00000000000026a1 RBX: 0000000020ffe000 RCX: ffffc90004bf9000 [ 1285.448737][T17703] RDX: 0000000000040000 RSI: ffffffff810a0c5f RDI: 0000000000000006 [ 1285.452117][T17703] RBP: ffffc90003e27d38 R08: 0000000000000006 R09: 0000000020ffe000 [ 1285.455517][T17703] R10: 0000000020ffe000 R11: 0000000000000001 R12: ffffc90003e9da30 [ 1285.458449][T17703] R13: 0000000000000001 R14: 0000000020ffe000 R15: ffffc90003ea6810 [ 1285.461410][T17703] FS: 0000000000000000(0000) GS:ffff88802c700000(0063) knlGS:00000000f7f79b40 [ 1285.465271][T17703] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1285.468299][T17703] CR2: 00000000f733afb8 CR3: 00000000192ca000 CR4: 0000000000352ef0 [ 1285.471447][T17703] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1285.475197][T17703] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1285.478241][T17703] Call Trace: [ 1285.479512][T17703] [ 1285.480641][T17703] ? show_regs+0x8f/0xa0 [ 1285.482344][T17703] ? __warn+0xe6/0x390 [ 1285.483957][T17703] ? kvm_mmu_notifier_invalidate_range_start+0x920/0xa90 [ 1285.486631][T17703] ? report_bug+0x3bc/0x580 [ 1285.488424][T17703] ? handle_bug+0x3d/0x70 [ 1285.490105][T17703] ? exc_invalid_op+0x17/0x40 [ 1285.492116][T17703] ? asm_exc_invalid_op+0x1a/0x20 [ 1285.494053][T17703] ? kvm_mmu_notifier_invalidate_range_start+0x91f/0xa90 [ 1285.497106][T17703] ? kvm_mmu_notifier_invalidate_range_start+0x920/0xa90 [ 1285.499690][T17703] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 1285.502254][T17703] ? kvm_mmu_notifier_clear_flush_young+0x7f0/0x7f0 [ 1285.504959][T17703] ? lock_sync+0x190/0x190 [ 1285.506630][T17703] ? lock_sync+0x190/0x190 [ 1285.508307][T17703] ? kvm_mmu_notifier_clear_flush_young+0x7f0/0x7f0 [ 1285.510741][T17703] __mmu_notifier_invalidate_range_start+0x3b7/0x8f0 [ 1285.513279][T17703] do_pagemap_scan+0xbd5/0xcd0 [ 1285.515088][T17703] ? show_smaps_rollup+0x8f0/0x8f0 [ 1285.517008][T17703] do_pagemap_cmd+0x5e/0x80 [ 1285.518735][T17703] ? do_pagemap_scan+0xcd0/0xcd0 [ 1285.520552][T17703] __do_compat_sys_ioctl+0x2bf/0x330 [ 1285.522596][T17703] __do_fast_syscall_32+0x62/0xe0 [ 1285.524492][T17703] do_fast_syscall_32+0x33/0x70 [ 1285.526275][T17703] entry_SYSENTER_compat_after_hwframe+0x70/0x7a [ 1285.528638][T17703] RIP: 0023:0xf7f7e579 [ 1285.530148][T17703] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1285.537852][T17703] RSP: 002b:00000000f7f795ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1285.540907][T17703] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000c0606610 [ 1285.543934][T17703] RDX: 0000000020000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 1285.546867][T17703] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1285.549745][T17703] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1285.552767][T17703] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1285.555737][T17703] [ 1285.556899][T17703] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1285.559556][T17703] CPU: 1 PID: 17703 Comm: syz-executor.1 Not tainted 6.7.0-rc7-syzkaller-00049-g453f5db0619e #0 [ 1285.563900][T17703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 1285.567669][T17703] Call Trace: [ 1285.568915][T17703] [ 1285.570012][T17703] dump_stack_lvl+0xd9/0x1b0 [ 1285.571758][T17703] panic+0x6dc/0x790 [ 1285.573237][T17703] ? panic_smp_self_stop+0xa0/0xa0 [ 1285.575155][T17703] ? show_trace_log_lvl+0x363/0x4f0 [ 1285.577087][T17703] ? kvm_mmu_notifier_invalidate_range_start+0x920/0xa90 [ 1285.579671][T17703] check_panic_on_warn+0xab/0xb0 [ 1285.581512][T17703] __warn+0xf2/0x390 [ 1285.583312][T17703] ? kvm_mmu_notifier_invalidate_range_start+0x920/0xa90 [ 1285.586135][T17703] report_bug+0x3bc/0x580 [ 1285.587743][T17703] handle_bug+0x3d/0x70 [ 1285.589294][T17703] exc_invalid_op+0x17/0x40 [ 1285.590974][T17703] asm_exc_invalid_op+0x1a/0x20 [ 1285.592779][T17703] RIP: 0010:kvm_mmu_notifier_invalidate_range_start+0x920/0xa90 [ 1285.595568][T17703] Code: 84 e4 0f 85 9f f8 ff ff e8 0d 66 7d 00 90 0f 0b 90 e9 91 f8 ff ff e8 ff 65 7d 00 90 0f 0b 90 e9 d5 fd ff ff e8 f1 65 7d 00 90 <0f> 0b 90 e9 e0 fc ff ff e8 e3 65 7d 00 90 0f 0b 90 e9 a1 fc ff ff [ 1285.602855][T17703] RSP: 0018:ffffc90003e27aa0 EFLAGS: 00010283 [ 1285.605116][T17703] RAX: 00000000000026a1 RBX: 0000000020ffe000 RCX: ffffc90004bf9000 [ 1285.608088][T17703] RDX: 0000000000040000 RSI: ffffffff810a0c5f RDI: 0000000000000006 [ 1285.611044][T17703] RBP: ffffc90003e27d38 R08: 0000000000000006 R09: 0000000020ffe000 [ 1285.614089][T17703] R10: 0000000020ffe000 R11: 0000000000000001 R12: ffffc90003e9da30 [ 1285.617100][T17703] R13: 0000000000000001 R14: 0000000020ffe000 R15: ffffc90003ea6810 [ 1285.620110][T17703] ? kvm_mmu_notifier_invalidate_range_start+0x91f/0xa90 [ 1285.622836][T17703] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 1285.625158][T17703] ? kvm_mmu_notifier_clear_flush_young+0x7f0/0x7f0 [ 1285.627687][T17703] ? lock_sync+0x190/0x190 [ 1285.629415][T17703] ? lock_sync+0x190/0x190 [ 1285.631152][T17703] ? kvm_mmu_notifier_clear_flush_young+0x7f0/0x7f0 [ 1285.633742][T17703] __mmu_notifier_invalidate_range_start+0x3b7/0x8f0 [ 1285.636286][T17703] do_pagemap_scan+0xbd5/0xcd0 [ 1285.638167][T17703] ? show_smaps_rollup+0x8f0/0x8f0 [ 1285.640155][T17703] do_pagemap_cmd+0x5e/0x80 [ 1285.641937][T17703] ? do_pagemap_scan+0xcd0/0xcd0 [ 1285.643878][T17703] __do_compat_sys_ioctl+0x2bf/0x330 [ 1285.645920][T17703] __do_fast_syscall_32+0x62/0xe0 [ 1285.647872][T17703] do_fast_syscall_32+0x33/0x70 [ 1285.649730][T17703] entry_SYSENTER_compat_after_hwframe+0x70/0x7a [ 1285.652262][T17703] RIP: 0023:0xf7f7e579 [ 1285.653866][T17703] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1285.660929][T17703] RSP: 002b:00000000f7f795ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1285.664535][T17703] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000c0606610 [ 1285.667503][T17703] RDX: 0000000020000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 1285.670407][T17703] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1285.673344][T17703] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1285.676332][T17703] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1285.679256][T17703] [ 1285.681130][T17703] Kernel Offset: disabled [ 1285.682845][T17703] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:59:47 Registers: info registers vcpu 0 CPU#0 RAX=00000000004d6e4f RBX=0000000000000000 RCX=ffffffff8a7ffc87 RDX=0000000000000000 RSI=ffffffff8accaec0 RDI=ffffffff8b2efd60 RBP=fffffbfff1992b20 RSP=ffffffff8cc07e18 R8 =0000000000000001 R9 =ffffed10058c6dbd R10=ffff88802c636deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8cc95900 R14=ffffffff8f193dd0 R15=0000000000000000 RIP=ffffffff8a800edf RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7322698 CR3=000000005aa74000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84d814f5 RDI=ffffffff92a8ffe0 RBP=ffffffff92a8ffa0 RSP=ffffc90003e27470 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000005 R12=0000000000000000 R13=0000000000000030 R14=ffffffff84d81490 R15=0000000000000000 RIP=ffffffff84d8151f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f733afb8 CR3=00000000192ca000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000056909d RBX=0000000000000002 RCX=ffffffff8a7ffc87 RDX=0000000000000000 RSI=ffffffff8accaec0 RDI=ffffffff8b2efd60 RBP=ffffed1002a5d480 RSP=ffffc90000467e08 R8 =0000000000000001 R9 =ffffed1005906dbd R10=ffff88802c836deb R11=0000000000000000 R12=0000000000000002 R13=ffff8880152ea400 R14=ffffffff8f193dd0 R15=0000000000000000 RIP=ffffffff8a800edf RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7338cec CR3=0000000012d4e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000004f3ceb RBX=0000000000000003 RCX=ffffffff8a7ffc87 RDX=0000000000000000 RSI=ffffffff8accaec0 RDI=ffffffff8b2efd60 RBP=ffffed1002a5d900 RSP=ffffc90000477e08 R8 =0000000000000001 R9 =ffffed1005926dbd R10=ffff88802c936deb R11=0000000000000000 R12=0000000000000003 R13=ffff8880152ec800 R14=ffffffff8f193dd0 R15=0000000000000000 RIP=ffffffff8a800edf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f737c0c4 CR3=0000000021a29000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000