nts64(r1, 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000000)=[0x8, 0x4]) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) r3 = getpid() ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000080)={r3, 0x0, 0x3}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x0) (async) getdents64(r1, 0x0, 0x0) (async) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000000)=[0x8, 0x4]) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) (async) getpid() (async) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000080)={r3, 0x0, 0x3}) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) 14:11:54 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x7fffffff, '\x00', 0x0, r0, 0x2, 0x0, 0x5}, 0x48) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:54 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x6}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x2c, 0x15, 0x8, 0x70bd26, 0x25dfdbfd, {0x2, 0x20, 0x0, 0x0, r2}, [@IFA_LABEL={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x815dca2c356cf7ca}, 0x81) 14:11:54 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x7fffffff, '\x00', 0x0, r0, 0x2, 0x0, 0x5}, 0x48) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x8}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) getsockname$netlink(r4, 0x0, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000140), 0x4, 0x40101) write$cgroup_pressure(r5, &(0x7f00000000c0)={'full'}, 0x2f) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0xff, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x48) r9 = syz_open_dev$vcsu(&(0x7f0000000580), 0x8, 0x80400) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000200)=@raw=[@ldst={0x2, 0x0, 0x4, 0x5, 0x8, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000240)='GPL\x00', 0xac, 0xcd, &(0x7f0000000280)=""/205, 0x40f00, 0x9, '\x00', r3, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x4, 0xb, 0x2, 0xfff}, 0x10, 0x4eb4, r5, 0x8, &(0x7f00000005c0)=[r6, r7, 0x1, r8, r9], &(0x7f0000000600)=[{0x2, 0x3, 0x1, 0x4}, {0x1, 0x2, 0x2, 0x3}, {0x5, 0x2, 0x1, 0x1}, {0x1, 0x1, 0xb, 0x7}, {0x4, 0x2, 0x1, 0xb}, {0x2, 0x5, 0x2}, {0x4, 0x3, 0xf}, {0x1, 0x3, 0xc, 0xb}], 0x10, 0x800}, 0x90) r10 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r11 = syz_open_dev$vcsu(0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r10, 0x28, 0x2, &(0x7f0000000040)=0x3fff800, 0xfffffffffffffc46) r12 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r10, 0x12, 0x2, &(0x7f0000000740)=""/206, &(0x7f0000000840)=0xce) read$msr(r12, 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r12, 0xfffffffffffffffc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r10, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSABS20(r11, 0x401845e0, &(0x7f0000000080)={0x9e, 0xfffffff8, 0x9000000, 0xfffffeff, 0x5c, 0x4e5}) mmap$binder(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x101) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r13, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3}) 14:11:54 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x200003) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6gre0\x00', r1, 0x2f, 0x80, 0x20, 0x80, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1, 0x7303}}) r3 = syz_open_dev$vcsu(&(0x7f0000000100), 0x3ff, 0x20100) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', r2, r3, 0x5, 0x1, 0x4}, 0x48) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x4300, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x8, 0x2, 0x4, 0x0, 0x1, 0x5, '\x00', r2, r4, 0x2, 0x0, 0x3, 0xc}, 0x48) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xc8, r5, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = syz_open_dev$vcsu(&(0x7f0000000140), 0x4, 0x18000) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r7, 0x0) 14:11:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x8}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) getsockname$netlink(r4, 0x0, 0x0) (async) r5 = syz_open_dev$vcsu(&(0x7f0000000140), 0x4, 0x40101) write$cgroup_pressure(r5, &(0x7f00000000c0)={'full'}, 0x2f) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x48) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0xff, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x48) (async) r9 = syz_open_dev$vcsu(&(0x7f0000000580), 0x8, 0x80400) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000200)=@raw=[@ldst={0x2, 0x0, 0x4, 0x5, 0x8, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000240)='GPL\x00', 0xac, 0xcd, &(0x7f0000000280)=""/205, 0x40f00, 0x9, '\x00', r3, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x4, 0xb, 0x2, 0xfff}, 0x10, 0x4eb4, r5, 0x8, &(0x7f00000005c0)=[r6, r7, 0x1, r8, r9], &(0x7f0000000600)=[{0x2, 0x3, 0x1, 0x4}, {0x1, 0x2, 0x2, 0x3}, {0x5, 0x2, 0x1, 0x1}, {0x1, 0x1, 0xb, 0x7}, {0x4, 0x2, 0x1, 0xb}, {0x2, 0x5, 0x2}, {0x4, 0x3, 0xf}, {0x1, 0x3, 0xc, 0xb}], 0x10, 0x800}, 0x90) (async) r10 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) r11 = syz_open_dev$vcsu(0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r10, 0x28, 0x2, &(0x7f0000000040)=0x3fff800, 0xfffffffffffffc46) (async) r12 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r10, 0x12, 0x2, &(0x7f0000000740)=""/206, &(0x7f0000000840)=0xce) (async) read$msr(r12, 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r12, 0xfffffffffffffffc) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r10, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) ioctl$EVIOCSABS20(r11, 0x401845e0, &(0x7f0000000080)={0x9e, 0xfffffff8, 0x9000000, 0xfffffeff, 0x5c, 0x4e5}) (async) mmap$binder(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x101) (async) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r13, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3}) 14:11:54 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x7, 0x80) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x1c0, 0x22a802) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040)=0x48, 0x4) 14:11:54 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x200003) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6gre0\x00', r1, 0x2f, 0x80, 0x20, 0x80, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1, 0x7303}}) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000100), 0x3ff, 0x20100) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', r2, r3, 0x5, 0x1, 0x4}, 0x48) (async, rerun: 32) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x4300, 0x0) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x8, 0x2, 0x4, 0x0, 0x1, 0x5, '\x00', r2, r4, 0x2, 0x0, 0x3, 0xc}, 0x48) (async, rerun: 32) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (rerun: 32) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r3) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xc8, r5, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000) (async, rerun: 32) socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 32) r7 = syz_open_dev$vcsu(&(0x7f0000000140), 0x4, 0x18000) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r7, 0x0) 14:11:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x8}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) getsockname$netlink(r4, 0x0, 0x0) (async) getsockname$netlink(r4, 0x0, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000140), 0x4, 0x40101) write$cgroup_pressure(r5, &(0x7f00000000c0)={'full'}, 0x2f) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x48) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0xff, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x48) syz_open_dev$vcsu(&(0x7f0000000580), 0x8, 0x80400) (async) r9 = syz_open_dev$vcsu(&(0x7f0000000580), 0x8, 0x80400) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000200)=@raw=[@ldst={0x2, 0x0, 0x4, 0x5, 0x8, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000240)='GPL\x00', 0xac, 0xcd, &(0x7f0000000280)=""/205, 0x40f00, 0x9, '\x00', r3, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x4, 0xb, 0x2, 0xfff}, 0x10, 0x4eb4, r5, 0x8, &(0x7f00000005c0)=[r6, r7, 0x1, r8, r9], &(0x7f0000000600)=[{0x2, 0x3, 0x1, 0x4}, {0x1, 0x2, 0x2, 0x3}, {0x5, 0x2, 0x1, 0x1}, {0x1, 0x1, 0xb, 0x7}, {0x4, 0x2, 0x1, 0xb}, {0x2, 0x5, 0x2}, {0x4, 0x3, 0xf}, {0x1, 0x3, 0xc, 0xb}], 0x10, 0x800}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000200)=@raw=[@ldst={0x2, 0x0, 0x4, 0x5, 0x8, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000240)='GPL\x00', 0xac, 0xcd, &(0x7f0000000280)=""/205, 0x40f00, 0x9, '\x00', r3, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x4, 0xb, 0x2, 0xfff}, 0x10, 0x4eb4, r5, 0x8, &(0x7f00000005c0)=[r6, r7, 0x1, r8, r9], &(0x7f0000000600)=[{0x2, 0x3, 0x1, 0x4}, {0x1, 0x2, 0x2, 0x3}, {0x5, 0x2, 0x1, 0x1}, {0x1, 0x1, 0xb, 0x7}, {0x4, 0x2, 0x1, 0xb}, {0x2, 0x5, 0x2}, {0x4, 0x3, 0xf}, {0x1, 0x3, 0xc, 0xb}], 0x10, 0x800}, 0x90) r10 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r11 = syz_open_dev$vcsu(0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r10, 0x28, 0x2, &(0x7f0000000040)=0x3fff800, 0xfffffffffffffc46) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r10, 0x28, 0x2, &(0x7f0000000040)=0x3fff800, 0xfffffffffffffc46) r12 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r10, 0x12, 0x2, &(0x7f0000000740)=""/206, &(0x7f0000000840)=0xce) (async) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r10, 0x12, 0x2, &(0x7f0000000740)=""/206, &(0x7f0000000840)=0xce) read$msr(r12, 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r12, 0xfffffffffffffffc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r10, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$EVIOCSABS20(r11, 0x401845e0, &(0x7f0000000080)={0x9e, 0xfffffff8, 0x9000000, 0xfffffeff, 0x5c, 0x4e5}) (async) ioctl$EVIOCSABS20(r11, 0x401845e0, &(0x7f0000000080)={0x9e, 0xfffffff8, 0x9000000, 0xfffffeff, 0x5c, 0x4e5}) mmap$binder(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x101) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) (async) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r13, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3}) 14:11:54 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x200003) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6gre0\x00', r1, 0x2f, 0x80, 0x20, 0x80, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1, 0x7303}}) r3 = syz_open_dev$vcsu(&(0x7f0000000100), 0x3ff, 0x20100) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', r2, r3, 0x5, 0x1, 0x4}, 0x48) (async) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x4300, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x8, 0x2, 0x4, 0x0, 0x1, 0x5, '\x00', r2, r4, 0x2, 0x0, 0x3, 0xc}, 0x48) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r3) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xc8, r5, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r7 = syz_open_dev$vcsu(&(0x7f0000000140), 0x4, 0x18000) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r7, 0x0) 14:11:54 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x7, 0x80) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x1c0, 0x22a802) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040)=0x48, 0x4) syz_open_dev$vcsu(&(0x7f0000000080), 0x7, 0x80) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x1c0, 0x22a802) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040)=0x48, 0x4) (async) 14:11:54 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000240), 0x401, 0x101002) read$msr(r3, &(0x7f0000000280)=""/53, 0x35) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x84, 0x8000) ioctl$EVIOCGPHYS(r4, 0x80404507, &(0x7f0000000040)=""/3) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_LINK={0x8, 0x1, r6}]}, 0x2c}}, 0x4001) 14:11:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) (async) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount_setattr(r3, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x20000}, 0x20) (async) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x54, r2, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8040}, 0x4) (async) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="140022004bdf42c0199ad6d90600000000000000ab498ad265bca3c03cb7f51359334a7c4742a2a3faa4637c703529c97c4ff855803f52d7faa446925ba878020fcc932e854c2e6db05f671b58981d414b0d2887fc048d654e49f387f95cb576f394810c92243d8662050bda276096c5e74ff6d73624e34d063aad1aaad3f66abe4b571df863a41e740ce25685bc3356d144c975860dbb436ba51f72b155d4cc6e6226ac3a94e5daf72829d3467739feac38f12834be87486719627ef112a55c04e7ed5f16", @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000"], 0x14}}, 0x0) 14:11:54 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x105a82) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:54 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000240), 0x401, 0x101002) read$msr(r3, &(0x7f0000000280)=""/53, 0x35) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x84, 0x8000) ioctl$EVIOCGPHYS(r4, 0x80404507, &(0x7f0000000040)=""/3) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r0) (async) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_LINK={0x8, 0x1, r6}]}, 0x2c}}, 0x4001) (async) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_LINK={0x8, 0x1, r6}]}, 0x2c}}, 0x4001) 14:11:54 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x7, 0x80) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) (async) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x1c0, 0x22a802) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040)=0x48, 0x4) 14:11:54 executing program 1: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000240), 0x401, 0x101002) read$msr(r3, &(0x7f0000000280)=""/53, 0x35) syz_open_dev$evdev(&(0x7f0000000000), 0x84, 0x8000) (async) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x84, 0x8000) ioctl$EVIOCGPHYS(r4, 0x80404507, &(0x7f0000000040)=""/3) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r0) (async) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_LINK={0x8, 0x1, r6}]}, 0x2c}}, 0x4001) 14:11:54 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x105a82) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x105a82) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:54 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0xd03e57e94b417cca) mmap$binder(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 14:11:54 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async, rerun: 32) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (rerun: 32) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x105a82) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:54 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x80) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000700), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x80, 0x0, &(0x7f0000000240)=[@dead_binder_done, @request_death={0x400c630e, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x0, 0x3}, @fda={0x66646185, 0x3, 0x1, 0x28}, @fda={0x66646185, 0x8, 0x0, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}, 0x400}, @request_death, @increfs={0x40046304, 0x1}], 0x38, 0x0, &(0x7f00000002c0)="8ace22c281860cb209f1d7301d1a9aa2994bd8d5d75d962d2283ee4b9be9076ae92ad3fec23c00f45d71ef8fce1a2775dfedb40cefedf52d"}) write$bt_hci(r2, 0x0, 0x25) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r3, 0x8004af79, &(0x7f0000000100)) 14:11:54 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0xd03e57e94b417cca) mmap$binder(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 14:11:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000008119c389e0008e454ba1983cf03680452df40700000040aca4157baed29b940ee8ebbd249679da834ceaad9651c1470586bfb64ca55ed70e5206f044b9581030230400000000000000c31b8e7ac57bb66172c5900f539d0131b80b73f98a629900c4c8914eaf302ee05f1cf0c4354706e3250000000000", @ANYRESDEC=r0, @ANYBLOB="0100000000000000000014000000"], 0x14}}, 0x20416) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x34}}, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x84) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'xfrm0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYRES16=r1, @ANYRES16=r5, @ANYBLOB="10002abd7000fedbdf251200000008003b0006000000060028000400000005002e000100000008000300", @ANYRES32=r6, @ANYRESHEX=r5], 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x20004085) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) 14:11:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000008119c389e0008e454ba1983cf03680452df40700000040aca4157baed29b940ee8ebbd249679da834ceaad9651c1470586bfb64ca55ed70e5206f044b9581030230400000000000000c31b8e7ac57bb66172c5900f539d0131b80b73f98a629900c4c8914eaf302ee05f1cf0c4354706e3250000000000", @ANYRESDEC=r0, @ANYBLOB="0100000000000000000014000000"], 0x14}}, 0x20416) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x34}}, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x84) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'xfrm0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYRES16=r1, @ANYRES16=r5, @ANYBLOB="10002abd7000fedbdf251200000008003b0006000000060028000400000005002e000100000008000300", @ANYRES32=r6, @ANYRESHEX=r5], 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x20004085) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) 14:11:54 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) syz_open_dev$vcsu(0x0, 0x0, 0x80) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000700), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x80, 0x0, &(0x7f0000000240)=[@dead_binder_done, @request_death={0x400c630e, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x0, 0x3}, @fda={0x66646185, 0x3, 0x1, 0x28}, @fda={0x66646185, 0x8, 0x0, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}, 0x400}, @request_death, @increfs={0x40046304, 0x1}], 0x38, 0x0, &(0x7f00000002c0)="8ace22c281860cb209f1d7301d1a9aa2994bd8d5d75d962d2283ee4b9be9076ae92ad3fec23c00f45d71ef8fce1a2775dfedb40cefedf52d"}) (async) write$bt_hci(r2, 0x0, 0x25) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r3, 0x8004af79, &(0x7f0000000100)) 14:11:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x8100000}, 0x300}, 0x0) 14:11:55 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0xd03e57e94b417cca) mmap$binder(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 14:11:55 executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x0, 0x0, r1, 0x32a33a6d, '\x00', 0x0, r1, 0x0, 0x3, 0x3}, 0x48) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) r3 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f00000000c0)={r3}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) 14:11:55 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x80) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000700), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x80, 0x0, &(0x7f0000000240)=[@dead_binder_done, @request_death={0x400c630e, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x0, 0x3}, @fda={0x66646185, 0x3, 0x1, 0x28}, @fda={0x66646185, 0x8, 0x0, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}, 0x400}, @request_death, @increfs={0x40046304, 0x1}], 0x38, 0x0, &(0x7f00000002c0)="8ace22c281860cb209f1d7301d1a9aa2994bd8d5d75d962d2283ee4b9be9076ae92ad3fec23c00f45d71ef8fce1a2775dfedb40cefedf52d"}) write$bt_hci(r2, 0x0, 0x25) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r3, 0x8004af79, &(0x7f0000000100)) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) syz_open_dev$vcsu(0x0, 0x0, 0x80) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000700), 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x80, 0x0, &(0x7f0000000240)=[@dead_binder_done, @request_death={0x400c630e, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x0, 0x3}, @fda={0x66646185, 0x3, 0x1, 0x28}, @fda={0x66646185, 0x8, 0x0, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}, 0x400}, @request_death, @increfs={0x40046304, 0x1}], 0x38, 0x0, &(0x7f00000002c0)="8ace22c281860cb209f1d7301d1a9aa2994bd8d5d75d962d2283ee4b9be9076ae92ad3fec23c00f45d71ef8fce1a2775dfedb40cefedf52d"}) (async) write$bt_hci(r2, 0x0, 0x25) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r3, 0x8004af79, &(0x7f0000000100)) (async) 14:11:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000008119c389e0008e454ba1983cf03680452df40700000040aca4157baed29b940ee8ebbd249679da834ceaad9651c1470586bfb64ca55ed70e5206f044b9581030230400000000000000c31b8e7ac57bb66172c5900f539d0131b80b73f98a629900c4c8914eaf302ee05f1cf0c4354706e3250000000000", @ANYRESDEC=r0, @ANYBLOB="0100000000000000000014000000"], 0x14}}, 0x20416) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x34}}, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x84) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'xfrm0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYRES16=r1, @ANYRES16=r5, @ANYBLOB="10002abd7000fedbdf251200000008003b0006000000060028000400000005002e000100000008000300", @ANYRES32=r6, @ANYRESHEX=r5], 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x20004085) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) 14:11:55 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005"], 0x30}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008004}, 0x40448c0) r4 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r4, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'rose0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x1, '\x00', r5, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x48) 14:11:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000f0", @ANYRES16=r1, @ANYBLOB="010000000004000000001785f9aa"], 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001940), r0) clock_gettime(0x0, &(0x7f00000018c0)={0x0, 0x0}) futex_waitv(&(0x7f0000001240)=[{0x9, &(0x7f0000000000)=0x3, 0x82}, {0x3f, &(0x7f0000000080)=0x7f7f69c7, 0x82}, {0x1, &(0x7f0000000100)=0x7fff, 0x2}, {0x69d, &(0x7f0000000140)=0x1000, 0x82}, {0x1000, &(0x7f0000000180)=0x6f, 0x2}, {0x7, &(0x7f00000001c0)=0x8, 0x2}, {0x5, &(0x7f0000000200), 0x2}, {0x8dd3, &(0x7f0000000280)=0xfffffffffffffff8, 0x82}, {0x0, &(0x7f00000002c0)=0x7, 0x82}, {0xffffffffffff7144, &(0x7f0000000300)=0x645, 0x82}, {0x8, &(0x7f0000000340)=0x729e, 0x82}, {0x80000001, &(0x7f0000000380)=0xfffffffffffffff7, 0x82}, {0x6, &(0x7f00000003c0)=0xb8, 0x82}, {0x2, &(0x7f0000000400)=0x830, 0x2}, {0x0, &(0x7f0000000440)=0x200, 0x2}, {0x9, &(0x7f0000000480), 0x2}, {0xeb, &(0x7f00000004c0)=0x8, 0x2}, {0x6, &(0x7f0000000500)=0x100000000, 0x2}, {0x2, &(0x7f0000000540)=0x3, 0x82}, {0xffffffffffff2fc1, &(0x7f0000000580)=0x10000, 0x2}, {0xff, &(0x7f00000005c0)=0x10001, 0x82}, {0x3, &(0x7f0000000600)=0x1, 0x2}, {0xfec8, &(0x7f0000000680)=0x10001, 0x82}, {0x8, &(0x7f00000006c0)=0x712f, 0x2}, {0x3, &(0x7f0000000700), 0x2}, {0x9, &(0x7f0000000740)=0x1, 0x2}, {0x0, &(0x7f0000000780)=0x26, 0x2}, {0x4, &(0x7f00000007c0)=0x800, 0x82}, {0xffffffffffffffff, &(0x7f0000000800)=0x6693, 0x2}, {0x5, &(0x7f0000000840)=0x40, 0x2}, {0x0, &(0x7f0000000880), 0x82}, {0x7fffffff, &(0x7f00000008c0)=0x35, 0x82}, {0x9, &(0x7f0000000900)=0x1, 0x80}, {0x7e, &(0x7f0000000940)=0x1, 0x2}, {0x1000, &(0x7f0000000980)=0xa35600, 0x2}, {0x100000001, &(0x7f00000009c0)=0x400, 0x2}, {0x6, &(0x7f0000000a00)=0x7fff, 0x2}, {0x7, &(0x7f0000000a40)=0x7, 0x2}, {0x1, &(0x7f0000000a80)=0x8, 0x2}, {0x1f, &(0x7f0000000ac0)=0x8, 0x82}, {0x605, &(0x7f0000000b00)=0x101, 0x2}, {0x7, &(0x7f0000000b40)=0xffff, 0x82}, {0x58, &(0x7f0000000b80)=0x4, 0x2}, {0xfff, &(0x7f0000000bc0)=0xffffffffffffffd2, 0x80}, {0xffff, &(0x7f0000000c00)=0x80, 0x82}, {0x0, &(0x7f0000000c40)=0x9, 0x82306960133df44a}, {0x3, &(0x7f0000000c80)=0x80000000, 0x82}, {0xfffffffffffff001, &(0x7f0000000cc0)=0x7d, 0x2}, {0x6, &(0x7f0000000d00)=0x8, 0x82}, {0x0, &(0x7f0000000d40)=0x7, 0x2}, {0x5, &(0x7f0000000d80)=0xbfe, 0x2}, {0x96, &(0x7f0000000dc0)=0x3d, 0x82}, {0x200, &(0x7f0000000e00)=0x20, 0x82}, {0x9a, &(0x7f0000000e40)=0x8, 0x2}, {0x7, &(0x7f0000000e80)=0x7fffffff}, {0x7, &(0x7f0000000ec0)=0x4, 0x2}, {0x2, &(0x7f0000000f00)=0xfffffffffffffffb, 0x2}, {0x7, &(0x7f0000000f40)=0x5, 0x2}, {0x8, &(0x7f0000000f80)=0x9, 0x82}, {0x8000000000000001, &(0x7f0000000fc0)=0x1, 0x82}, {0x401, &(0x7f0000001040)=0x295, 0x82}, {0x2eb00000000000, &(0x7f0000001080)=0xbb2, 0x82}, {0x9, &(0x7f00000010c0)=0x88c, 0x2}, {0x5, &(0x7f0000001100)=0x7fffffffffffffff, 0x2}, {0x382, &(0x7f0000001140)=0x39bf, 0x2}, {0x367afe01, &(0x7f0000001180)=0x80000001, 0x82}, {0x1, &(0x7f00000011c0)=0x4, 0x2}, {0x7, &(0x7f0000001200)=0xe99, 0x82}], 0x44, 0x0, &(0x7f0000001900)={r2, r3+60000000}, 0x0) 14:11:55 executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async, rerun: 64) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x0, 0x0, r1, 0x32a33a6d, '\x00', 0x0, r1, 0x0, 0x3, 0x3}, 0x48) (async, rerun: 64) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) r3 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f00000000c0)={r3}) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) 14:11:55 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:11:55 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) 14:11:55 executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async, rerun: 64) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (rerun: 64) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x0, 0x0, r1, 0x32a33a6d, '\x00', 0x0, r1, 0x0, 0x3, 0x3}, 0x48) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) r3 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f00000000c0)={r3}) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) 14:11:55 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005"], 0x30}}, 0x0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008004}, 0x40448c0) r4 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r4, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'rose0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x1, '\x00', r5, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x48) 14:11:55 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:11:55 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x400c620e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) getsockopt$netlink(r2, 0x10e, 0x6, &(0x7f0000000080)=""/102, &(0x7f0000000100)=0x66) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r3, 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 14:11:55 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005"], 0x30}}, 0x0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008004}, 0x40448c0) (async) r4 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r4, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'rose0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x1, '\x00', r5, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x48) 14:11:55 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000180), 0x2000002, 0xb75a42491c0a17ac) syz_open_dev$vcsu(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1ff, 0x40000) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000040)=""/250) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:11:55 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x4000000002a, 0x509541) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:55 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000180), 0x2000002, 0xb75a42491c0a17ac) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) (async) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1ff, 0x40000) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000040)=""/250) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:11:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000f0", @ANYRES16=r1, @ANYBLOB="010000000004000000001785f9aa"], 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001940), r0) (async) clock_gettime(0x0, &(0x7f00000018c0)={0x0, 0x0}) futex_waitv(&(0x7f0000001240)=[{0x9, &(0x7f0000000000)=0x3, 0x82}, {0x3f, &(0x7f0000000080)=0x7f7f69c7, 0x82}, {0x1, &(0x7f0000000100)=0x7fff, 0x2}, {0x69d, &(0x7f0000000140)=0x1000, 0x82}, {0x1000, &(0x7f0000000180)=0x6f, 0x2}, {0x7, &(0x7f00000001c0)=0x8, 0x2}, {0x5, &(0x7f0000000200), 0x2}, {0x8dd3, &(0x7f0000000280)=0xfffffffffffffff8, 0x82}, {0x0, &(0x7f00000002c0)=0x7, 0x82}, {0xffffffffffff7144, &(0x7f0000000300)=0x645, 0x82}, {0x8, &(0x7f0000000340)=0x729e, 0x82}, {0x80000001, &(0x7f0000000380)=0xfffffffffffffff7, 0x82}, {0x6, &(0x7f00000003c0)=0xb8, 0x82}, {0x2, &(0x7f0000000400)=0x830, 0x2}, {0x0, &(0x7f0000000440)=0x200, 0x2}, {0x9, &(0x7f0000000480), 0x2}, {0xeb, &(0x7f00000004c0)=0x8, 0x2}, {0x6, &(0x7f0000000500)=0x100000000, 0x2}, {0x2, &(0x7f0000000540)=0x3, 0x82}, {0xffffffffffff2fc1, &(0x7f0000000580)=0x10000, 0x2}, {0xff, &(0x7f00000005c0)=0x10001, 0x82}, {0x3, &(0x7f0000000600)=0x1, 0x2}, {0xfec8, &(0x7f0000000680)=0x10001, 0x82}, {0x8, &(0x7f00000006c0)=0x712f, 0x2}, {0x3, &(0x7f0000000700), 0x2}, {0x9, &(0x7f0000000740)=0x1, 0x2}, {0x0, &(0x7f0000000780)=0x26, 0x2}, {0x4, &(0x7f00000007c0)=0x800, 0x82}, {0xffffffffffffffff, &(0x7f0000000800)=0x6693, 0x2}, {0x5, &(0x7f0000000840)=0x40, 0x2}, {0x0, &(0x7f0000000880), 0x82}, {0x7fffffff, &(0x7f00000008c0)=0x35, 0x82}, {0x9, &(0x7f0000000900)=0x1, 0x80}, {0x7e, &(0x7f0000000940)=0x1, 0x2}, {0x1000, &(0x7f0000000980)=0xa35600, 0x2}, {0x100000001, &(0x7f00000009c0)=0x400, 0x2}, {0x6, &(0x7f0000000a00)=0x7fff, 0x2}, {0x7, &(0x7f0000000a40)=0x7, 0x2}, {0x1, &(0x7f0000000a80)=0x8, 0x2}, {0x1f, &(0x7f0000000ac0)=0x8, 0x82}, {0x605, &(0x7f0000000b00)=0x101, 0x2}, {0x7, &(0x7f0000000b40)=0xffff, 0x82}, {0x58, &(0x7f0000000b80)=0x4, 0x2}, {0xfff, &(0x7f0000000bc0)=0xffffffffffffffd2, 0x80}, {0xffff, &(0x7f0000000c00)=0x80, 0x82}, {0x0, &(0x7f0000000c40)=0x9, 0x82306960133df44a}, {0x3, &(0x7f0000000c80)=0x80000000, 0x82}, {0xfffffffffffff001, &(0x7f0000000cc0)=0x7d, 0x2}, {0x6, &(0x7f0000000d00)=0x8, 0x82}, {0x0, &(0x7f0000000d40)=0x7, 0x2}, {0x5, &(0x7f0000000d80)=0xbfe, 0x2}, {0x96, &(0x7f0000000dc0)=0x3d, 0x82}, {0x200, &(0x7f0000000e00)=0x20, 0x82}, {0x9a, &(0x7f0000000e40)=0x8, 0x2}, {0x7, &(0x7f0000000e80)=0x7fffffff}, {0x7, &(0x7f0000000ec0)=0x4, 0x2}, {0x2, &(0x7f0000000f00)=0xfffffffffffffffb, 0x2}, {0x7, &(0x7f0000000f40)=0x5, 0x2}, {0x8, &(0x7f0000000f80)=0x9, 0x82}, {0x8000000000000001, &(0x7f0000000fc0)=0x1, 0x82}, {0x401, &(0x7f0000001040)=0x295, 0x82}, {0x2eb00000000000, &(0x7f0000001080)=0xbb2, 0x82}, {0x9, &(0x7f00000010c0)=0x88c, 0x2}, {0x5, &(0x7f0000001100)=0x7fffffffffffffff, 0x2}, {0x382, &(0x7f0000001140)=0x39bf, 0x2}, {0x367afe01, &(0x7f0000001180)=0x80000001, 0x82}, {0x1, &(0x7f00000011c0)=0x4, 0x2}, {0x7, &(0x7f0000001200)=0xe99, 0x82}], 0x44, 0x0, &(0x7f0000001900)={r2, r3+60000000}, 0x0) 14:11:55 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x400c620e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) getsockopt$netlink(r2, 0x10e, 0x6, &(0x7f0000000080)=""/102, &(0x7f0000000100)=0x66) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r3, 0x0) (async) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 14:11:55 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x4000000002a, 0x509541) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:55 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000180), 0x2000002, 0xb75a42491c0a17ac) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) (async, rerun: 32) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1ff, 0x40000) (rerun: 32) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000040)=""/250) (async, rerun: 64) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (rerun: 64) 14:11:55 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x400c620e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) getsockopt$netlink(r2, 0x10e, 0x6, &(0x7f0000000080)=""/102, &(0x7f0000000100)=0x66) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r3, 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socket$tipc(0x1e, 0x2, 0x0) (async) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0x400c620e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) (async) getsockopt$netlink(r2, 0x10e, 0x6, &(0x7f0000000080)=""/102, &(0x7f0000000100)=0x66) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder0\x00', 0x802, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r3, 0x0) (async) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) 14:11:55 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x4000000002a, 0x509541) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async, rerun: 64) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (rerun: 64) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) [ 3258.827604][T20873] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3258.865166][T20899] binder: 20897:20899 ioctl 400c620e 20000200 returned -22 14:11:55 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x7ffe, 0x10340) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:55 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x7ffe, 0x10340) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x7ffe, 0x10340) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) 14:11:55 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x2) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) sendto$inet_nvme_pdu(r1, &(0x7f0000000000)=@r2t={{0x9, 0x9, 0x18, 0x8, 0x400}, 0x6, 0x9, 0x86, 0x1b}, 0x80, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:55 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x340000, 0x0) statx(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r2 = syz_open_dev$vcsu(0x0, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r3, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}, {0xc8, 0x9, 0x857}}}, 0x9) 14:11:55 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x7ffe, 0x10340) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:55 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x2) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) sendto$inet_nvme_pdu(r1, &(0x7f0000000000)=@r2t={{0x9, 0x9, 0x18, 0x8, 0x400}, 0x6, 0x9, 0x86, 0x1b}, 0x80, 0x0, 0x0, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:55 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x340000, 0x0) statx(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) r2 = syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r3, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) (async) write$bt_hci(r2, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}, {0xc8, 0x9, 0x857}}}, 0x9) 14:11:55 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000)=0x2, 0x8) accept4$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0xc00) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x1) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000100)=0xfffffffffffffffa, 0x8) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) delete_module(&(0x7f00000000c0)=']*:^\x00', 0xa00) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)) [ 3258.912044][T20932] binder: 20931:20932 ioctl 400c620e 20000200 returned -22 14:11:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0xd000000}, 0x300}, 0x0) 14:11:55 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x2) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) sendto$inet_nvme_pdu(r1, &(0x7f0000000000)=@r2t={{0x9, 0x9, 0x18, 0x8, 0x400}, 0x6, 0x9, 0x86, 0x1b}, 0x80, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:55 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x340000, 0x0) statx(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r2 = syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r3, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) (async) write$bt_hci(r2, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}, {0xc8, 0x9, 0x857}}}, 0x9) 14:11:55 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000)=0x2, 0x8) (async) accept4$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0xc00) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x1) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) (async) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000100)=0xfffffffffffffffa, 0x8) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) delete_module(&(0x7f00000000c0)=']*:^\x00', 0xa00) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)) 14:11:55 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000000)={r2, 0x0, 0x1}) 14:11:55 executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xffffffffffffff9a) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x102, 0xc0842) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f00000001c0)={@multicast2, @initdev, 0x0}, &(0x7f0000000200)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r7, 0x1, 0x0, 0x0, {0x5}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)={0x34, r11, 0x1, 0x0, 0x0, {0x12}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'tunl0\x00', 0x0}) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r15, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r16}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) r18 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r18, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r20 = socket$nl_generic(0x10, 0x3, 0x10) r21 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r20, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x34, r21, 0x1, 0x0, 0x0, {0x23}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}]}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000600)={&(0x7f0000000040), 0xc, &(0x7f00000005c0)={&(0x7f0000000340)={0x270, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x44040}, 0x48080) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) 14:11:55 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000)=0x2, 0x8) (async) accept4$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0xc00) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x1) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000100)=0xfffffffffffffffa, 0x8) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) delete_module(&(0x7f00000000c0)=']*:^\x00', 0xa00) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)) 14:11:55 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) io_uring_setup(0x2cd9, &(0x7f0000000000)={0x0, 0x8314, 0x40, 0x1, 0xbe, 0x0, r0}) 14:11:55 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000000)={r2, 0x0, 0x1}) 14:11:55 executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xffffffffffffff9a) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x102, 0xc0842) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f00000001c0)={@multicast2, @initdev}, &(0x7f0000000200)=0xc) (async) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f00000001c0)={@multicast2, @initdev, 0x0}, &(0x7f0000000200)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r7, 0x1, 0x0, 0x0, {0x5}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)={0x34, r11, 0x1, 0x0, 0x0, {0x12}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x34}}, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)={0x34, r11, 0x1, 0x0, 0x0, {0x12}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'tunl0\x00', 0x0}) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r15, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r15, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r16}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) r18 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r18, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r20 = socket$nl_generic(0x10, 0x3, 0x10) r21 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r20, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x34, r21, 0x1, 0x0, 0x0, {0x23}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}]}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000600)={&(0x7f0000000040), 0xc, &(0x7f00000005c0)={&(0x7f0000000340)={0x270, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x44040}, 0x48080) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000600)={&(0x7f0000000040), 0xc, &(0x7f00000005c0)={&(0x7f0000000340)={0x270, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x44040}, 0x48080) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) 14:11:55 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) io_uring_setup(0x2cd9, &(0x7f0000000000)={0x0, 0x8314, 0x40, 0x1, 0xbe, 0x0, r0}) 14:11:55 executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xffffffffffffff9a) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x102, 0xc0842) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f00000001c0)={@multicast2, @initdev, 0x0}, &(0x7f0000000200)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r7, 0x1, 0x0, 0x0, {0x5}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}}, 0x0) (async, rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)={0x34, r11, 0x1, 0x0, 0x0, {0x12}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x34}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'tunl0\x00', 0x0}) (async) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r15, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r16}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) r18 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r18, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) (async) r20 = socket$nl_generic(0x10, 0x3, 0x10) r21 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r20, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x34, r21, 0x1, 0x0, 0x0, {0x23}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}]}]}, 0x34}}, 0x0) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000600)={&(0x7f0000000040), 0xc, &(0x7f00000005c0)={&(0x7f0000000340)={0x270, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x44040}, 0x48080) (async, rerun: 32) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) (rerun: 32) 14:11:55 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000000)={r2, 0x0, 0x1}) 14:11:55 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) io_uring_setup(0x2cd9, &(0x7f0000000000)={0x0, 0x8314, 0x40, 0x1, 0xbe, 0x0, r0}) 14:11:55 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x5) 14:11:55 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x5) 14:11:56 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f00000039c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003a00)={0xe84, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xfc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xe1, 0x4, "d0030cde1f7b397d9c8a8ce3754c14e8c3248a2435fa9556dda7a31601f597db8c899b93b4292dcff87d79e6ba5fcd1d25f740377774562585c995e08614e4e7bc90fda8368c3988103719a99561ed1a3d474ccb3703465320ebffda7da6977484ae81b3b75cd1beeffd0fec4dcd23c5e3dbcdaade53fae8e3e8fc990b46a65788bedeae6d78e1aebadaafc96d6bda967ff86fec3ff43186a4032cef59ada96c76626e9db6acf9b1d0afedbd4b700090bd531ede253e1efc5a65e12d540f49166471f128141c58e8250ea2d92adda41510226e9cf242a8b789cf1d8b3b"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xd34, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '%[*,%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '}/*,&%%#-%\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '@^:&\x89}%^:,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '^[[!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[&-\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xe5, 0x4, "0207fc89b7b10773305428f7c82f68b6d1478446537acac943207edcc759881348146c3b325807dab8175fb1d1ae0d843fcb9bb00175561d7b6ab6320fc9a96d7a57281f7e12dd9018e6fdcf0d569af3153dd3fa345d8955556d05b45328b3561623224c70a01e00df4dd66f518f0a2c02dc50c1517410b4c76bdc8ad5cfd8dfb959b3b911e39097b8ee3f856d0ad9e9a194837aa6b80d0367b092354715a7940418f4196dee013c4d66e99438f7b5be83f4497fbfa739e651abd5050bc1b9dbb62bbebf34bf9074636e58632c1d9d5c22e2677139caa5d89f0a629486de64f5bc"}, @ETHTOOL_A_BITSET_MASK={0xbb9, 0x5, "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"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0xe84}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x34, r7, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_setlink={0x2c, 0x10, 0x3, 0x0, 0x0, {0x7, 0x0, 0x0, r14}, [@IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x110, r4, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:56 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x6, 0xc1c0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000f0", @ANYRES16=r1, @ANYBLOB="010000000004000000001785f9aa"], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000001940), r0) (async) clock_gettime(0x0, &(0x7f00000018c0)={0x0, 0x0}) futex_waitv(&(0x7f0000001240)=[{0x9, &(0x7f0000000000)=0x3, 0x82}, {0x3f, &(0x7f0000000080)=0x7f7f69c7, 0x82}, {0x1, &(0x7f0000000100)=0x7fff, 0x2}, {0x69d, &(0x7f0000000140)=0x1000, 0x82}, {0x1000, &(0x7f0000000180)=0x6f, 0x2}, {0x7, &(0x7f00000001c0)=0x8, 0x2}, {0x5, &(0x7f0000000200), 0x2}, {0x8dd3, &(0x7f0000000280)=0xfffffffffffffff8, 0x82}, {0x0, &(0x7f00000002c0)=0x7, 0x82}, {0xffffffffffff7144, &(0x7f0000000300)=0x645, 0x82}, {0x8, &(0x7f0000000340)=0x729e, 0x82}, {0x80000001, &(0x7f0000000380)=0xfffffffffffffff7, 0x82}, {0x6, &(0x7f00000003c0)=0xb8, 0x82}, {0x2, &(0x7f0000000400)=0x830, 0x2}, {0x0, &(0x7f0000000440)=0x200, 0x2}, {0x9, &(0x7f0000000480), 0x2}, {0xeb, &(0x7f00000004c0)=0x8, 0x2}, {0x6, &(0x7f0000000500)=0x100000000, 0x2}, {0x2, &(0x7f0000000540)=0x3, 0x82}, {0xffffffffffff2fc1, &(0x7f0000000580)=0x10000, 0x2}, {0xff, &(0x7f00000005c0)=0x10001, 0x82}, {0x3, &(0x7f0000000600)=0x1, 0x2}, {0xfec8, &(0x7f0000000680)=0x10001, 0x82}, {0x8, &(0x7f00000006c0)=0x712f, 0x2}, {0x3, &(0x7f0000000700), 0x2}, {0x9, &(0x7f0000000740)=0x1, 0x2}, {0x0, &(0x7f0000000780)=0x26, 0x2}, {0x4, &(0x7f00000007c0)=0x800, 0x82}, {0xffffffffffffffff, &(0x7f0000000800)=0x6693, 0x2}, {0x5, &(0x7f0000000840)=0x40, 0x2}, {0x0, &(0x7f0000000880), 0x82}, {0x7fffffff, &(0x7f00000008c0)=0x35, 0x82}, {0x9, &(0x7f0000000900)=0x1, 0x80}, {0x7e, &(0x7f0000000940)=0x1, 0x2}, {0x1000, &(0x7f0000000980)=0xa35600, 0x2}, {0x100000001, &(0x7f00000009c0)=0x400, 0x2}, {0x6, &(0x7f0000000a00)=0x7fff, 0x2}, {0x7, &(0x7f0000000a40)=0x7, 0x2}, {0x1, &(0x7f0000000a80)=0x8, 0x2}, {0x1f, &(0x7f0000000ac0)=0x8, 0x82}, {0x605, &(0x7f0000000b00)=0x101, 0x2}, {0x7, &(0x7f0000000b40)=0xffff, 0x82}, {0x58, &(0x7f0000000b80)=0x4, 0x2}, {0xfff, &(0x7f0000000bc0)=0xffffffffffffffd2, 0x80}, {0xffff, &(0x7f0000000c00)=0x80, 0x82}, {0x0, &(0x7f0000000c40)=0x9, 0x82306960133df44a}, {0x3, &(0x7f0000000c80)=0x80000000, 0x82}, {0xfffffffffffff001, &(0x7f0000000cc0)=0x7d, 0x2}, {0x6, &(0x7f0000000d00)=0x8, 0x82}, {0x0, &(0x7f0000000d40)=0x7, 0x2}, {0x5, &(0x7f0000000d80)=0xbfe, 0x2}, {0x96, &(0x7f0000000dc0)=0x3d, 0x82}, {0x200, &(0x7f0000000e00)=0x20, 0x82}, {0x9a, &(0x7f0000000e40)=0x8, 0x2}, {0x7, &(0x7f0000000e80)=0x7fffffff}, {0x7, &(0x7f0000000ec0)=0x4, 0x2}, {0x2, &(0x7f0000000f00)=0xfffffffffffffffb, 0x2}, {0x7, &(0x7f0000000f40)=0x5, 0x2}, {0x8, &(0x7f0000000f80)=0x9, 0x82}, {0x8000000000000001, &(0x7f0000000fc0)=0x1, 0x82}, {0x401, &(0x7f0000001040)=0x295, 0x82}, {0x2eb00000000000, &(0x7f0000001080)=0xbb2, 0x82}, {0x9, &(0x7f00000010c0)=0x88c, 0x2}, {0x5, &(0x7f0000001100)=0x7fffffffffffffff, 0x2}, {0x382, &(0x7f0000001140)=0x39bf, 0x2}, {0x367afe01, &(0x7f0000001180)=0x80000001, 0x82}, {0x1, &(0x7f00000011c0)=0x4, 0x2}, {0x7, &(0x7f0000001200)=0xe99, 0x82}], 0x44, 0x0, &(0x7f0000001900)={r2, r3+60000000}, 0x0) 14:11:56 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x6, 0xc1c0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:56 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x5) 14:11:56 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async, rerun: 32) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x6, 0xc1c0) (rerun: 32) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:56 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f00000039c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003a00)={0xe84, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xfc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xe1, 0x4, "d0030cde1f7b397d9c8a8ce3754c14e8c3248a2435fa9556dda7a31601f597db8c899b93b4292dcff87d79e6ba5fcd1d25f740377774562585c995e08614e4e7bc90fda8368c3988103719a99561ed1a3d474ccb3703465320ebffda7da6977484ae81b3b75cd1beeffd0fec4dcd23c5e3dbcdaade53fae8e3e8fc990b46a65788bedeae6d78e1aebadaafc96d6bda967ff86fec3ff43186a4032cef59ada96c76626e9db6acf9b1d0afedbd4b700090bd531ede253e1efc5a65e12d540f49166471f128141c58e8250ea2d92adda41510226e9cf242a8b789cf1d8b3b"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xd34, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '%[*,%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '}/*,&%%#-%\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '@^:&\x89}%^:,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '^[[!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[&-\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xe5, 0x4, "0207fc89b7b10773305428f7c82f68b6d1478446537acac943207edcc759881348146c3b325807dab8175fb1d1ae0d843fcb9bb00175561d7b6ab6320fc9a96d7a57281f7e12dd9018e6fdcf0d569af3153dd3fa345d8955556d05b45328b3561623224c70a01e00df4dd66f518f0a2c02dc50c1517410b4c76bdc8ad5cfd8dfb959b3b911e39097b8ee3f856d0ad9e9a194837aa6b80d0367b092354715a7940418f4196dee013c4d66e99438f7b5be83f4497fbfa739e651abd5050bc1b9dbb62bbebf34bf9074636e58632c1d9d5c22e2677139caa5d89f0a629486de64f5bc"}, @ETHTOOL_A_BITSET_MASK={0xbb9, 0x5, "c699812287aa1ddd29a921bdbd11d2782cc8b86a389c2280eb6f4b36fd558d77ad482540dc20ae23dd94b964ce48a7af17607e224cbdac0a3560b09a7f2e3662c7634f672534501867c1b68d4deaec33b6a32582394850a77d707fc0cc36a678830cd418609f852c170a300421d04ec2cb4e6457fe5fcaa9b9d23b7bf2f68ec36a83a97c4ecbb799a47e2b407b3496aec1da092a7b8561b179c8f51ef978db432d4002997da8092cfbd604a94f3d9c1a3eb96c180d41bbd98d71ee59f8aa7a3b0aa2cdf39be6df763935916e3d7a842c9a283dbd1f2cb1e4e8f874aefd7a26a155f98fdbbf8494f6402cceb2683c362ca9bd23102de54897612ef86b10e26523b5fe76664ef94e78c289da8a909679005af3d1da49395cc2b2f8ef63c86c6b40aeb6b9db68ccedb476ae992819e625dbe5101476d1f0e13d511bd82336f6a660ff1a26e7dcb87231cbb63b0a98e25fef5ed60612c87260510399453e4e8efc0b56bfeea76872e6f4bab128812d58e414211c518143d5fa662f1f07babbd3d8c1f320765b202dc8817b005781cf6cc158068b028644a854cbe2b8eb6672d33b7066d839bafb2a93e6f14464a6206ecff8be98f635a8475276a752fe2327621b2c3325b73b2563dcafefca45e98e5633cf9077a78246c499358c5c57dddfdd99850be8ffad0fae37dde7c44836ff718adb68c0d619b18f5d74af9adf87c34bcccde498fca87e38bf3238f6b17311c8ef688b6590acad63a0e37ddb7ef4f87e98b54dc0dc661340ef1a46a7426f226fa55191598cbfe62986c86ba26c585dd9769a3f546877a2ef8d3e5f34824a5d019b7eff0a7cbb6ebb1d67ed04ad6c8a1c0f2689e0f88dbde54f89fa25570250210729d30f2a26448af2d16405e725d6bbd0925d475c2da2f1f8d8fbe884d5036382f0227142c219cc38fde22c9ad6b005cf89bb56f227ba94c0bb8d984639515f07f1148c5b73024cd11056700531dcc6e7520593b157d42d746980d85620f47624e67b977cb69bf00d95822a4637e01c199e523af3f64dfe5d3eb4b89dd211758c5a5f14127a337060b0a6dde342afdab4b81b6b5a53c2babc584ab4432fc55f660b8751b00aea39124ca42750aa1d8b04f90b59582c938cd9da190f49bc6e7cab32de8b7efb92c525d813bb553fe94911fb4b20354b447b1fc6f43954d59493051f576264965deb86ef6c589f922cc224517c7570cbb4bc34e0f1c88e3d03031c69195abb42c71aa80282ea881f6ebb61b6df8deb93f3323f6980fd2e010bfc96b6a272be2e1d832f4af3d40cbbcba9c3810a48591e7b8cfd03b41d3733b810f52d5fc169ba991ae5c354d3d695c84d6b5eb10234c3e6e9418bc17ef2328ac1db096f5715f52ccf94a389879312f3cd381707f1f39de463718896d9ab15a3a174202954c0379ea1ca40f7a01f10a64de6f33399ce0ea4c65751f50a8304b07ed3735012a0029b143163aa49d76b91e08c99303f8cd66dc6e80217e910de00515b9570b3dc9ff02dc2663771ec299a0701b61add398daacaa20d9c5cf154b0732479bc213ae7dba1efcf61d4c117216161eab7540be3cf1c1ebfe51dccb05b1b2bb0b70d221e2f55a0b2bb70bc87bc9bb96a2af6c0cf83b635efa9c459ab8f140df2106b4dd1bc79faab0bec568bda8197d50a0bea601daac28e7e761e6abc6728c38b8704c7da99f4eb08618ac14fc8367e0e584e26a0e9a4e0e8abd527b6d0773e6ddc29784ed9bba591a9a4c9ed5a533851cc84b7e624a7908c0d5d967676bd5a8949b40d691c6153b431af5b1b732b2f761c7c7acc5f5d57d83dd97070ae3ffa7f8e0dd15a75d7adc2fa3b60ca98d1d90702697530107eb23c0169cce2b5c70731adf527c67a5c6a2c5e21f0fb1af0adcf64a9299e4e6b761fd444fe9f266261ca2d586dfe0a7a48eb809ea02f652b40e51675fca297f93983a4048777876de83b685ef51ce169c2e736c8e93c6014360a1039b5ab092fb9c1052c2b0367ce97f6a9f15394a98e48aaff0342f4a010591345b7914ddc40efe460c2ea1fe0a1ee386fa1474ba49a2ee71d094a2ce1b9a538fc52b8840e79e5b4969f8ec56c3150d9c99b154148ec26cb71ca44e3178657cc596f1daa8e433ba3c0abb0c58311f6ab0ffaa23b156e9b6499c8294039f8c7a3e368309967201671eb64686b10a08bf1dfd61695b222b12bafd2a2bedb0cf1fdb352f3ba9b01992cb42cc622a5a140311cf79644c4b3083acf145d9a1acdcef9254ada8b3802f243d774c592703b1902909c48cb688e62173ee4eb4b851995fa993bfd34555c70526f844f1f03d97c5386191110d3fba4835b10956703219d27c83ecbbc04e381acf714c93b97f685e9e6af29e26d6f672aae2fc633051de97430379c1d36b72ba49c54b4b61919cc7a4d2d93323caba1c4a678e34c80cb5943435271646a647f4cb3ce6565589170b25b1b810d24c03556701e5c297ed75c469a981fcb763796ea241c5a59f00996c3192a2c96a5394e28f94c85315c591c01956f184dfda4ed118203849068fc844ea7aa42c98d532878fbadb430a28fafe43f06760039920b5d01d68872351a7acd262ca1cd75419343d07d1a2176def30db5d3debbec54401597658ad357755718ae32b4f6ed8bb723f3338f38bea0b1367e0b69a828c066a0f0af55998b7f9923076a96730b031e6b8ecf4fe7f0dde07fbdfb49218f8537a6ec28f24b2e0b534b1df00546186f10dfcde810e32b45c5ea93104d774ee48f3b6facceed9566e817cd9d35a6987ea2ac433d8419e15affe3f049cf2a2c762e46c82def6ab96807c1a1386f53cd2c4bb5149d0bc57a8f9c80ec10c68a3dde813a829b21c3f815cd0538ed2cc85abfe295ed6711fa69491cdc7aab7809d7951eaeeae46b66d34b918ba3dcbbbde72b8c0b1bcd3065490e3580a1602f50437307bf1889722062f368787f5547bfec5f5d7d2845b99ff98de6d33d44d72f10b1e554ee81439d326c890208580ef42987b9dadec0a5c3cb1f183a80decb1b1703fda3875b9fa0d94991910c95a01bcadaeb1672936d30a57c7c4d76fb253275a430d39754f1f489310efd77533f0ed597c006ba49c20d18fd047896f77b3d490ab2e853927a801e45485686dcdcb506b0fbcd205af853072a608153cad18b0309d11130925c87f25dad85fc015aa226d1f98a565d95f38c5690d0ff6df574374fd843caddd8a3bb0078833015f334faa409306949cf26e1e28afd3cd40b638085647eeaa21d2b1436c46a090ddeb4b47859c526cd30eb322c8ed4de1541262267783fda803388f7bac0909b226e541178c977dd74b3f1f7be3903109e21bef7834a829a829faaa9905000fe6adb7d685ed9dfa073b2a0f74e6e1f7220a50b9917993bdd63510ec04f6ebfe5c3a8586f3f7cf8503b8c422f882dd1988395daadd637ececfb06a34a1f4aa37a17c89b7308e70151b27567d37c3ec4d1550e2c6316ac576c441d19827015b3aa4aee69c9002da61ce3ca3821d07bc761ef8405766d51ec7d75f384d3a14e68ece93edc8f227460e17f794c65d3dc6a804522e9285d77e5b249a8c4fedfa2aec005b30de3472ea62bdac103e881ea0c947d8d411889e078dd3836648cc9f9589b727ba4e22231a7bb6ebbfe851319b5b3d8380a2ae3be22f21638e95439ed300d4e680f526d1d8cdce546ad18943aada162acab3293b34c13ff38ac07c5c372f13d677b7dd91838e9ab7c08f4c66ccaab7673b212860dc4c30cda86ec88da12fc2ede8d372522b4090dc99b1cf5d00f1f1414ebcb76ff9482c35cee359800ad26e04281390b545f32a69bff3031f387e75146d84c595cd582954fa8d45d7e461cdf4a38b41cf08b181208e8399aab96917666056cc6a4b502bb83a482b262875c020b4fdf6183c47feaa6990050eec564111bb381c0f50bb5d374027e74d153bec053f880e864312f7456c1c1035739a63c42fd1796308238a65be04831d871e9703394f2145601d3d68c3e8fed4b4c236cfe7fadb434623918f6ae5c339816b60d7b5edc246e15808809c440e509ed9d02c29f5e2bb1e76ab58801ae90176ac29596a7503cc31d95e325198e92c30047fca1e701e25803da07d7903fb93076d88a2a282b6c4c3491f4f70cb37b5db9273d5401f4af65fc353c96c155dd866c328e69256394eedc0836b454ad6f9b114c489e3a05838eeee1d150448f8032f1f1c3cfaf"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0xe84}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x34, r7, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x34}}, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_setlink={0x2c, 0x10, 0x3, 0x0, 0x0, {0x7, 0x0, 0x0, r14}, [@IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x110, r4, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') ioctl$NS_GET_OWNER_UID(r1, 0xb704, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000100)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040891) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r4, 0x20ff6000) write$UHID_DESTROY(r3, &(0x7f0000000180), 0x4) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) 14:11:56 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f00000039c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003a00)={0xe84, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xfc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xe1, 0x4, "d0030cde1f7b397d9c8a8ce3754c14e8c3248a2435fa9556dda7a31601f597db8c899b93b4292dcff87d79e6ba5fcd1d25f740377774562585c995e08614e4e7bc90fda8368c3988103719a99561ed1a3d474ccb3703465320ebffda7da6977484ae81b3b75cd1beeffd0fec4dcd23c5e3dbcdaade53fae8e3e8fc990b46a65788bedeae6d78e1aebadaafc96d6bda967ff86fec3ff43186a4032cef59ada96c76626e9db6acf9b1d0afedbd4b700090bd531ede253e1efc5a65e12d540f49166471f128141c58e8250ea2d92adda41510226e9cf242a8b789cf1d8b3b"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xd34, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '%[*,%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '}/*,&%%#-%\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '@^:&\x89}%^:,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '^[[!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[&-\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xe5, 0x4, "0207fc89b7b10773305428f7c82f68b6d1478446537acac943207edcc759881348146c3b325807dab8175fb1d1ae0d843fcb9bb00175561d7b6ab6320fc9a96d7a57281f7e12dd9018e6fdcf0d569af3153dd3fa345d8955556d05b45328b3561623224c70a01e00df4dd66f518f0a2c02dc50c1517410b4c76bdc8ad5cfd8dfb959b3b911e39097b8ee3f856d0ad9e9a194837aa6b80d0367b092354715a7940418f4196dee013c4d66e99438f7b5be83f4497fbfa739e651abd5050bc1b9dbb62bbebf34bf9074636e58632c1d9d5c22e2677139caa5d89f0a629486de64f5bc"}, @ETHTOOL_A_BITSET_MASK={0xbb9, 0x5, "c699812287aa1ddd29a921bdbd11d2782cc8b86a389c2280eb6f4b36fd558d77ad482540dc20ae23dd94b964ce48a7af17607e224cbdac0a3560b09a7f2e3662c7634f672534501867c1b68d4deaec33b6a32582394850a77d707fc0cc36a678830cd418609f852c170a300421d04ec2cb4e6457fe5fcaa9b9d23b7bf2f68ec36a83a97c4ecbb799a47e2b407b3496aec1da092a7b8561b179c8f51ef978db432d4002997da8092cfbd604a94f3d9c1a3eb96c180d41bbd98d71ee59f8aa7a3b0aa2cdf39be6df763935916e3d7a842c9a283dbd1f2cb1e4e8f874aefd7a26a155f98fdbbf8494f6402cceb2683c362ca9bd23102de54897612ef86b10e26523b5fe76664ef94e78c289da8a909679005af3d1da49395cc2b2f8ef63c86c6b40aeb6b9db68ccedb476ae992819e625dbe5101476d1f0e13d511bd82336f6a660ff1a26e7dcb87231cbb63b0a98e25fef5ed60612c87260510399453e4e8efc0b56bfeea76872e6f4bab128812d58e414211c518143d5fa662f1f07babbd3d8c1f320765b202dc8817b005781cf6cc158068b028644a854cbe2b8eb6672d33b7066d839bafb2a93e6f14464a6206ecff8be98f635a8475276a752fe2327621b2c3325b73b2563dcafefca45e98e5633cf9077a78246c499358c5c57dddfdd99850be8ffad0fae37dde7c44836ff718adb68c0d619b18f5d74af9adf87c34bcccde498fca87e38bf3238f6b17311c8ef688b6590acad63a0e37ddb7ef4f87e98b54dc0dc661340ef1a46a7426f226fa55191598cbfe62986c86ba26c585dd9769a3f546877a2ef8d3e5f34824a5d019b7eff0a7cbb6ebb1d67ed04ad6c8a1c0f2689e0f88dbde54f89fa25570250210729d30f2a26448af2d16405e725d6bbd0925d475c2da2f1f8d8fbe884d5036382f0227142c219cc38fde22c9ad6b005cf89bb56f227ba94c0bb8d984639515f07f1148c5b73024cd11056700531dcc6e7520593b157d42d746980d85620f47624e67b977cb69bf00d95822a4637e01c199e523af3f64dfe5d3eb4b89dd211758c5a5f14127a337060b0a6dde342afdab4b81b6b5a53c2babc584ab4432fc55f660b8751b00aea39124ca42750aa1d8b04f90b59582c938cd9da190f49bc6e7cab32de8b7efb92c525d813bb553fe94911fb4b20354b447b1fc6f43954d59493051f576264965deb86ef6c589f922cc224517c7570cbb4bc34e0f1c88e3d03031c69195abb42c71aa80282ea881f6ebb61b6df8deb93f3323f6980fd2e010bfc96b6a272be2e1d832f4af3d40cbbcba9c3810a48591e7b8cfd03b41d3733b810f52d5fc169ba991ae5c354d3d695c84d6b5eb10234c3e6e9418bc17ef2328ac1db096f5715f52ccf94a389879312f3cd381707f1f39de463718896d9ab15a3a174202954c0379ea1ca40f7a01f10a64de6f33399ce0ea4c65751f50a8304b07ed3735012a0029b143163aa49d76b91e08c99303f8cd66dc6e80217e910de00515b9570b3dc9ff02dc2663771ec299a0701b61add398daacaa20d9c5cf154b0732479bc213ae7dba1efcf61d4c117216161eab7540be3cf1c1ebfe51dccb05b1b2bb0b70d221e2f55a0b2bb70bc87bc9bb96a2af6c0cf83b635efa9c459ab8f140df2106b4dd1bc79faab0bec568bda8197d50a0bea601daac28e7e761e6abc6728c38b8704c7da99f4eb08618ac14fc8367e0e584e26a0e9a4e0e8abd527b6d0773e6ddc29784ed9bba591a9a4c9ed5a533851cc84b7e624a7908c0d5d967676bd5a8949b40d691c6153b431af5b1b732b2f761c7c7acc5f5d57d83dd97070ae3ffa7f8e0dd15a75d7adc2fa3b60ca98d1d90702697530107eb23c0169cce2b5c70731adf527c67a5c6a2c5e21f0fb1af0adcf64a9299e4e6b761fd444fe9f266261ca2d586dfe0a7a48eb809ea02f652b40e51675fca297f93983a4048777876de83b685ef51ce169c2e736c8e93c6014360a1039b5ab092fb9c1052c2b0367ce97f6a9f15394a98e48aaff0342f4a010591345b7914ddc40efe460c2ea1fe0a1ee386fa1474ba49a2ee71d094a2ce1b9a538fc52b8840e79e5b4969f8ec56c3150d9c99b154148ec26cb71ca44e3178657cc596f1daa8e433ba3c0abb0c58311f6ab0ffaa23b156e9b6499c8294039f8c7a3e368309967201671eb64686b10a08bf1dfd61695b222b12bafd2a2bedb0cf1fdb352f3ba9b01992cb42cc622a5a140311cf79644c4b3083acf145d9a1acdcef9254ada8b3802f243d774c592703b1902909c48cb688e62173ee4eb4b851995fa993bfd34555c70526f844f1f03d97c5386191110d3fba4835b10956703219d27c83ecbbc04e381acf714c93b97f685e9e6af29e26d6f672aae2fc633051de97430379c1d36b72ba49c54b4b61919cc7a4d2d93323caba1c4a678e34c80cb5943435271646a647f4cb3ce6565589170b25b1b810d24c03556701e5c297ed75c469a981fcb763796ea241c5a59f00996c3192a2c96a5394e28f94c85315c591c01956f184dfda4ed118203849068fc844ea7aa42c98d532878fbadb430a28fafe43f06760039920b5d01d68872351a7acd262ca1cd75419343d07d1a2176def30db5d3debbec54401597658ad357755718ae32b4f6ed8bb723f3338f38bea0b1367e0b69a828c066a0f0af55998b7f9923076a96730b031e6b8ecf4fe7f0dde07fbdfb49218f8537a6ec28f24b2e0b534b1df00546186f10dfcde810e32b45c5ea93104d774ee48f3b6facceed9566e817cd9d35a6987ea2ac433d8419e15affe3f049cf2a2c762e46c82def6ab96807c1a1386f53cd2c4bb5149d0bc57a8f9c80ec10c68a3dde813a829b21c3f815cd0538ed2cc85abfe295ed6711fa69491cdc7aab7809d7951eaeeae46b66d34b918ba3dcbbbde72b8c0b1bcd3065490e3580a1602f50437307bf1889722062f368787f5547bfec5f5d7d2845b99ff98de6d33d44d72f10b1e554ee81439d326c890208580ef42987b9dadec0a5c3cb1f183a80decb1b1703fda3875b9fa0d94991910c95a01bcadaeb1672936d30a57c7c4d76fb253275a430d39754f1f489310efd77533f0ed597c006ba49c20d18fd047896f77b3d490ab2e853927a801e45485686dcdcb506b0fbcd205af853072a608153cad18b0309d11130925c87f25dad85fc015aa226d1f98a565d95f38c5690d0ff6df574374fd843caddd8a3bb0078833015f334faa409306949cf26e1e28afd3cd40b638085647eeaa21d2b1436c46a090ddeb4b47859c526cd30eb322c8ed4de1541262267783fda803388f7bac0909b226e541178c977dd74b3f1f7be3903109e21bef7834a829a829faaa9905000fe6adb7d685ed9dfa073b2a0f74e6e1f7220a50b9917993bdd63510ec04f6ebfe5c3a8586f3f7cf8503b8c422f882dd1988395daadd637ececfb06a34a1f4aa37a17c89b7308e70151b27567d37c3ec4d1550e2c6316ac576c441d19827015b3aa4aee69c9002da61ce3ca3821d07bc761ef8405766d51ec7d75f384d3a14e68ece93edc8f227460e17f794c65d3dc6a804522e9285d77e5b249a8c4fedfa2aec005b30de3472ea62bdac103e881ea0c947d8d411889e078dd3836648cc9f9589b727ba4e22231a7bb6ebbfe851319b5b3d8380a2ae3be22f21638e95439ed300d4e680f526d1d8cdce546ad18943aada162acab3293b34c13ff38ac07c5c372f13d677b7dd91838e9ab7c08f4c66ccaab7673b212860dc4c30cda86ec88da12fc2ede8d372522b4090dc99b1cf5d00f1f1414ebcb76ff9482c35cee359800ad26e04281390b545f32a69bff3031f387e75146d84c595cd582954fa8d45d7e461cdf4a38b41cf08b181208e8399aab96917666056cc6a4b502bb83a482b262875c020b4fdf6183c47feaa6990050eec564111bb381c0f50bb5d374027e74d153bec053f880e864312f7456c1c1035739a63c42fd1796308238a65be04831d871e9703394f2145601d3d68c3e8fed4b4c236cfe7fadb434623918f6ae5c339816b60d7b5edc246e15808809c440e509ed9d02c29f5e2bb1e76ab58801ae90176ac29596a7503cc31d95e325198e92c30047fca1e701e25803da07d7903fb93076d88a2a282b6c4c3491f4f70cb37b5db9273d5401f4af65fc353c96c155dd866c328e69256394eedc0836b454ad6f9b114c489e3a05838eeee1d150448f8032f1f1c3cfaf"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0xe84}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x34, r7, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_setlink={0x2c, 0x10, 0x3, 0x0, 0x0, {0x7, 0x0, 0x0, r14}, [@IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x110, r4, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') ioctl$NS_GET_OWNER_UID(r1, 0xb704, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000100)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040891) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) r4 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r4, 0x20ff6000) write$UHID_DESTROY(r3, &(0x7f0000000180), 0x4) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) 14:11:56 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x12) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:56 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x20683) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000100), 0x7fffffffffffffff, 0x10b000) ioctl$BINDER_WRITE_READ(r2, 0xc00c6211, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffff7a, 0x0, 0x0}) mmap$binder(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x2, 0x11, r1, 0x8) 14:11:56 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x12) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') ioctl$NS_GET_OWNER_UID(r1, 0xb704, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000100)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040891) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) r4 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r4, 0x20ff6000) (async, rerun: 32) write$UHID_DESTROY(r3, &(0x7f0000000180), 0x4) (async, rerun: 32) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) 14:11:56 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x20683) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000100), 0x7fffffffffffffff, 0x10b000) ioctl$BINDER_WRITE_READ(r2, 0xc00c6211, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffff7a, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x2, 0x11, r1, 0x8) 14:11:56 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x12) (async) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x12) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0xe000000}, 0x300}, 0x0) 14:11:56 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x7fffffffffffffff, 0x141183) 14:11:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x86) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x200000) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r5, 0x1, 0x0, 0x0, {0x7}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', r7, 0x2d, 0x66, 0x81, 0xfe, 0x34, @local, @private0, 0x7800, 0x7800, 0x4, 0x9}}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) 14:11:56 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x20683) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x0, 0x0) (async, rerun: 64) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) (async, rerun: 64) r2 = syz_open_dev$vcsu(&(0x7f0000000100), 0x7fffffffffffffff, 0x10b000) ioctl$BINDER_WRITE_READ(r2, 0xc00c6211, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffff7a, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x2, 0x11, r1, 0x8) 14:11:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x86) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async, rerun: 64) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (rerun: 64) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) (async, rerun: 64) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x200000) (rerun: 64) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r5, 0x1, 0x0, 0x0, {0x7}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}}, 0x0) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', r7, 0x2d, 0x66, 0x81, 0xfe, 0x34, @local, @private0, 0x7800, 0x7800, 0x4, 0x9}}) (async, rerun: 64) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) (async) openat$cgroup_pressure(r1, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) 14:11:56 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x7fffffffffffffff, 0x141183) 14:11:56 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:56 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x7fffffffffffffff, 0x141183) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x7fffffffffffffff, 0x141183) (async) 14:11:56 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:56 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x68, 0x0, &(0x7f0000000040)="a9fe4be60ff9d88f2b83f071f46925638d8ccd373db7894038752542004ff3717f812a7ff76c73acd83e44f3c20bd964c62a91c12c42ffd56aba58164fe4bca93f284e706508603c1be1f54251d143d13b5560e0f70b5b234d69938d3ac5525876df46a0a4e16bcd"}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:11:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x86) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x200000) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r5, 0x1, 0x0, 0x0, {0x7}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', r7, 0x2d, 0x66, 0x81, 0xfe, 0x34, @local, @private0, 0x7800, 0x7800, 0x4, 0x9}}) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) (async) openat$cgroup_pressure(r1, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) 14:11:56 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x68, 0x0, &(0x7f0000000040)="a9fe4be60ff9d88f2b83f071f46925638d8ccd373db7894038752542004ff3717f812a7ff76c73acd83e44f3c20bd964c62a91c12c42ffd56aba58164fe4bca93f284e706508603c1be1f54251d143d13b5560e0f70b5b234d69938d3ac5525876df46a0a4e16bcd"}) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:11:56 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:56 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x2, 0x3, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8001}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x5}}, @NFQA_CFG_CMD={0x8, 0x1, {0x6, 0x0, 0x28}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xcf, 0x3}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x6d7c, 0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000100}, 0x0) 14:11:56 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="1d50ca0d18ce2bdddc907220b427b9dc0cacc2d505a94718cef80fcb8dfa12ba68093e4b55f9c4db6a9cf679e664fdfd5e32943fc1221bd41cbabf546da832a41e01e01edf33d525e3355ad0baf39a318ce249ae6ea25ac6540bec4ceb5f90355ce1d87ccf4df8b4677a97736fe25d92d5390e78cd62db19ebb50a2036c5a087", @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000"], 0x14}}, 0x0) 14:11:56 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x68, 0x0, &(0x7f0000000040)="a9fe4be60ff9d88f2b83f071f46925638d8ccd373db7894038752542004ff3717f812a7ff76c73acd83e44f3c20bd964c62a91c12c42ffd56aba58164fe4bca93f284e706508603c1be1f54251d143d13b5560e0f70b5b234d69938d3ac5525876df46a0a4e16bcd"}) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:11:56 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x2, 0x3, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8001}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x5}}, @NFQA_CFG_CMD={0x8, 0x1, {0x6, 0x0, 0x28}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xcf, 0x3}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x6d7c, 0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000100}, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x2, 0x3, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8001}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x5}}, @NFQA_CFG_CMD={0x8, 0x1, {0x6, 0x0, 0x28}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xcf, 0x3}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x6d7c, 0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000100}, 0x0) (async) 14:11:56 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async, rerun: 32) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (rerun: 32) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async, rerun: 64) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (rerun: 64) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:56 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x200) syz_open_dev$vcsu(0x0, 0x0, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000040)={0x0, 0x800, 0x9, &(0x7f0000000000)=0x8000000000000000}) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x2}) 14:11:56 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x200) syz_open_dev$vcsu(0x0, 0x0, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000040)={0x0, 0x800, 0x9, &(0x7f0000000000)=0x8000000000000000}) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x200) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000040)={0x0, 0x800, 0x9, &(0x7f0000000000)=0x8000000000000000}) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x1, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x2}) (async) 14:11:56 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async, rerun: 32) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (rerun: 32) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x2, 0x3, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8001}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x5}}, @NFQA_CFG_CMD={0x8, 0x1, {0x6, 0x0, 0x28}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xcf, 0x3}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x6d7c, 0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000100}, 0x0) 14:11:56 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:56 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x800) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xd}}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040011) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) r3 = getpid() sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getrule={0x1c, 0x22, 0x2, 0x70bd25, 0x25dfdbff, {0x2, 0x0, 0x14, 0x3, 0x0, 0x0, 0x0, 0x8, 0x1d}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) syz_open_procfs$userns(r3, &(0x7f0000000380)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x1, 0x0, r0, 0x5e6, '\x00', 0x0, r2, 0x5, 0x4, 0x3}, 0x48) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000000)={r3}) 14:11:56 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0xfffffffffffffffc) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:56 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x200) syz_open_dev$vcsu(0x0, 0x0, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000040)={0x0, 0x800, 0x9, &(0x7f0000000000)=0x8000000000000000}) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x2}) 14:11:56 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0xfffffffffffffffc) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:56 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x800) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xd}}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040011) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) (async) r3 = getpid() sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getrule={0x1c, 0x22, 0x2, 0x70bd25, 0x25dfdbff, {0x2, 0x0, 0x14, 0x3, 0x0, 0x0, 0x0, 0x8, 0x1d}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) (async) syz_open_procfs$userns(r3, &(0x7f0000000380)) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x1, 0x0, r0, 0x5e6, '\x00', 0x0, r2, 0x5, 0x4, 0x3}, 0x48) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000000)={r3}) 14:11:56 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x100000001, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/186, 0xba) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0xaa001, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1, 0x11, r2, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r2, 0x8004af7a, &(0x7f0000000000)) 14:11:56 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x800) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xd}}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040011) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) r3 = getpid() sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getrule={0x1c, 0x22, 0x2, 0x70bd25, 0x25dfdbff, {0x2, 0x0, 0x14, 0x3, 0x0, 0x0, 0x0, 0x8, 0x1d}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) syz_open_procfs$userns(r3, &(0x7f0000000380)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x1, 0x0, r0, 0x5e6, '\x00', 0x0, r2, 0x5, 0x4, 0x3}, 0x48) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000000)={r3}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x800) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r0) (async) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xd}}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040011) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) (async) getpid() (async) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getrule={0x1c, 0x22, 0x2, 0x70bd25, 0x25dfdbff, {0x2, 0x0, 0x14, 0x3, 0x0, 0x0, 0x0, 0x8, 0x1d}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) (async) syz_open_procfs$userns(r3, &(0x7f0000000380)) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x1, 0x0, r0, 0x5e6, '\x00', 0x0, r2, 0x5, 0x4, 0x3}, 0x48) (async) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000000)={r3}) (async) 14:11:56 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0xfffffffffffffffc) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0xfffffffffffffffc) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) 14:11:56 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x100000001, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/186, 0xba) (async) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/186, 0xba) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0xaa001, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1, 0x11, r2, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r2, 0x8004af7a, &(0x7f0000000000)) 14:11:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x1fffefff}, 0x300}, 0x0) 14:11:57 executing program 4: keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/109, 0x6d) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:57 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000000), 0x4) 14:11:57 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x100000001, 0x0) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/186, 0xba) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0xaa001, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1, 0x11, r2, 0x0) (async) ioctl$VHOST_VDPA_GET_AS_NUM(r2, 0x8004af7a, &(0x7f0000000000)) 14:11:57 executing program 4: keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/109, 0x6d) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:57 executing program 1: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$vcsu(0x0, 0x20002, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1, 0x11, r0, 0x100) 14:11:57 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000000), 0x4) 14:11:57 executing program 1: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$vcsu(0x0, 0x20002, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1, 0x11, r0, 0x100) 14:11:57 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000000), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) write$UHID_DESTROY(r1, &(0x7f0000000000), 0x4) (async) 14:11:57 executing program 4: keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/109, 0x6d) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/109, 0x6d) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) 14:11:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="1d50ca0d18ce2bdddc907220b427b9dc0cacc2d505a94718cef80fcb8dfa12ba68093e4b55f9c4db6a9cf679e664fdfd5e32943fc1221bd41cbabf546da832a41e01e01edf33d525e3355ad0baf39a318ce249ae6ea25ac6540bec4ceb5f90355ce1d87ccf4df8b4677a97736fe25d92d5390e78cd62db19ebb50a2036c5a087", @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000"], 0x14}}, 0x0) 14:11:57 executing program 1: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$vcsu(0x0, 0x20002, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1, 0x11, r0, 0x100) 14:11:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)={0x48, r2, 0x1, 0x0, 0x0, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="3400000010000300000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001300fb3947"], 0x34}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000200)={@multicast1, @dev, 0x0}, &(0x7f0000000240)=0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r8, 0x1, 0x0, 0x0, {0xf}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000002a80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002a40)={&(0x7f0000000280)={0x27b8, r2, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x26c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x65, 0x5, "6e54ef18c200d35e22e2ab64b8aafb0419e701833a6b738486317ea10509bf20da5bccbe4fd0fa1224b76db965e22bbfc0c4229304534caddb694dbc2c55c2b2a8e9a0835e03a064a2bcf8419a858099639f26669e8520c5f47ebd5aca7b801eaf"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xfd, 0x4, "7b9925f8f5e0b1e2c08a037824cf13945fe82eae81284dd63c9d6856d9932e4e9661ac2a4e7be622b8fff7e8e9c2dc00620efb5b8e40b6dc7428b34f5b4b0ac5d9119d3fa8d70e5c195f7282ad2654527dce195b5ba1a336e24dac98e4aaa42f3a9aa50b385956880b73062fdaf41cbfb64683618b4ec3f754acea9585f2eaca0388d75f952e6936fccf3b28a6e916beb46b5db13911aa3b5ab8e9b41879f73e1954bc28700ad10e38d2f1dc7486f9acb992a4af9c0e3339964587caf322c6e8c6e0701ff74b2a9176ed434581f53650f70a67bdf172c365819748d36f587311d5274c15ff25b79c0bb77015240afee0d43d46c45125d86b0b"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_VALUE={0x8c, 0x4, "5317970a98c86e1d1d27abfdb9b3e4dc12f1a6724f9a34579170ed78bcfdfafd85009e5d14f8ccbff19e3b9f4275f28d9c0c24a03e09ea7c978d9dad6bdf426a2e2284e3f7d853235e695d332cca4696852afe80f0e2568a2d353cc31f06999b63e0174414a68023bd8b4dccf8fc6dc9b6b14b94189a520c160bf66ad0d0a4175ffad90186cf6ae6"}, @ETHTOOL_A_BITSET_VALUE={0x61, 0x4, "5dfb3a8000e40c0fe2a69b0817e1045b84c81dbb020426567cc8e5cd2485820fe7b566c3c1c2b631b8ec63e0bc90631b17c326fb6bd0b408cb191b8e0d54d86e03944761b12223e1ecbab97f6273b0c10fe705aae3059dc2871a73e434"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x2260, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "43f22ae22a2b3ba62fc46b6ebb9e25d26f9cac6b7fd658cebb5b737169d58667076f1131d5a44f5bef1d935a31d49035b53f9483059901fc3a5e6b451264301dffd0bc081d2bd37e564563a4c6d227aeebe31eb23ad2516af7404d9ef88f56280d7c29570f2d77a4bff5ebea1563eb44475470d701486e1ea8d5ceb91f38781a74e29081b5a9337edb77526e240751f81187818b87ae295dd1d930bfafdce4aa156bba149af28291326335246922733da6febaab6a689ae9d1fbac0380722fbddb6670c0d9c9f19cab4d78a3aa631d1cb1df0f17d3e60156a7f2951da3656cea07d83a90169dd9c80df7ab6f24dc14acc16b4a42bd94971e16b9c633c7a15db9399271163489ec45de0f55fefbf7096186762cc128b1f62fc8f5ac324f2bbd1c1e992e2358c21cd9c3f1ab6a7bd09378dacad592c91d77beb3632f68827ee98f5a6ddba03a75af2607393f408258298143d83bc769688ed99af406eea5e2d40af67436354a456b19d9145d754af649090de98e1bfe827c11d916865bd88e20e93f45d970765f5d66eb67c76df5be7aed0d017f9ca656e83c68570ee00cd272303b7cb5a30f6ba501b1f4389a1de209aff1acf1e4131be364e8bd906a602c4179d641629bc2af7d416af5b938504c6b2b2ba41c220c6ee28beeb86384991434eec1c93f09f1d56dd0c08d90d5c2a5a3ca470212bb91faa9e9abb392b48606e16f3189880644c2bbee9bdf9e93574d246ca1eff835d7f6401dfecb7335ba8c5b2578499d272cf966fffbe2113b3fa3032c20b2e090d47ae5fdc67eab2acdee805487c2cf8076cebb3946ced6149dcbadaaf238cf72b00acdc5ce4ca2929a47d06c746dba66f2a50ebd9e0662c18dcab443a7a2dfb50ca31426744c85c74ad05d50791e1b63bf4ddd6c2f6c71b72f68c4d628d4c8de0a785b98c456acd9d125dc79bec90a9cc77ad53e82cbfcd5b334815d13592ff07660d59d42fe933029730a162b1a0300128bc0a25ad3a7a6ce4b7189ce461964e331cd251638afd870c867e00ebc26d1cb3fecbd034127888bea0d45764254c6b71a333eaaf14d3fb2a74fb9350117adae148cdc4ce0d7fcd7fa43876eeb34f36edfac8ce947e21f06870bffd211b0d2ffc893eb6b766e1d99d8a90d058761700e2e4f0df291ffb5a1ac8d0b055a43f62dae43f2f572edcf07e19b42bfd2048d140dedd1f20c029eb6fa85e73d644f04fb9c50acd5244a9e8aa3a857e2a02fe218e9d5d6b34a38b1ed4be7d2dcd5c53877287dd7181fb70197de49381a4eb1e481360b91d05ed5f33519f71f4403740254b99e62d103972f31faa71f52f991740455546f3388baa1b7873e77d14a8e7936e279aeb2a073dd26727d1800ba3601828f9c99b9e02e7f35ef34b0cea7b78fc34197b88cdea5a496eab674e28e59cc28b47c55151121345afd1b48c12be664315d1ce433e28b6a22bb56416527e62bc891797499dd4b382919741ac9d086f7a2eb211681a27f336b72b336a4ef33bc40e15482a3cefa0732cdc66ad7449152457bfe109b8366c25a4476d50e1716d5f1d797efa6882674d6e850cccc48d8494fcffc88b091a05aebda6726d7359926fb3cba4e784859052be6c921a07fc85cdb7ee8d0b9c4867855f1780785bd669ab25d264456c34984ef1832d1faeace27b33c6f5160a67372bfe3c4e9581476240d227e6dae7496317602671c8d0c6084191313f275964a486b6ccae519b1ff9a1d4a09edfb3867beae84c2f6361b1ef54e60fccc052a985ee7f9c55d849785c1071ed95c0f38b777ca7364753eec2a2047fdf3fe2011e7d468db5b2fa1f01c5dc507fa5ee3c713b5de2cd1825b6827f8b78833d347418319839aa24260e2356a287010384e317aeffcd352c1f3cac1fffc2c9e57c3cb5686f240123dac2c0b496d79baa801e8c21869aafdacd726c5c4e97eb3e3cf7e84fe6e1970beb8013b4628fc5ce5d093b0a7e1f6da3a38870799ef8f2725c4e666f2ddd4f4cea902f0d68a2a8cdb61b8792724e3fc7d62c9b49348f6501bb6439351658a5bf2a3ff78e335a10e625e6244296d44ca014da71872c15dce5491f91321d51e5949bcbcee786defeac63dae473793523fa7bbdfe977c39a22210db239ff9cf7bddd45e800a02c59f2cc2adb1ece78df190a60f999da7aa681ab60a667e8727192b66fcf602f769b6c2687dbb29e5ca6532d793069533f3eb6adfe56a439275b45d13d9169aa875321ecb476c1b909b84b71e91772f8acc0299c16f4d511dab348344f4c97e9b37881b469e5ffb1840e88d36893903da6895ded8b8d53e4d4c0eb62d3bd528d5562f24dc01ab6ad17e234398f3ff9de314912de8850c61c19942d7e296b44477a4311cbf4bfee99bfa43fcc123a553651883b275ec87bd46c9ab80a95789ea56bdfe5f6a3ddb86939b656273a7b48c8b23129bff4febc3004d46ba137e7cd14ae7bac469cebfe3e089f40fac98518caf756bfa38ac3269d280b5ac56421799cd4e9de78e457362917cec9b7c81410b4dd9cab52739e4edeb13dc8711ed71da7fcf914301ff7d8ddebd98d1fc3cf537a42898de2bcd2231d0a268c6ddf79cb879d482cb1e5661553beea527ced5b87b80b832027174cd4a9b3cf15d0086fd97a17851d38d5cd6b9f843f2886207a6ddee6a777a2c550ba678de03d2ac485f05544a1e840b59e423111a54347cbfab5091589353a8e44343a48ba24941cc4a9214f4281600f0340c3ef6b562049ea6a4174199bd5964b46e1d9d2e1ecf81d83c2af0b313c1020e1e47f69468f305a3d88231fc2b57528db2683a9750e2976c271c40f17fa53a5a69e26de0ea3293e80bca3d6a0712d03dddc13fd6de9fdba5ba2f58431215c04eb4a802588bd8e18b5c192250594bc78a89cb473c16cb640f74555ebfe09b4b8c8bb237c3e16183649de05cb4da5293219adfc44234adbb248c1692c50cb90040ab7704acd484cc8f08e21c0693a641e65b14b7bc79764eefcb312fd4f4a03361a4c88ccd976c9a249542199307ddf3cb6dd1017f5975681aae37a53ceff7d77ef160ee00db75a2ed82f94fa4ee7975ad8698d577780d935a53d5d3776e9b050fd3ef3942c0dac8fbd56e278de9755e4141a7637a0a56ce0d41ebaf5cd05ba95fccaef61a64a7f885a2a4c0df9bdc96305b5a56acc194d83e792ea166c83d02cd6f309b7e3044d2255f4bad6ed9f4a19c1bf32545c380f6e86fb00b4a195301c9c9d8152c9802352f0ad2b30ab8fead7d957e5382f1e362dbd21a1781ba87274e1e2520b9bfbe8ff08aa777fabf30871e8cc908e1d76fee54af759b112ea912871214c3c3fedcff47c3f1729d0da8eb6a233c2cb0f316ac664c578ff384e919b477d80143390ab74a2d94fbd50c3e95114cc89513df74de64a464d35c95075b71aa1b79e36b967aafced6d07358bd2a195fa3d9a4dec3125b57677c1ac334dacad9654dfd365dc61edb1c17d5f8d3685f9b10d0864347d8609d4dbffb1b365c08499599ebec120dabfbbc63197935575fd89aa2d8c6ad06fde9fcb344dae5c0c94175be8b29814038cfd1b2051fbc804661fae2d4cffc9f744a4363c37fca38addb12b8975a6237aaffa159c8938e076fe7570623ec19ea7159fb95d6dbbb0cbbb58c02cc8607873b5e140642e91d14e9b648cc71ac472ab70ccb98f79fe98af0f0faa9e3247b57fa2eecdfa223fed6f04851fba253ca72b9672c3484b2cdf790122584b889d4a2088f7ea7d94f5c63937fbf04181e9d0a3baf7c54ec7047bb10c3748c867552e96c54f119bdbf2838e6516e6dae8126baf6b6619bdd3c690dc5806440ae39ab522b4d636e1fb1052b25ef8121c773753d81400ae11c862c450d2817de67e2dd7c6da2a6e0c7d90f01b9e95b04f361442cabd390e9431150a448b0b6ab8e5e698a99e72991a1be5083475216ed3688ccdba40e934910a024bc5425ab3da3bf98e874d261c15d48ce1b7a553e9cb2fe286f79969efe3a144cedd41edd716adbd4af9d261acb31a361fb68061c38d4516e35f05a0f8ace7febda741a41c6fcc68e6c79f2ba3a72ec4185a6e426307d742b53b7ba3a26f90535c8a0d85d7e83b498f97d8c2a26fd73503b8d1e65b8869becb084129700626066aa81b8a068b3d69e8d94d32767041d076637d9cc6653f663b798e1f0123856c1bf5b0b25326c8b706e7ee828fe998627c32101ad1533c4d601ae82dd66f308cab992fde0d45ac23acf6b264bdffd4b1b3d91d5cd2badecc14210c2760375df2470bbd5633e7089dbe3fb72b41441f03b6a03ec8a6b7a4170c4d1f1633464e6892b6cbca01423845edbb6b0266941f408744765062170fb87f985c2926cdc93a4d6551fff2a88c4fbc46b25f9b8776f7b9cb66eb1b63807e2d28989e95fa617642b3cddb4975265a19705d21c149a8af0324c6efd1686f965f2a6bd667daa3d24ef50b99cbd8adfabc643690402ca870ca5aff7de816aad9f1a437921f0f2b8800bf10921224e9e13281e9818d9e97f754050da752204faf1459a607c1f06fd97f8572283bf9adf4e5de675c1a246373db1f7acf6c79626fe29d59b2cbdb1677dc7d5468665af1866de911d2aa6a64f6c6e39520208e2f7dc667ed77b285044f63c01165243a100c63da711ec33b2ae081ac22a3311bf9734c29a5d1e9140aafe00ea683d389515a39c12356f72f56a01af1afdde6787a8c1d02bb1a132ef6e4915ac6f437e145e67f59c3ca36a35eba55ecfa014e28bccf1a7a7fc1f3cc9c813b45d7d1a4014a1927cb9b32b8b0e06aabb8d53caeb202f3155a5992b2cb4bf475457e7aca0d62fe1dad5188eb3c66848af348f565faba34f256cd2674e171764d0b48d69396d4f4d3c305e4453a464a3e8020d31f583acd413721e22e759c559f96a929171e893676b48449aef0b48734eec7d630133c6230608209ccaa77c0fde8a552b8a8c2f107bb5ffc21a3101930ad64aff0cf19bc8eaf1282d9d171ce9fe16d9cab5df81856149964e8f4567ab2e05dd8cb64a04c86f1f9724149a845d5315f75c9f9d3005b3bac34bb817687e1f02978d60fd7b27421eef9c528bb013a4ad0bc22929c2782cf677919e7e0aabdaeb698af15ad5a088c8123019396a5c512422de957c67b0ed1a5c00613d053217a0e7d884918566647e1cf78061973207683d67fe7f7f0ae815cc026d20bd339ec96e191d9c6e19679d77756b576b4eadbf33a9df149777ba5b568adead92b42b4f7643a1414011d6b619adea7b089fe0c5c694945b3533d9e59e22bd6249f7966857b9286b5e860e18aec2452c2027c3f8892afde0df9c666f1c236741b421afd668d696281b4953e4d7f0c4d2b10d9413f76d3d9b14b3d7830a02171c9c5d4ac89bfbdfb0d0d71fd1c5b5457ced6ff250999d17858862bed4e1396a5bc83655001ccee2c68b69eb5ed780fd1f95205355990d2c796459b86f499642a1f81e5d06af04b5210628e70471aff1d37436ace14dbd3c022103479aa445f2c741752e7b67349e3cb12a5b3a38ed511c2b162c7fde107daa351188a9dd9fecfa73464d054694ff97315f26a9b6fef1cb69d2effe1cdc2d7bf453b5a430d1ab46fcca0e4dd41635ac064f1fa66a9354a6b147019859b65842d3bcdb89e1a4bbf115b42d3480a1c4c39c8ad97300cae77ca9ae5f7e05088f485d296b16976288bd74cf6c535ed8d6a13ff4f948c65a4a7eb684e63d4f9233d5754789b2293b953976991f9155fcf0ea6f2835f5a5e15bdc6695c7dd5a1de463183"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_BITS={0x184, 0x3, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ')D$#[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+[/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ',#+\xe4&@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '**)*{[[R\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '&\'#!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9e0000}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%+\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x35b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '.{]]:\\\\-${{-$%%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x448}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\[{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_VALUE={0xca, 0x4, "1880f58f345a4a12714662f2afb8ed5298fd79dbe0c8918b0d71f46a4b20de54a5f0fe60d261e267c781695a2161fb945f8552898b0783b4a28a1afaed5e95f0132ede90f0efa2b0c25b19557bbafc4e49166153e2ca66f0154679f5a011d94d9d5b880109c6603aa3f4aba401dc92fbbc0388f0e0c8a3956c7515ff1cd8bb361f1134b2eed85a896709f7cdaefaf7ba370226012a8304c7015fdf67f2c47fe5205f6698df5145ba9944ec5db31a239c8a98f894bf4113b831aecba7ff8a6554b929f0768f04"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xd8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xcf, 0x5, "357ce930ec422241cd56624a6bc9381fe371e09372db517985f4cfefb82bdb27282dedf84a70b8eda461f10742268592f81f438668ce7fcc3d3c4275ea9bc36b7af9d5ae0f622ec4bcd7d033b7e1a1cb9967755a8c8e6100adfcef641e4344c24f12ef89baec4dbd224238385439793ac3bb377c7259aa55ce7239b11108d267b6d9a434ef8ff9d9e749c063a28282e820c55e58abba884833ef1b5e61c1690a2ae89dd17b5e939080e435e9d85999720f20bd4b346b2bbe99bc2edd6300686555fa10546678133707b291"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1b8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xe2, 0x5, "f52f32d6ac2222fe3f0e5c5bfd401da967c777017a0195c8d798de39a2e9375e8961e31f08cfa0dde627bc24c26bd0ea166bf22a63dda9be51d7af4f8bb215dd505f3a471ba824d31f184328a4c5fc2397717d11ae8a711f1166ef7d41d0dcd7d11a39a798d834ea0c2f47e3497401bed1aa012049130b1062a14fe92abcf43f81c344d764ab16b6f60d617ed4cfb588d0189f4c0551a5c90cb7cc2b0676817ac9059305a37d545ceb9669ac5b73593dd720535d460efe7f01013f3bd9f87851f41a7f62fca626e937c7fa3d9e3a3c3db56759098abaffb4e32515f9db06"}, @ETHTOOL_A_BITSET_BITS={0xcc, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x419}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':\x86\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x42b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbad1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':*\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6a8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc14}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x27b8}}, 0x40) r11 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1, 0x11, r11, 0x0) r12 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r12, 0x0) bind$netlink(r11, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x3004001}, 0xc) sendmsg$IPSET_CMD_DESTROY(r11, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004005}, 0x40000) bind$bt_hci(r11, &(0x7f0000000000)={0x1f, 0x0, 0x2}, 0x6) 14:11:57 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r1, 0x0) 14:11:57 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@rand_addr, @initdev}, &(0x7f0000000080)=0xc) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x1, 0x20ec80) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:11:57 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0xffffffffffffffff) (async) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r1, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r1, 0x0) 14:11:57 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@rand_addr, @initdev}, &(0x7f0000000080)=0xc) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async, rerun: 32) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x1, 0x20ec80) (rerun: 32) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:11:57 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r1, 0x0) 14:11:57 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@rand_addr, @initdev}, &(0x7f0000000080)=0xc) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x1, 0x20ec80) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@rand_addr, @initdev}, &(0x7f0000000080)=0xc) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x1, 0x20ec80) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) 14:11:57 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, &(0x7f0000000080)) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x0, 0x0) r3 = getpid() ioprio_set$pid(0x2, r3, 0x6000) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000040)={r3, 0x0, 0x6edd}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)={0x48, r2, 0x1, 0x0, 0x0, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="3400000010000300000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001300fb3947"], 0x34}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000200)={@multicast1, @dev, 0x0}, &(0x7f0000000240)=0xc) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r8, 0x1, 0x0, 0x0, {0xf}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x20}}, 0x0) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000002a80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002a40)={&(0x7f0000000280)={0x27b8, r2, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x26c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x65, 0x5, "6e54ef18c200d35e22e2ab64b8aafb0419e701833a6b738486317ea10509bf20da5bccbe4fd0fa1224b76db965e22bbfc0c4229304534caddb694dbc2c55c2b2a8e9a0835e03a064a2bcf8419a858099639f26669e8520c5f47ebd5aca7b801eaf"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xfd, 0x4, "7b9925f8f5e0b1e2c08a037824cf13945fe82eae81284dd63c9d6856d9932e4e9661ac2a4e7be622b8fff7e8e9c2dc00620efb5b8e40b6dc7428b34f5b4b0ac5d9119d3fa8d70e5c195f7282ad2654527dce195b5ba1a336e24dac98e4aaa42f3a9aa50b385956880b73062fdaf41cbfb64683618b4ec3f754acea9585f2eaca0388d75f952e6936fccf3b28a6e916beb46b5db13911aa3b5ab8e9b41879f73e1954bc28700ad10e38d2f1dc7486f9acb992a4af9c0e3339964587caf322c6e8c6e0701ff74b2a9176ed434581f53650f70a67bdf172c365819748d36f587311d5274c15ff25b79c0bb77015240afee0d43d46c45125d86b0b"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_VALUE={0x8c, 0x4, "5317970a98c86e1d1d27abfdb9b3e4dc12f1a6724f9a34579170ed78bcfdfafd85009e5d14f8ccbff19e3b9f4275f28d9c0c24a03e09ea7c978d9dad6bdf426a2e2284e3f7d853235e695d332cca4696852afe80f0e2568a2d353cc31f06999b63e0174414a68023bd8b4dccf8fc6dc9b6b14b94189a520c160bf66ad0d0a4175ffad90186cf6ae6"}, @ETHTOOL_A_BITSET_VALUE={0x61, 0x4, "5dfb3a8000e40c0fe2a69b0817e1045b84c81dbb020426567cc8e5cd2485820fe7b566c3c1c2b631b8ec63e0bc90631b17c326fb6bd0b408cb191b8e0d54d86e03944761b12223e1ecbab97f6273b0c10fe705aae3059dc2871a73e434"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x2260, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "43f22ae22a2b3ba62fc46b6ebb9e25d26f9cac6b7fd658cebb5b737169d58667076f1131d5a44f5bef1d935a31d49035b53f9483059901fc3a5e6b451264301dffd0bc081d2bd37e564563a4c6d227aeebe31eb23ad2516af7404d9ef88f56280d7c29570f2d77a4bff5ebea1563eb44475470d701486e1ea8d5ceb91f38781a74e29081b5a9337edb77526e240751f81187818b87ae295dd1d930bfafdce4aa156bba149af28291326335246922733da6febaab6a689ae9d1fbac0380722fbddb6670c0d9c9f19cab4d78a3aa631d1cb1df0f17d3e60156a7f2951da3656cea07d83a90169dd9c80df7ab6f24dc14acc16b4a42bd94971e16b9c633c7a15db9399271163489ec45de0f55fefbf7096186762cc128b1f62fc8f5ac324f2bbd1c1e992e2358c21cd9c3f1ab6a7bd09378dacad592c91d77beb3632f68827ee98f5a6ddba03a75af2607393f408258298143d83bc769688ed99af406eea5e2d40af67436354a456b19d9145d754af649090de98e1bfe827c11d916865bd88e20e93f45d970765f5d66eb67c76df5be7aed0d017f9ca656e83c68570ee00cd272303b7cb5a30f6ba501b1f4389a1de209aff1acf1e4131be364e8bd906a602c4179d641629bc2af7d416af5b938504c6b2b2ba41c220c6ee28beeb86384991434eec1c93f09f1d56dd0c08d90d5c2a5a3ca470212bb91faa9e9abb392b48606e16f3189880644c2bbee9bdf9e93574d246ca1eff835d7f6401dfecb7335ba8c5b2578499d272cf966fffbe2113b3fa3032c20b2e090d47ae5fdc67eab2acdee805487c2cf8076cebb3946ced6149dcbadaaf238cf72b00acdc5ce4ca2929a47d06c746dba66f2a50ebd9e0662c18dcab443a7a2dfb50ca31426744c85c74ad05d50791e1b63bf4ddd6c2f6c71b72f68c4d628d4c8de0a785b98c456acd9d125dc79bec90a9cc77ad53e82cbfcd5b334815d13592ff07660d59d42fe933029730a162b1a0300128bc0a25ad3a7a6ce4b7189ce461964e331cd251638afd870c867e00ebc26d1cb3fecbd034127888bea0d45764254c6b71a333eaaf14d3fb2a74fb9350117adae148cdc4ce0d7fcd7fa43876eeb34f36edfac8ce947e21f06870bffd211b0d2ffc893eb6b766e1d99d8a90d058761700e2e4f0df291ffb5a1ac8d0b055a43f62dae43f2f572edcf07e19b42bfd2048d140dedd1f20c029eb6fa85e73d644f04fb9c50acd5244a9e8aa3a857e2a02fe218e9d5d6b34a38b1ed4be7d2dcd5c53877287dd7181fb70197de49381a4eb1e481360b91d05ed5f33519f71f4403740254b99e62d103972f31faa71f52f991740455546f3388baa1b7873e77d14a8e7936e279aeb2a073dd26727d1800ba3601828f9c99b9e02e7f35ef34b0cea7b78fc34197b88cdea5a496eab674e28e59cc28b47c55151121345afd1b48c12be664315d1ce433e28b6a22bb56416527e62bc891797499dd4b382919741ac9d086f7a2eb211681a27f336b72b336a4ef33bc40e15482a3cefa0732cdc66ad7449152457bfe109b8366c25a4476d50e1716d5f1d797efa6882674d6e850cccc48d8494fcffc88b091a05aebda6726d7359926fb3cba4e784859052be6c921a07fc85cdb7ee8d0b9c4867855f1780785bd669ab25d264456c34984ef1832d1faeace27b33c6f5160a67372bfe3c4e9581476240d227e6dae7496317602671c8d0c6084191313f275964a486b6ccae519b1ff9a1d4a09edfb3867beae84c2f6361b1ef54e60fccc052a985ee7f9c55d849785c1071ed95c0f38b777ca7364753eec2a2047fdf3fe2011e7d468db5b2fa1f01c5dc507fa5ee3c713b5de2cd1825b6827f8b78833d347418319839aa24260e2356a287010384e317aeffcd352c1f3cac1fffc2c9e57c3cb5686f240123dac2c0b496d79baa801e8c21869aafdacd726c5c4e97eb3e3cf7e84fe6e1970beb8013b4628fc5ce5d093b0a7e1f6da3a38870799ef8f2725c4e666f2ddd4f4cea902f0d68a2a8cdb61b8792724e3fc7d62c9b49348f6501bb6439351658a5bf2a3ff78e335a10e625e6244296d44ca014da71872c15dce5491f91321d51e5949bcbcee786defeac63dae473793523fa7bbdfe977c39a22210db239ff9cf7bddd45e800a02c59f2cc2adb1ece78df190a60f999da7aa681ab60a667e8727192b66fcf602f769b6c2687dbb29e5ca6532d793069533f3eb6adfe56a439275b45d13d9169aa875321ecb476c1b909b84b71e91772f8acc0299c16f4d511dab348344f4c97e9b37881b469e5ffb1840e88d36893903da6895ded8b8d53e4d4c0eb62d3bd528d5562f24dc01ab6ad17e234398f3ff9de314912de8850c61c19942d7e296b44477a4311cbf4bfee99bfa43fcc123a553651883b275ec87bd46c9ab80a95789ea56bdfe5f6a3ddb86939b656273a7b48c8b23129bff4febc3004d46ba137e7cd14ae7bac469cebfe3e089f40fac98518caf756bfa38ac3269d280b5ac56421799cd4e9de78e457362917cec9b7c81410b4dd9cab52739e4edeb13dc8711ed71da7fcf914301ff7d8ddebd98d1fc3cf537a42898de2bcd2231d0a268c6ddf79cb879d482cb1e5661553beea527ced5b87b80b832027174cd4a9b3cf15d0086fd97a17851d38d5cd6b9f843f2886207a6ddee6a777a2c550ba678de03d2ac485f05544a1e840b59e423111a54347cbfab5091589353a8e44343a48ba24941cc4a9214f4281600f0340c3ef6b562049ea6a4174199bd5964b46e1d9d2e1ecf81d83c2af0b313c1020e1e47f69468f305a3d88231fc2b57528db2683a9750e2976c271c40f17fa53a5a69e26de0ea3293e80bca3d6a0712d03dddc13fd6de9fdba5ba2f58431215c04eb4a802588bd8e18b5c192250594bc78a89cb473c16cb640f74555ebfe09b4b8c8bb237c3e16183649de05cb4da5293219adfc44234adbb248c1692c50cb90040ab7704acd484cc8f08e21c0693a641e65b14b7bc79764eefcb312fd4f4a03361a4c88ccd976c9a249542199307ddf3cb6dd1017f5975681aae37a53ceff7d77ef160ee00db75a2ed82f94fa4ee7975ad8698d577780d935a53d5d3776e9b050fd3ef3942c0dac8fbd56e278de9755e4141a7637a0a56ce0d41ebaf5cd05ba95fccaef61a64a7f885a2a4c0df9bdc96305b5a56acc194d83e792ea166c83d02cd6f309b7e3044d2255f4bad6ed9f4a19c1bf32545c380f6e86fb00b4a195301c9c9d8152c9802352f0ad2b30ab8fead7d957e5382f1e362dbd21a1781ba87274e1e2520b9bfbe8ff08aa777fabf30871e8cc908e1d76fee54af759b112ea912871214c3c3fedcff47c3f1729d0da8eb6a233c2cb0f316ac664c578ff384e919b477d80143390ab74a2d94fbd50c3e95114cc89513df74de64a464d35c95075b71aa1b79e36b967aafced6d07358bd2a195fa3d9a4dec3125b57677c1ac334dacad9654dfd365dc61edb1c17d5f8d3685f9b10d0864347d8609d4dbffb1b365c08499599ebec120dabfbbc63197935575fd89aa2d8c6ad06fde9fcb344dae5c0c94175be8b29814038cfd1b2051fbc804661fae2d4cffc9f744a4363c37fca38addb12b8975a6237aaffa159c8938e076fe7570623ec19ea7159fb95d6dbbb0cbbb58c02cc8607873b5e140642e91d14e9b648cc71ac472ab70ccb98f79fe98af0f0faa9e3247b57fa2eecdfa223fed6f04851fba253ca72b9672c3484b2cdf790122584b889d4a2088f7ea7d94f5c63937fbf04181e9d0a3baf7c54ec7047bb10c3748c867552e96c54f119bdbf2838e6516e6dae8126baf6b6619bdd3c690dc5806440ae39ab522b4d636e1fb1052b25ef8121c773753d81400ae11c862c450d2817de67e2dd7c6da2a6e0c7d90f01b9e95b04f361442cabd390e9431150a448b0b6ab8e5e698a99e72991a1be5083475216ed3688ccdba40e934910a024bc5425ab3da3bf98e874d261c15d48ce1b7a553e9cb2fe286f79969efe3a144cedd41edd716adbd4af9d261acb31a361fb68061c38d4516e35f05a0f8ace7febda741a41c6fcc68e6c79f2ba3a72ec4185a6e426307d742b53b7ba3a26f90535c8a0d85d7e83b498f97d8c2a26fd73503b8d1e65b8869becb084129700626066aa81b8a068b3d69e8d94d32767041d076637d9cc6653f663b798e1f0123856c1bf5b0b25326c8b706e7ee828fe998627c32101ad1533c4d601ae82dd66f308cab992fde0d45ac23acf6b264bdffd4b1b3d91d5cd2badecc14210c2760375df2470bbd5633e7089dbe3fb72b41441f03b6a03ec8a6b7a4170c4d1f1633464e6892b6cbca01423845edbb6b0266941f408744765062170fb87f985c2926cdc93a4d6551fff2a88c4fbc46b25f9b8776f7b9cb66eb1b63807e2d28989e95fa617642b3cddb4975265a19705d21c149a8af0324c6efd1686f965f2a6bd667daa3d24ef50b99cbd8adfabc643690402ca870ca5aff7de816aad9f1a437921f0f2b8800bf10921224e9e13281e9818d9e97f754050da752204faf1459a607c1f06fd97f8572283bf9adf4e5de675c1a246373db1f7acf6c79626fe29d59b2cbdb1677dc7d5468665af1866de911d2aa6a64f6c6e39520208e2f7dc667ed77b285044f63c01165243a100c63da711ec33b2ae081ac22a3311bf9734c29a5d1e9140aafe00ea683d389515a39c12356f72f56a01af1afdde6787a8c1d02bb1a132ef6e4915ac6f437e145e67f59c3ca36a35eba55ecfa014e28bccf1a7a7fc1f3cc9c813b45d7d1a4014a1927cb9b32b8b0e06aabb8d53caeb202f3155a5992b2cb4bf475457e7aca0d62fe1dad5188eb3c66848af348f565faba34f256cd2674e171764d0b48d69396d4f4d3c305e4453a464a3e8020d31f583acd413721e22e759c559f96a929171e893676b48449aef0b48734eec7d630133c6230608209ccaa77c0fde8a552b8a8c2f107bb5ffc21a3101930ad64aff0cf19bc8eaf1282d9d171ce9fe16d9cab5df81856149964e8f4567ab2e05dd8cb64a04c86f1f9724149a845d5315f75c9f9d3005b3bac34bb817687e1f02978d60fd7b27421eef9c528bb013a4ad0bc22929c2782cf677919e7e0aabdaeb698af15ad5a088c8123019396a5c512422de957c67b0ed1a5c00613d053217a0e7d884918566647e1cf78061973207683d67fe7f7f0ae815cc026d20bd339ec96e191d9c6e19679d77756b576b4eadbf33a9df149777ba5b568adead92b42b4f7643a1414011d6b619adea7b089fe0c5c694945b3533d9e59e22bd6249f7966857b9286b5e860e18aec2452c2027c3f8892afde0df9c666f1c236741b421afd668d696281b4953e4d7f0c4d2b10d9413f76d3d9b14b3d7830a02171c9c5d4ac89bfbdfb0d0d71fd1c5b5457ced6ff250999d17858862bed4e1396a5bc83655001ccee2c68b69eb5ed780fd1f95205355990d2c796459b86f499642a1f81e5d06af04b5210628e70471aff1d37436ace14dbd3c022103479aa445f2c741752e7b67349e3cb12a5b3a38ed511c2b162c7fde107daa351188a9dd9fecfa73464d054694ff97315f26a9b6fef1cb69d2effe1cdc2d7bf453b5a430d1ab46fcca0e4dd41635ac064f1fa66a9354a6b147019859b65842d3bcdb89e1a4bbf115b42d3480a1c4c39c8ad97300cae77ca9ae5f7e05088f485d296b16976288bd74cf6c535ed8d6a13ff4f948c65a4a7eb684e63d4f9233d5754789b2293b953976991f9155fcf0ea6f2835f5a5e15bdc6695c7dd5a1de463183"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_BITS={0x184, 0x3, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ')D$#[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+[/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ',#+\xe4&@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '**)*{[[R\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '&\'#!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9e0000}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%+\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x35b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '.{]]:\\\\-${{-$%%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x448}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\[{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_VALUE={0xca, 0x4, "1880f58f345a4a12714662f2afb8ed5298fd79dbe0c8918b0d71f46a4b20de54a5f0fe60d261e267c781695a2161fb945f8552898b0783b4a28a1afaed5e95f0132ede90f0efa2b0c25b19557bbafc4e49166153e2ca66f0154679f5a011d94d9d5b880109c6603aa3f4aba401dc92fbbc0388f0e0c8a3956c7515ff1cd8bb361f1134b2eed85a896709f7cdaefaf7ba370226012a8304c7015fdf67f2c47fe5205f6698df5145ba9944ec5db31a239c8a98f894bf4113b831aecba7ff8a6554b929f0768f04"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xd8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xcf, 0x5, "357ce930ec422241cd56624a6bc9381fe371e09372db517985f4cfefb82bdb27282dedf84a70b8eda461f10742268592f81f438668ce7fcc3d3c4275ea9bc36b7af9d5ae0f622ec4bcd7d033b7e1a1cb9967755a8c8e6100adfcef641e4344c24f12ef89baec4dbd224238385439793ac3bb377c7259aa55ce7239b11108d267b6d9a434ef8ff9d9e749c063a28282e820c55e58abba884833ef1b5e61c1690a2ae89dd17b5e939080e435e9d85999720f20bd4b346b2bbe99bc2edd6300686555fa10546678133707b291"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1b8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xe2, 0x5, "f52f32d6ac2222fe3f0e5c5bfd401da967c777017a0195c8d798de39a2e9375e8961e31f08cfa0dde627bc24c26bd0ea166bf22a63dda9be51d7af4f8bb215dd505f3a471ba824d31f184328a4c5fc2397717d11ae8a711f1166ef7d41d0dcd7d11a39a798d834ea0c2f47e3497401bed1aa012049130b1062a14fe92abcf43f81c344d764ab16b6f60d617ed4cfb588d0189f4c0551a5c90cb7cc2b0676817ac9059305a37d545ceb9669ac5b73593dd720535d460efe7f01013f3bd9f87851f41a7f62fca626e937c7fa3d9e3a3c3db56759098abaffb4e32515f9db06"}, @ETHTOOL_A_BITSET_BITS={0xcc, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x419}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':\x86\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x42b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbad1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':*\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6a8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc14}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x27b8}}, 0x40) (async) r11 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1, 0x11, r11, 0x0) r12 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r12, 0x0) (async) bind$netlink(r11, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x3004001}, 0xc) (async) sendmsg$IPSET_CMD_DESTROY(r11, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004005}, 0x40000) (async) bind$bt_hci(r11, &(0x7f0000000000)={0x1f, 0x0, 0x2}, 0x6) 14:11:57 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x161880) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000000)) 14:11:57 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, &(0x7f0000000080)) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x0, 0x0) r3 = getpid() ioprio_set$pid(0x2, r3, 0x6000) (async) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000040)={r3, 0x0, 0x6edd}) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) [ 3261.434025][T21237] validate_nla: 10 callbacks suppressed [ 3261.434044][T21237] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 3261.448569][T21237] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 3261.457507][T21237] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 14:11:57 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x161880) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000000)) (async) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000000)) 14:11:57 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, &(0x7f0000000080)) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x0, 0x0) (async, rerun: 32) r3 = getpid() (rerun: 32) ioprio_set$pid(0x2, r3, 0x6000) (async) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000040)={r3, 0x0, 0x6edd}) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:57 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x161880) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000000)) 14:11:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)={0x48, r2, 0x1, 0x0, 0x0, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="3400000010000300000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001300fb3947"], 0x34}}, 0x0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000200)={@multicast1, @dev, 0x0}, &(0x7f0000000240)=0xc) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r8, 0x1, 0x0, 0x0, {0xf}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000002a80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002a40)={&(0x7f0000000280)={0x27b8, r2, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x26c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x65, 0x5, "6e54ef18c200d35e22e2ab64b8aafb0419e701833a6b738486317ea10509bf20da5bccbe4fd0fa1224b76db965e22bbfc0c4229304534caddb694dbc2c55c2b2a8e9a0835e03a064a2bcf8419a858099639f26669e8520c5f47ebd5aca7b801eaf"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xfd, 0x4, "7b9925f8f5e0b1e2c08a037824cf13945fe82eae81284dd63c9d6856d9932e4e9661ac2a4e7be622b8fff7e8e9c2dc00620efb5b8e40b6dc7428b34f5b4b0ac5d9119d3fa8d70e5c195f7282ad2654527dce195b5ba1a336e24dac98e4aaa42f3a9aa50b385956880b73062fdaf41cbfb64683618b4ec3f754acea9585f2eaca0388d75f952e6936fccf3b28a6e916beb46b5db13911aa3b5ab8e9b41879f73e1954bc28700ad10e38d2f1dc7486f9acb992a4af9c0e3339964587caf322c6e8c6e0701ff74b2a9176ed434581f53650f70a67bdf172c365819748d36f587311d5274c15ff25b79c0bb77015240afee0d43d46c45125d86b0b"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_VALUE={0x8c, 0x4, "5317970a98c86e1d1d27abfdb9b3e4dc12f1a6724f9a34579170ed78bcfdfafd85009e5d14f8ccbff19e3b9f4275f28d9c0c24a03e09ea7c978d9dad6bdf426a2e2284e3f7d853235e695d332cca4696852afe80f0e2568a2d353cc31f06999b63e0174414a68023bd8b4dccf8fc6dc9b6b14b94189a520c160bf66ad0d0a4175ffad90186cf6ae6"}, @ETHTOOL_A_BITSET_VALUE={0x61, 0x4, "5dfb3a8000e40c0fe2a69b0817e1045b84c81dbb020426567cc8e5cd2485820fe7b566c3c1c2b631b8ec63e0bc90631b17c326fb6bd0b408cb191b8e0d54d86e03944761b12223e1ecbab97f6273b0c10fe705aae3059dc2871a73e434"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x2260, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "43f22ae22a2b3ba62fc46b6ebb9e25d26f9cac6b7fd658cebb5b737169d58667076f1131d5a44f5bef1d935a31d49035b53f9483059901fc3a5e6b451264301dffd0bc081d2bd37e564563a4c6d227aeebe31eb23ad2516af7404d9ef88f56280d7c29570f2d77a4bff5ebea1563eb44475470d701486e1ea8d5ceb91f38781a74e29081b5a9337edb77526e240751f81187818b87ae295dd1d930bfafdce4aa156bba149af28291326335246922733da6febaab6a689ae9d1fbac0380722fbddb6670c0d9c9f19cab4d78a3aa631d1cb1df0f17d3e60156a7f2951da3656cea07d83a90169dd9c80df7ab6f24dc14acc16b4a42bd94971e16b9c633c7a15db9399271163489ec45de0f55fefbf7096186762cc128b1f62fc8f5ac324f2bbd1c1e992e2358c21cd9c3f1ab6a7bd09378dacad592c91d77beb3632f68827ee98f5a6ddba03a75af2607393f408258298143d83bc769688ed99af406eea5e2d40af67436354a456b19d9145d754af649090de98e1bfe827c11d916865bd88e20e93f45d970765f5d66eb67c76df5be7aed0d017f9ca656e83c68570ee00cd272303b7cb5a30f6ba501b1f4389a1de209aff1acf1e4131be364e8bd906a602c4179d641629bc2af7d416af5b938504c6b2b2ba41c220c6ee28beeb86384991434eec1c93f09f1d56dd0c08d90d5c2a5a3ca470212bb91faa9e9abb392b48606e16f3189880644c2bbee9bdf9e93574d246ca1eff835d7f6401dfecb7335ba8c5b2578499d272cf966fffbe2113b3fa3032c20b2e090d47ae5fdc67eab2acdee805487c2cf8076cebb3946ced6149dcbadaaf238cf72b00acdc5ce4ca2929a47d06c746dba66f2a50ebd9e0662c18dcab443a7a2dfb50ca31426744c85c74ad05d50791e1b63bf4ddd6c2f6c71b72f68c4d628d4c8de0a785b98c456acd9d125dc79bec90a9cc77ad53e82cbfcd5b334815d13592ff07660d59d42fe933029730a162b1a0300128bc0a25ad3a7a6ce4b7189ce461964e331cd251638afd870c867e00ebc26d1cb3fecbd034127888bea0d45764254c6b71a333eaaf14d3fb2a74fb9350117adae148cdc4ce0d7fcd7fa43876eeb34f36edfac8ce947e21f06870bffd211b0d2ffc893eb6b766e1d99d8a90d058761700e2e4f0df291ffb5a1ac8d0b055a43f62dae43f2f572edcf07e19b42bfd2048d140dedd1f20c029eb6fa85e73d644f04fb9c50acd5244a9e8aa3a857e2a02fe218e9d5d6b34a38b1ed4be7d2dcd5c53877287dd7181fb70197de49381a4eb1e481360b91d05ed5f33519f71f4403740254b99e62d103972f31faa71f52f991740455546f3388baa1b7873e77d14a8e7936e279aeb2a073dd26727d1800ba3601828f9c99b9e02e7f35ef34b0cea7b78fc34197b88cdea5a496eab674e28e59cc28b47c55151121345afd1b48c12be664315d1ce433e28b6a22bb56416527e62bc891797499dd4b382919741ac9d086f7a2eb211681a27f336b72b336a4ef33bc40e15482a3cefa0732cdc66ad7449152457bfe109b8366c25a4476d50e1716d5f1d797efa6882674d6e850cccc48d8494fcffc88b091a05aebda6726d7359926fb3cba4e784859052be6c921a07fc85cdb7ee8d0b9c4867855f1780785bd669ab25d264456c34984ef1832d1faeace27b33c6f5160a67372bfe3c4e9581476240d227e6dae7496317602671c8d0c6084191313f275964a486b6ccae519b1ff9a1d4a09edfb3867beae84c2f6361b1ef54e60fccc052a985ee7f9c55d849785c1071ed95c0f38b777ca7364753eec2a2047fdf3fe2011e7d468db5b2fa1f01c5dc507fa5ee3c713b5de2cd1825b6827f8b78833d347418319839aa24260e2356a287010384e317aeffcd352c1f3cac1fffc2c9e57c3cb5686f240123dac2c0b496d79baa801e8c21869aafdacd726c5c4e97eb3e3cf7e84fe6e1970beb8013b4628fc5ce5d093b0a7e1f6da3a38870799ef8f2725c4e666f2ddd4f4cea902f0d68a2a8cdb61b8792724e3fc7d62c9b49348f6501bb6439351658a5bf2a3ff78e335a10e625e6244296d44ca014da71872c15dce5491f91321d51e5949bcbcee786defeac63dae473793523fa7bbdfe977c39a22210db239ff9cf7bddd45e800a02c59f2cc2adb1ece78df190a60f999da7aa681ab60a667e8727192b66fcf602f769b6c2687dbb29e5ca6532d793069533f3eb6adfe56a439275b45d13d9169aa875321ecb476c1b909b84b71e91772f8acc0299c16f4d511dab348344f4c97e9b37881b469e5ffb1840e88d36893903da6895ded8b8d53e4d4c0eb62d3bd528d5562f24dc01ab6ad17e234398f3ff9de314912de8850c61c19942d7e296b44477a4311cbf4bfee99bfa43fcc123a553651883b275ec87bd46c9ab80a95789ea56bdfe5f6a3ddb86939b656273a7b48c8b23129bff4febc3004d46ba137e7cd14ae7bac469cebfe3e089f40fac98518caf756bfa38ac3269d280b5ac56421799cd4e9de78e457362917cec9b7c81410b4dd9cab52739e4edeb13dc8711ed71da7fcf914301ff7d8ddebd98d1fc3cf537a42898de2bcd2231d0a268c6ddf79cb879d482cb1e5661553beea527ced5b87b80b832027174cd4a9b3cf15d0086fd97a17851d38d5cd6b9f843f2886207a6ddee6a777a2c550ba678de03d2ac485f05544a1e840b59e423111a54347cbfab5091589353a8e44343a48ba24941cc4a9214f4281600f0340c3ef6b562049ea6a4174199bd5964b46e1d9d2e1ecf81d83c2af0b313c1020e1e47f69468f305a3d88231fc2b57528db2683a9750e2976c271c40f17fa53a5a69e26de0ea3293e80bca3d6a0712d03dddc13fd6de9fdba5ba2f58431215c04eb4a802588bd8e18b5c192250594bc78a89cb473c16cb640f74555ebfe09b4b8c8bb237c3e16183649de05cb4da5293219adfc44234adbb248c1692c50cb90040ab7704acd484cc8f08e21c0693a641e65b14b7bc79764eefcb312fd4f4a03361a4c88ccd976c9a249542199307ddf3cb6dd1017f5975681aae37a53ceff7d77ef160ee00db75a2ed82f94fa4ee7975ad8698d577780d935a53d5d3776e9b050fd3ef3942c0dac8fbd56e278de9755e4141a7637a0a56ce0d41ebaf5cd05ba95fccaef61a64a7f885a2a4c0df9bdc96305b5a56acc194d83e792ea166c83d02cd6f309b7e3044d2255f4bad6ed9f4a19c1bf32545c380f6e86fb00b4a195301c9c9d8152c9802352f0ad2b30ab8fead7d957e5382f1e362dbd21a1781ba87274e1e2520b9bfbe8ff08aa777fabf30871e8cc908e1d76fee54af759b112ea912871214c3c3fedcff47c3f1729d0da8eb6a233c2cb0f316ac664c578ff384e919b477d80143390ab74a2d94fbd50c3e95114cc89513df74de64a464d35c95075b71aa1b79e36b967aafced6d07358bd2a195fa3d9a4dec3125b57677c1ac334dacad9654dfd365dc61edb1c17d5f8d3685f9b10d0864347d8609d4dbffb1b365c08499599ebec120dabfbbc63197935575fd89aa2d8c6ad06fde9fcb344dae5c0c94175be8b29814038cfd1b2051fbc804661fae2d4cffc9f744a4363c37fca38addb12b8975a6237aaffa159c8938e076fe7570623ec19ea7159fb95d6dbbb0cbbb58c02cc8607873b5e140642e91d14e9b648cc71ac472ab70ccb98f79fe98af0f0faa9e3247b57fa2eecdfa223fed6f04851fba253ca72b9672c3484b2cdf790122584b889d4a2088f7ea7d94f5c63937fbf04181e9d0a3baf7c54ec7047bb10c3748c867552e96c54f119bdbf2838e6516e6dae8126baf6b6619bdd3c690dc5806440ae39ab522b4d636e1fb1052b25ef8121c773753d81400ae11c862c450d2817de67e2dd7c6da2a6e0c7d90f01b9e95b04f361442cabd390e9431150a448b0b6ab8e5e698a99e72991a1be5083475216ed3688ccdba40e934910a024bc5425ab3da3bf98e874d261c15d48ce1b7a553e9cb2fe286f79969efe3a144cedd41edd716adbd4af9d261acb31a361fb68061c38d4516e35f05a0f8ace7febda741a41c6fcc68e6c79f2ba3a72ec4185a6e426307d742b53b7ba3a26f90535c8a0d85d7e83b498f97d8c2a26fd73503b8d1e65b8869becb084129700626066aa81b8a068b3d69e8d94d32767041d076637d9cc6653f663b798e1f0123856c1bf5b0b25326c8b706e7ee828fe998627c32101ad1533c4d601ae82dd66f308cab992fde0d45ac23acf6b264bdffd4b1b3d91d5cd2badecc14210c2760375df2470bbd5633e7089dbe3fb72b41441f03b6a03ec8a6b7a4170c4d1f1633464e6892b6cbca01423845edbb6b0266941f408744765062170fb87f985c2926cdc93a4d6551fff2a88c4fbc46b25f9b8776f7b9cb66eb1b63807e2d28989e95fa617642b3cddb4975265a19705d21c149a8af0324c6efd1686f965f2a6bd667daa3d24ef50b99cbd8adfabc643690402ca870ca5aff7de816aad9f1a437921f0f2b8800bf10921224e9e13281e9818d9e97f754050da752204faf1459a607c1f06fd97f8572283bf9adf4e5de675c1a246373db1f7acf6c79626fe29d59b2cbdb1677dc7d5468665af1866de911d2aa6a64f6c6e39520208e2f7dc667ed77b285044f63c01165243a100c63da711ec33b2ae081ac22a3311bf9734c29a5d1e9140aafe00ea683d389515a39c12356f72f56a01af1afdde6787a8c1d02bb1a132ef6e4915ac6f437e145e67f59c3ca36a35eba55ecfa014e28bccf1a7a7fc1f3cc9c813b45d7d1a4014a1927cb9b32b8b0e06aabb8d53caeb202f3155a5992b2cb4bf475457e7aca0d62fe1dad5188eb3c66848af348f565faba34f256cd2674e171764d0b48d69396d4f4d3c305e4453a464a3e8020d31f583acd413721e22e759c559f96a929171e893676b48449aef0b48734eec7d630133c6230608209ccaa77c0fde8a552b8a8c2f107bb5ffc21a3101930ad64aff0cf19bc8eaf1282d9d171ce9fe16d9cab5df81856149964e8f4567ab2e05dd8cb64a04c86f1f9724149a845d5315f75c9f9d3005b3bac34bb817687e1f02978d60fd7b27421eef9c528bb013a4ad0bc22929c2782cf677919e7e0aabdaeb698af15ad5a088c8123019396a5c512422de957c67b0ed1a5c00613d053217a0e7d884918566647e1cf78061973207683d67fe7f7f0ae815cc026d20bd339ec96e191d9c6e19679d77756b576b4eadbf33a9df149777ba5b568adead92b42b4f7643a1414011d6b619adea7b089fe0c5c694945b3533d9e59e22bd6249f7966857b9286b5e860e18aec2452c2027c3f8892afde0df9c666f1c236741b421afd668d696281b4953e4d7f0c4d2b10d9413f76d3d9b14b3d7830a02171c9c5d4ac89bfbdfb0d0d71fd1c5b5457ced6ff250999d17858862bed4e1396a5bc83655001ccee2c68b69eb5ed780fd1f95205355990d2c796459b86f499642a1f81e5d06af04b5210628e70471aff1d37436ace14dbd3c022103479aa445f2c741752e7b67349e3cb12a5b3a38ed511c2b162c7fde107daa351188a9dd9fecfa73464d054694ff97315f26a9b6fef1cb69d2effe1cdc2d7bf453b5a430d1ab46fcca0e4dd41635ac064f1fa66a9354a6b147019859b65842d3bcdb89e1a4bbf115b42d3480a1c4c39c8ad97300cae77ca9ae5f7e05088f485d296b16976288bd74cf6c535ed8d6a13ff4f948c65a4a7eb684e63d4f9233d5754789b2293b953976991f9155fcf0ea6f2835f5a5e15bdc6695c7dd5a1de463183"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "df02c4c7fc3aac0eda88e7adf71abe0e65ba6c0aa2b974b11d7071fdb20f1b20eb2a0069e5495fec8424f4ae08cd6ad5f9be63526c164e436a677728d42f0e5598e924c8a6df3f730ca8022debec8d07714a48b15c7f6d1ce3264e52e85e104c98a4a28c3fd4f1de8d177306846301bad1e17e348c77fceb20f6e459e3b557cfc6734ce49890e37031c8d2bc7d45a1b15934dfe312c69929d5cf3596bb6dbc059e8d8f7e970ee47edb9482af881721653232d2c5aac8f1133ce84a095757deb94b04877cd872294ed61b4c6e29c02c9f3fc128e900d2ded7e18ea405fd3a507dd22d1d45c70e0e383f74c0d936013a6adc9575ee635fa48261e491dc4285353a5d40cfe1f86828932f92654ce16b1d0d0b5c424c5aab18ba07a1efd8702d8ed95080b7d2980c1cf565b3aebf7dbe5c4631c46b3fdfb9231137c19c244e293f349bcd6aed122a115b51db6494832887dd2b980f2e61785797f93796504182924a8ad79a4a7d4babd6d281dc3bcaf730099f9dd9fb1c129b8723289d679fe88d203cb6b1e925d8c90c4eaf662c73e2d38e12314260bf6b50068166417d01dc7115c8ac1c95575ba9643c7a82d925907e7eb700558d5f9ee987cff31e208886e6c8999602262ff9c165282f52e67946739557790368499b49e99411768f7c44749b6cdfa6052b632d9f3bd2880bae3285bc924347a3e12d923c730c2d5ff482c04bc61f69bef87fabde4b0f7bc2e8f0fd00d54338b031815cad65c644cfc30af6f55a02217839e7162cba56367c3e15d57a429ee38bccbc49734add4fd1523612f4b0c3be809eafc7ca04bb21f78363e7059df74b408ff07043df13d1ab5fcf3066dff05f0c680d863220e1e58d6bff90f705f7e13d03f1fcc946447f8e4be5181c339f07bf457cfe1fab17d6a6350abd87df9f081eff731c3374c6d73b5c82386c7837f9e93ffede5cae84932c698fe4e360115e7815c4788d8b8acc6a3835dd1722598d9461517c769f43faa3838a40b7aa18cb8f9d2be5e15c0d88369bd0163a09a35d9cf82d0c7bb166cef3d51df5ced04bc2b8ccc58d026e716944786a38234922c2deb1c6ab6ed1f6bbb57615e7f27e98e51386ea92e7c69518d319c7aa49045cbf11225bcf33c9b2346d8fefaa36b682eb224a18bef7ba5f5b33b68f92a8a75fe4aa9adbf489e80bb785d28ca1ee8a25b121df433129af9597637db99e45466dd943a8b783a0d6445fb3177ddc3cc2223cbab881c88dd30fb955bbf9d8e177bcc9794920e7627df503fc4da72c49e09fdee779698d36e1483c25cf743e5855498d1a4811cf6d0ed85a5b63e35f630488655b619796d89444d4d4aefbd96ebafa5bdcc4c19a4b0f68c69662683f7cb4fc54a9a7fdd8a09e3caa9a8b11ab7c6d5c01f06766383490c339fc186f5f296c4b031d0749338de1f2e3d0d04733be7aece019147629ca7df04a8fd5f7e9ef249eaf227c9b4e7b62f016443c5dde818980bf140d4750bb16197b921a8d5c01c208c409ad6c4464443f42b1b2038a17155d87178678b7faca436a0a653b4b25ecee03c5d82d176795166aac0793d8670ef3e4aaa18a217d382a5880537aba73887e1d0bc40565e9661a1422bd0e73373ee49a76a2cead82e4098bf86b90731a7f5b48963593943240ccc756335f9cdc0c9f1f7c96413391f10340c089b77adc50a08a1c0bb955ae80e084ba2a944a3f546394cd69e8c9b7b97ad23fd43ff3df669c385fcdc08ae18f8ef7117c7a84731bbbbc9925a61d84b875e2dfa449998a1c767a01638499acfa68fe967e50dbd7606534421ce6a6e112751f4d5fb42a94cfd865f6de8d03b5544a5b82c4b20e0c48b1331173f911edbe5c939acf7d148999540f5c40f329acc89f4f176330c865a420a4bd36b9e8f6ca133317cea7d15b62d81654dc137a266b3388e3749d5f9548aecdb58c839be95e51cbe1c1ee865600f3076a943472e81251fd7247fdc3bfcf4890406694392e9b9b88a31168442ab92a06e58e61c668e1403d4287fd391b7a6405e371291c7c3ef7519ae2d44e2602bdc0ffbfc76ae2278966bd7a27fcc04929e433d38e592bf3e0939c3807d10d61901e4c4e31769dc673d08d39ac206a9b3015827fb52308d7938b44b8a8c46512f9a23502b3ddfecdf59bb253e3a2eed4aa91c31233f1a88555c36279deb4e060c6c196d9b3bf3b26e64acd483923e58f2bb429b779d8121d1ae1beeb042ec3099c5adb0e4b9ab02a68f71eab7afa82e59b4477c37827ba6f029c6887c25a34b0a73dab076947c9e8aee3035e02654c4843f22aca06ddf817b5c35dda5e8c8334f7d04950dafffdd97495083ea0700fd6bf0715b2e5ef89018ee318ffa3ff86c794513dadabf87e6edd4c3aa79c7f5a8741418c5d465b90ab4c4aa27ed323250a7d2ade108991b193a9a3592dbb3c5c1ae6676189e145a20d7f09ba37349a853f6734a9393978c046080350aaab3e0ff2fb07c01bfcb35aa7526b3b1dadc7a0c5e4c64b1513e863d59eeabfa45585d004327639763644cf010db52469cdc0f28e5fc69c7c67e27288090feef7c41d0843f4932a7ea36a79b5f8261e0c3c188981c78a82ea415a68a1152b5d387077497fc53580812bcf52250d489c68440517f9609ca8fb5d2521236e981bb8639abb9ae5ea5a92ad4b593e07fb43b889973525ae39d0b8cebb32427238880fe96ad4346809434361c7bd5a6c0e6485532a0963e61b4708dc92b82850a54648c708a3a66c5288f695a1c391a1f51be278f8e2329d951ea0d86dc6c4332fbf3fdd686bd3d732b661ac72f0025f8a6548b3113c502151fc95fcc957f30bf150b8fbf36acdcfa79a3d7267135bceab15b9eed5f839f8e09621e164949be495f33957c94104cbc738753290265b2738cd94f37b888dc5313600e1196c5868ca304b668d0a1b72929a2bd692d6521ca648f5c8d17e996241e25bf44031ec858560cb2da6b4ba974a09380d4a32fc2c5ae406fcd58a4221fb38335f2a9c47c0bf9c7f0a32d9c18a23afdbed05aa76e7d012f96d43fa815b7bc40d51e8724089d5447cdc6f2660dad8f04a91e1d94c2331238c3eac74718f43178fdd11f226518bbade80d60fa5a75ddfc02f9702bac4b82d09a3fbb94be41859f23e5e897275a5531e48c5402525c860247ed0847b87910a1ecc609d63a421839061aa4c649867c906b8c2e7fc573604e28585cae6d723f1f4b781bbff1f0c544536f0d5f1a80952b139485d397a853ddd7c7110e0e68613c65c7cd3bf2ea9d8c207e323cfff806688d050956ff527bb17458326eb62230264e6ebcd714f1bcbd3a396d9de556d50f334d7c47aa0225cde0f4fe88358c1a30e92cd6c9981e25f1d20711fd0e6ebfe398bcddabcb95a726e782e2caafde4296940fcc1388727a016be5f8eb486d5c7d7177687ef1585fa6777ca9d6b67a7e2809566f1eeea5cc232a5f982ee7881699304872b39a60fc5435f3037ff6fedf3fee497cf704150593ce550ba7053df7190a45e959e363faa073d979d916eb85eddb57deaef5ff6802ee0b012f7b40fa0f388a195066ce865e4581e04b873fced1d30c226ce189f3ee1743dae1b8c1e6cb9fc5b282752a803e9e7fa8277e6c3eccbaa1b7bfacf9826164a42364310a5c6f02fc850abf2e50b8435f7e6825964c819990da0b6c0f2bdb7e19d7731ddb2dbfe5850b99c19ea593e3ab6f2a88a6a263fc92c10bc5a37433d42a4ebcc194bfafad7d4d13861b95891ad46cc4609b37ff2b4135b9fedef5b5387e48694742e3090f74a1833cb215276a994b2aa5acecb8fa9960fe930f7e1efa8a8b723f1c7720f2749208838f495d07cd7f6af485c8766698eca4d35df43246dfc78f8bf0b6dfe31bd585a94f02c46428fc7a24166d9ded49fdff01afb4cfbefb0d72667b2353a4ddbddc4c74f40110fbafd3628d79cde9ffc122449847843f64b4556442edb6df34067ce2cf75f6e7976f873d3b9270fb4b6a70d3fab9a4148716cf81c3ae23491eb41a0c22fbda4e6cebebdd51ac39351cd2cf5cd75766c2e815c7fea236b81dc8109f8edc5d4423dab834e54cea793801450d9a86d30902f10a89bb1dd1c5f8826658b429814bfaf5384d1532c125777ab9400e2397b5f75d015cbc76f3b50424a8250c6a807a1d6add0e9b87792167bc4bb684f97f5f50d82730817abc1ff676d10b00b8dd6f03e902c0fe495d605dc94e2a16b9711b5419ca7dd9a47961333444a83a8a74dbc5399a676dce974adfaf2f6df813407eaa6d0444d77083ef0555b8ef5761463c4c68d1b3ece4933caa03ec9c8218a82e50b92a975b7926ba066cb36b9340fc7d7732d4ab444382cbf04c2b0a91e853344be34e74c53454acc6e4a54de4ceab2d8d8e602dbb07a1797b17bdaa096435e9d55f9c672cd760e4c34e6d399de325acf8b333acf7bd7409b43024f21972ca74980ebc70f6cc187a3efa83ba281ab57178ab2878e5f9da8c77b0320352468ae5e02e69695771a1d421fc85786e5eebeb1565c536f309089d55de3014342845fe83f4ddfae9c9375eb673561d452a9d530acff2afd733eea8b2c772a6be74fcb19942a5d455bdf8faedaaecc445bc329befc0ee3b0901a394b278ee3377203fad5a0da2e1aa40d796cf81326c101d4aab17f587b9e1b4398e7866544bfed57030b6d7db00d0641595b13c0c602bcb65bffbc0241f1d23ef9d52e30186b98773435d3eb250abfb1365e7d5c1d449a4acc75d486d628b32c241e6b4e3b6ed999e6a289b00c6a8de6b564738f3fa2f0d7556e57522fef4a6955ae49460b1d1d5675501ad0897efe574533dcabd07c18f79a20c0785f9bc994d03c5996b67b4d1ceda088f7aaa4c841d239b2bca4e365e10d952dc1a46cb03bad6e0f4cbd24fc5b5bec32b2db3d939b11655667dbee0917c69d94c39c347c4327f5ffb70f094283390540559adcda909e73b191036c04fc0e7b6c19fbb1726e3607596eaeae7dd7229f8f12d9ab20cc6a7c95aadfaae07aa5d18271c3e6923724f531b37b7659f6cab733f261934add43ff559715504dc347429c9a8d95a2dc4635eff6623199cd6b9d9c64dfdc3969522c1978b4c013e53387ce796202f3345f3151743c9e79a135724618d44e31f11d7979f943b1833c5dac2fa4efdbb3c1b055a23d57612c73bc610001c8e781b609bb7980ff3f2ce42de97d6485cdb62a1649f68c55ef014c3c5954a7c5b2e013603e87ae75036600f5c5868bd25b1fe0d983b58d5d3b27c37f628ef33471e2be87e155e2e59b57562ae61f6c825715d3375568a689731ab16047895bd208f504e7169e3b5a91b59a9bc4b7c8e3fa7a82571976d2c727d5b35a116103ae72cb8fb056cfb1f5939d3b8878fbe281093ba9a2c85f97ee222f4062e41f621f5f7a07228c2b9288ce1f2f2776b75eefd4d235696f777f02fd9f18dddc6cfae0e974328a21e3bb3abdf4c38c68ab7f1570f673b479bbfdb026c40dbad461fd94060f6ca0574478353e722352b4cbc2b7f091c9d9a4debeb930098648cb2ae0b1f51c0c1cc416693f14178772796342f39b257a8c38ec92ec97b7601901d5a26e447fed8994a613d1ef39cec110df2bd078df0431cb8cc21d4e9c4ca27e7693f56041d4454d12f52f4d127c31d7b5bee37edb376dd12860ff02f1cda644b7a9eb80ae5a0713003922a16ab5d220bfe8f69b9cc64141ad54b7a8ada33a24bc616dac3b4cbc0ad61bb62c09e24888d2056f5ead79fec0a28cd6f1eff828ba2bd72015a54c0ff9303a85"}, @ETHTOOL_A_BITSET_BITS={0x184, 0x3, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ')D$#[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+[/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ',#+\xe4&@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '**)*{[[R\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '&\'#!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9e0000}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%+\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x35b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '.{]]:\\\\-${{-$%%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x448}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\[{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_VALUE={0xca, 0x4, "1880f58f345a4a12714662f2afb8ed5298fd79dbe0c8918b0d71f46a4b20de54a5f0fe60d261e267c781695a2161fb945f8552898b0783b4a28a1afaed5e95f0132ede90f0efa2b0c25b19557bbafc4e49166153e2ca66f0154679f5a011d94d9d5b880109c6603aa3f4aba401dc92fbbc0388f0e0c8a3956c7515ff1cd8bb361f1134b2eed85a896709f7cdaefaf7ba370226012a8304c7015fdf67f2c47fe5205f6698df5145ba9944ec5db31a239c8a98f894bf4113b831aecba7ff8a6554b929f0768f04"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xd8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xcf, 0x5, "357ce930ec422241cd56624a6bc9381fe371e09372db517985f4cfefb82bdb27282dedf84a70b8eda461f10742268592f81f438668ce7fcc3d3c4275ea9bc36b7af9d5ae0f622ec4bcd7d033b7e1a1cb9967755a8c8e6100adfcef641e4344c24f12ef89baec4dbd224238385439793ac3bb377c7259aa55ce7239b11108d267b6d9a434ef8ff9d9e749c063a28282e820c55e58abba884833ef1b5e61c1690a2ae89dd17b5e939080e435e9d85999720f20bd4b346b2bbe99bc2edd6300686555fa10546678133707b291"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1b8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xe2, 0x5, "f52f32d6ac2222fe3f0e5c5bfd401da967c777017a0195c8d798de39a2e9375e8961e31f08cfa0dde627bc24c26bd0ea166bf22a63dda9be51d7af4f8bb215dd505f3a471ba824d31f184328a4c5fc2397717d11ae8a711f1166ef7d41d0dcd7d11a39a798d834ea0c2f47e3497401bed1aa012049130b1062a14fe92abcf43f81c344d764ab16b6f60d617ed4cfb588d0189f4c0551a5c90cb7cc2b0676817ac9059305a37d545ceb9669ac5b73593dd720535d460efe7f01013f3bd9f87851f41a7f62fca626e937c7fa3d9e3a3c3db56759098abaffb4e32515f9db06"}, @ETHTOOL_A_BITSET_BITS={0xcc, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x419}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':\x86\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x42b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbad1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':*\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6a8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc14}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x27b8}}, 0x40) (async) r11 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1, 0x11, r11, 0x0) r12 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r12, 0x0) bind$netlink(r11, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x3004001}, 0xc) (async) sendmsg$IPSET_CMD_DESTROY(r11, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004005}, 0x40000) (async) bind$bt_hci(r11, &(0x7f0000000000)={0x1f, 0x0, 0x2}, 0x6) 14:11:57 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x6, 0xbb, 0x1f, 0x4, 0x44, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x40, 0x40, 0x4}}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, r2, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x4010) syz_open_dev$vcsu(0x0, 0x0, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r4, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:11:57 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x6, 0xbb, 0x1f, 0x4, 0x44, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x40, 0x40, 0x4}}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, r2, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x4010) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) r4 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r4, 0x20ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) [ 3261.487298][T21259] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 3261.497154][T21259] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 3261.506040][T21259] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 14:11:57 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x6, 0xbb, 0x1f, 0x4, 0x44, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x40, 0x40, 0x4}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x6, 0xbb, 0x1f, 0x4, 0x44, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x40, 0x40, 0x4}}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, r2, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x4010) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r4, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:11:57 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x9) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_INPUT(r1, &(0x7f0000000180)={0x8, {"6f827c3a4c4626dff39819fe1e580fb43353cd734a2eb7e454d02851705724710d9c4935a768f0c8ebfad6501efbe06dab785382bb623523492b3694fe1ddbe03c690322f784c4bec95737f092057fa949d4dd790fbb30e75691a95e2eee82888ebecadcd59fb5db8e34c36b2a28eda7bc775db4be5dd36f70efabc4d3ef5a9a8447c8f8018fc85b2b3c16f8777955c06d28a178dd7fde0f1944b6d7ff1363f4b3f97eda4abd31eed02de6d729822ae183f9c6af10464927ca2270b03cd99201f4d66ca52058588397385882ae361caea56864b68df8b5e306d5677294d1266b36eb3ba2eab31fda251cb3476d78da0328d3a4a3083a25e6e1f97e4bb48d4fbf9778fba87ad2e59ccc6abf09612e63dcf43e843a4b1d0d82c01541325cae4578c8a5a589140850778ac9b2dc2958c0066db43c2fb8bb086e15359ff6566edddf06dda26046bb083b9372806de636aa33763902a1ec6a141b95cb16f5cdb07a4c22cda562d3e8ee7f16d6739a596448cd3c5d454bb9b85edafd5b17c22cb08f0ac322a974eaabd0e0a5ff1cf362faf4e00092cd5a00006e98f2cd96f33701379c74ae2575360c49e0360e53db79a3935dd0f791d7c83f0890ba71b423f22dead3afbbeffea242b2de8002d36816b8c88ee1edf81967036786f977d01eb908d932f53101d107adcc171ba8e81ee36a8f400572c559102ce6ffd7dc9dfab95266209d9084806434ebdade88c8e11a1bbb5958eb8bae2b783fa3e913e17bc35dec9eb74f59e9fa7cfb455670229bb379dabfec8bb5849f776cfdd170500f98b0740fb3703b97e1d26b30d9c95ef3bcd563196bfd362c0cee6c48c28242e36711291ab5f3744fe7124a07b4afca354edd64ad9fef40ef918acc43503e28e3f17ed6566a8593edb4aa8049d4d3ab35bd0d1d3a8217a565d720cf190bdc941a103edb304904b4c4dfc5be38ef29be29f8b6aa81705127343167f3a072e06c81c9fb2b211c9ad466767e1a97c57edddf4bdfd4a74b0c6fae5b75b122ce2cc7a75870524dd6aae5f9a9305e93c20f7048980ec9475a96aadf50e6bde55cd17fe731465f433a834d0f16411ab62dbdb4c67ce433e91a644095c6ae5bb5fc4e3904bbac1cb02fc490ab0683fbd6dc419590b2df0c92071b06e7e2af5f021bbde3b66cd9e510ab282ea037bf51921984b8bd8773b49ce2581344d207b84d29581513800c94fa9166a5b0fef28a39b2828ba412caee1e583a2ebf6df5940a1df5e227e394552d53447955f8e202560c021b513bb284430ba6b54ca8bc18957e73ca02a39bec24182578ec21e05c628c8b497a50bb71516a4ca5a02ff4e05404061f8cd97302cd4e15b4fb1d1fe70a77e57ac6e612c9687f62e68d1ed45817f2dc400a8fdae998caf58159592c565722ea1f2aa14c5053dfa405e6fa18c850605903a74acfaa3ef67f0ce1eb9ac7f3f4b0adf88bc4a42f3bcb5a154e1fd2d427e2e0a6f367b7e3a50962e2d7798ddcb8d0b74fbc833bfe9d28def8af6e09f54ead604e998c1201c409ec0d94aec77baa03dcc621fc1aea8370813ecd1dbf296eb77f7110ee94522d67d97878bde196d6f23a2f2e3c65ede51c15d1293e96744c94fd4e02ff69a56db224283b693beb7a3f9095a0be5342b809c918cc64dfd4c75c12b302afc238b3473e961f13edf25edd6786d707b458214e5185da8d281fe5cf6fb18c7ad62745de9c8db379fc9503ce3b6e693e21a1bd8f054585e9623748a0c86c44bc6933ed134f9a379f1d2deb9d11fe17ad156cb06f5a597a29466134b6042f697d7d9a589368e4abb950b77a1f82fb5df5511a8f1eb43d48df3b39d4613277f3b6e6c0c90f32d19369b6985205c12c86c80e03ef14b8be58899b5b087f770fc00fd112a8832188280d01cc05bef6f85d63d46c986fe93df35294234d29eb0d0c803f546ed1809780e8d3ece6237efb5643d8aeb66efda027d472dee50ff6f5dc4bec95b276c71c54241572b5e224b02e0e9171c0739906d89b6b56a95df6fc6f86cfff6be6aa00d71ef7f858801a9a27b74ca590c68b109ed760174a73f0e7936c0145bec7ff507865c7daa17073817c7b982f62739e0a824783198ae6f51e02bf6b74e636e4fe2788406f3a63f1031fc9ff74daa25ff75750349ca1b5a0b59a04d12d92285b7b3ad68bd2ed7d3055ebdbcee7e7fe3498d98c0d55bd9aab5b6f60c29f304419d15d30e9b21e4f271889bc1e6623b09c51a5ec81a974930f51077060d8f8716e12eaaee1bd4527a9195c1163b0b6ad691ca0f05e6225086640c807a1caeca450d5d8ba4688d4fa2176d2b1af7a1fc9e7ceb653bdfbcfc6c972630e267db81950d419b4b12aae9c5eb379174989bd906e768a5e1963201631be3c4010567bad812eb59f17155a852418f88970526fec25781e974765b0d7f12a88bb097a0c693f04cd806e360984a31e24f959e762d498288f0ed9146e9fbf7680e52006e1869bda73bd33fe591b7b96dd5602247eb04eb163075c07cb4c17f4b3e101b2bb18397e0b44429379083c77bd4e5cf37ce3ad360962f570a15d2ebdd0c20213c6848be711d5221124f808159990027f2e36899fbac0673252e6bc6cd4f3f00c79724ad3f0c3196d47869226fe1cdd114852cbe83b301015734a571296d9abbb441f9215d5f1a8d982a804c435192231e8a0e199b514f31aea0671152db9717989529a7b386deb100190f34f3a7111169171d8a95eb40fb9a926ac1fc34a2af20ddf1896848c2b1e22160e8e2111aca8c665eb758049c3643e4692319838ddde24ef84a560f2832e882ed3486e606ac0e80a0966d93f5e544600797f6a108f0b5d2af0ed4ca4818ff6934fed851257e17a7b8d7375de14dc5c4f17eb1cac556d0a28b026d05affb587e5e63fab008691794728d8566c5b8c0769f0d0e3be941bba7b34269bd03d97e115dfaa3869f16586648e0e2f95efacf719170bd40505e9b61334b127fb2fa19644eadb35d467caafd86aa224255fbb22e73c2c2bd04a6f39a4ce05bfc703fd92a4a043ee65c193ba79b76ba2e24666732e037324f8b9537502723fc99fc71269121efbd24c1f952926a34067ba1660a310e1fac09b4a0988ff83c3573f7255e1533f083026fbe19f77fbb987e3ef51268856d695c3db994c163ac42fc6d2975e60bd65e247b3fda70bbe3bf91ded53f552a1365695de23d939de231a8a6a0df1a5b3f297b49a4d9ccca17b4c6607a1a527528c2e9669d38ffca942138cf46f61816710748dfec5592fa0cebd17bfb08c79106ffbb57b92fbb94bf658c5a36410ab8814c93da6f6ef53a4c33474e4ac36a08b60905970d2eb223f02cb629448c773b0f461d729839904c598b98303fbeeae399ebc368723e3e95775e666b9d8c35f5ef97a87c3c652e7dad768b537a55bc1627005f07888184561c941c4f36a5f7c439d042778e88affa12dff31d21af9257ef3eec359990774f9930381275ee63537e0169dac935c53e8bff46754e69f3966d6e2dce23f00318cd0aa2fbc71f92a4d8cf0b8f4c4392eb0f0d823e1bc9dd076eb1f54c13c4f4286f7a8e42eeee4e8a2dba867ac7094b2e33dd82a4414349dc4773cc2a6a72cb4632608788529b7b3b5739dda3e2f387a712a8cd6f132b5f4b20049526b22b5ddd501c1414548de60c27ecf6575649c051f2435b719e9658a2bf22558480421df41f167b504db40868e1173e83aeb4d7996b5e1e03ff198df5ecda1b74433ac492b95f2b9388be0d4ede49f42c8006a0bc1ade242f3c142b42f42b80fa27e42870d76a7a64c19ba3b6c9bdaf655ffeca654915f3071eb84778718a309102efbbfb1c9282fd3685ee300b3c7568d087271161db8633d4945226262b0610ce6382a59a786f765e78b3f7c543ba36f9cb9b89d2fb3f196309ffc9e7185a90b69c7ab6e7a8f9f364acebccc49373ee9ea62f282eeb1bf45d1ffc6e26277f371356f17753a7c4a7f256773a6f49d38a3451e286eea09f7c9acb20e8a4b3779748b46733fa1f15e6e509373599448fc4f132e7318ce1fae943a9b7f971814ae884f9e7b283aafa0c40b8e197cc3a6c0a6e4d0c25b8e576e57a9029212bca7ddbcc9e7f7bba942d54fa072fff0d25a9f7c9e634d18e9acb269c505f143e9991bd5c4b9b6021a7285a7036ccac8f9805e0691d1e64a42eb8b5282b9469bfdf44ac941222ca91ff3f478385e356ce8f0cc8da933c0576a4d2b2ac1179782bcea4e7970f2c9e7fd84723c01a9a41cdcea74275fcd1301c15dbe9cc1a9edb08145b42c87e21a81dff3a75cf5ace39aa298fe91966968d86eab61b92f704cafbb0c91d7f05f5c868670d81d2b0736a6f9002487ce8858d769a2d1311e5ece4a88d07f77a477abf9191ac669c2d7ff9b7a032b3eadbaf66318c5d21b0b20095e78e809399f55b46ac1b34d9d79233e5b4080c01e1d0181b80064f3b4f8a85290b9854c67d29933e86306dd980f5cb806b097e60cf444592148803308059425ff3924c6c2327c384eda2bf2fa4826c770134e0e7f71c9d9db38d18c6e0c8d97bcee52c862277113d7b1f7ef66930948570fe62e3617bab8e18a0032e51018bd020da0340039f35f55492386b60b96057c22ffb34fe47cb477c93f77337eb5d8e6d4ec8cf26ae6db89a967a9d757fc16888b789bb3192e36abe10f6492e16c33fc3daba92c8d551a32019d7fca181371007711999a4962757a3fe9ad22624e6a99575a0c0bbff8e2005e6108b8bc5edb23852c401b305c15daad0bb0f609bf757121230f9505592871f3b7fb1deac7ed5296b7d2f49c92d8a31c81f81f9d3f05a0d333f2f58e3577bc354be4181c6c4e472df1299286fb071ef25acf8a4b1ee7043d2a0b71536783fa12a6ee839b78edb9483574daf1a594076d89c02d96c7bddf84c2d75e1dedf1148ad89597fc250a5a63aef8ad33e9cda12f204f9969261b04ffeca2f81d0f7662235f50d35810088f5cad1dd264860c4802fb8c4cbbfcdaee163dd477099a7eceea4ee77b9f487ed16633f21ec450311d7534ba2c919d98137cd542ddd645d7569fd5889df116d81cec0a3952604eac847f2cc741e2b0952eebc68b0a8c134a72ffb125aecb076b4683cc826cd9d2faa35d1cfdca62a90f5d683a58c7fd4bdef4ce5467a5a3ec59180a1fb5a6ff6e32961c54712b8e3777a85e278fc353f8185e14f49e2427d4e5fea1f8bbc07ee60ce05e067c0277ebb7d717ac69cd0a32f52138b8c491614ab961076968b92c4acb9cbfe5c2faa4a4d766a2516e142fa61056baba273950d423fd6045e0f45f9fa6f2787d8c8e404fb5c4e0b016cb4767d130a70db95ef5222dcc9ce5f8963c7630bee2566856677d1041b4236f4f4e9dd4e673f5f6d472836cee3d25bc4641e375b69f76bdf30937056c232f951990d828e215649b4e35d9f5a7faab0c59978e266256d2bb99b5ae19e5bd210a7246bfa4f5a805e3d3d7e72db82d9e166f87408b14b276e4a364a3ed3f3210bfec52b45ca30b07f355c678329ad504ee71f633f6bf0433e74912d6e997c4b34c42fb19a033349c1f8a3eff37efb9f8c2d926c8735847c1160172916e3d59ad037ab961e66a4167bf3861520e3d0357c89a2a1f0ca22ce8afcd50d7bcdb8417ff6e1255bbbe54bb02acc191f76d1e74450aa608492cd7b3dac4785675f731523b6e2ad65bdc3d5c96a9fb8f96e3b60a429cc64f85c38b7697047cdd266bf6a7574cfec0714365d1da03cf5537587629fd60f5e3a4426f33228c9c3063f1b01583da33", 0x1000}}, 0x1006) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x2d4) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:11:57 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x9) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_INPUT(r1, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x2d4) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) [ 3261.545765][T21286] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 3261.553659][T21286] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 14:11:58 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x80000000001, 0x22080) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008050) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x24, 0x1000, 0x81, 0x97300f9, 0x1001, 0x1, 0x181, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000740)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="118100200000000000", @ANYRES32, @ANYBLOB], 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000b40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000b80)={0x470, r1, 0x8, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x108, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xf7, 0x4, "983d2604cfbb7ff6cd9094de57dbb638b73e0303da2dad6bd982f48202912b2d24b3e72ac9f6f825150570e92c711a2deb41066ae57e71b06cd867ceea6da61aa1092678ea720187c1a7b1bee3c2877effb83911f0e200fe398e7f9fe1169af4cd14e9eea8023e2e7b65d28c1bed8622005ff8b685fbcd3d6ec4d3df09786b8fc732690866a088731cb82f97dd3a165af3b5c56ef1789193255dd27c322de4c4df720fe2521132900e18e3f52126a11c457546885fa375d82c5b2d758a5da56be31a2948ec1c516c2d1e1eac8e35922dd105452e3b9958fb297be10a133c646232b459088099d202162f52b0594f43a09f898e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x8}, @ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_EEE_MODES_OURS={0x2fc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x17}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'+[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x8e, 0x5, "5eab054c8af1eeb5ce5274b7f9e9a210aad284720c7734327340c4a02ce3b382b0217f37c20b81ac8530cd34087e3ac77848847244cf385ac5dd446442bc0e775327fdbb05a7cbe5aed4db158acf6f913e8ff847401ea530a0ab80d96820a4d5743e954ee0d2e3a03e0f763f2fca90fce113ec6be82c4256974b408b9846aa41bfd3e440abdb0deea00d"}, @ETHTOOL_A_BITSET_BITS={0xb0, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffc01}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'gtp\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xc6, 0x4, "17e9145a020d2c862387af613e2145873ef4c3dc13998d1b65a5922f2580514c393ec276cba3c7b4cd5cf7428dc7e045b6d638bc3630f1e6f617d053227555e82f0ca38dfd9e25524b4c70f55002e39ab65f88c137e6c40726e6adebd044a498d12a9b2cb77da58dd6c727a05cbcc1466b29f798e58a1de11d1aeac00dd6661b807d684405e63644f6c42d73f45013b2469a4785caa241b289d86bc4a4fd7318efe8cb882dc4cfdb2ccaa2f951c5c8be118d8a65e198db6ed7ebf680825bd5dbe654"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x7d, 0x4, "88f9f7e6ca81b52cc005e088a9d652e6b1902431f3b98d19360e1213c3b0f552d8c2ba02fd93473bafdb0d4c70ae02f81f4329be3954ef98a0ce9f0d999b52ce9b00e155f4050e4235edfdcf15ac926643d932c0a4816f8f19fbde59d93c85877ebdb2ea4e46992fdc7362fb09dbcbeebc07d62ad3854c9d06"}]}, @ETHTOOL_A_EEE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xfffffff9}]}, 0x470}, 0x1, 0x0, 0x0, 0x20044094}, 0x48840) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r6 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r6, 0x0) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000780)={'wpan1\x00'}) r9 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/user\x00') ioctl$NS_GET_USERNS(r9, 0xb701, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="04042dbd7000ffdb9f25ecffffff08000a00421319889e42e5db", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r6, 0x0) r10 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r10, 0xffffffffffffffff}, 0x4) r12 = syz_open_dev$vcsu(&(0x7f0000000700), 0x0, 0x0) write$bt_hci(r12, 0x0, 0x25) getsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000380)={@local, @empty, 0x0}, &(0x7f00000003c0)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="8510000005000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000a50000261acae9dc985a2f0d95e00018170000", @ANYRES32=r12, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000240)='syzkaller\x00', 0xffffff7e, 0xeb, &(0x7f0000000280)=""/235, 0x40f00, 0x40, '\x00', r13, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x3, 0x7, 0x81}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000440), &(0x7f0000000480)=[{0x3, 0x4, 0xe, 0xb}, {0x1, 0x4, 0xb, 0x7}], 0x10, 0x1000}, 0x90) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0xcb1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r10, 0x0) 14:11:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x1ffff000}, 0x300}, 0x0) 14:11:58 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x9) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_INPUT(r1, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x2d4) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x9) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async) write$UHID_INPUT(r1, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x2d4) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) 14:11:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008050) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x24, 0x1000, 0x81, 0x97300f9, 0x1001, 0x1, 0x181, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000740)={'batadv_slave_0\x00', 0x0}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="118100200000000000", @ANYRES32, @ANYBLOB], 0x20}}, 0x0) (async) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000b40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000b80)={0x470, r1, 0x8, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x108, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xf7, 0x4, "983d2604cfbb7ff6cd9094de57dbb638b73e0303da2dad6bd982f48202912b2d24b3e72ac9f6f825150570e92c711a2deb41066ae57e71b06cd867ceea6da61aa1092678ea720187c1a7b1bee3c2877effb83911f0e200fe398e7f9fe1169af4cd14e9eea8023e2e7b65d28c1bed8622005ff8b685fbcd3d6ec4d3df09786b8fc732690866a088731cb82f97dd3a165af3b5c56ef1789193255dd27c322de4c4df720fe2521132900e18e3f52126a11c457546885fa375d82c5b2d758a5da56be31a2948ec1c516c2d1e1eac8e35922dd105452e3b9958fb297be10a133c646232b459088099d202162f52b0594f43a09f898e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x8}, @ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_EEE_MODES_OURS={0x2fc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x17}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'+[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x8e, 0x5, "5eab054c8af1eeb5ce5274b7f9e9a210aad284720c7734327340c4a02ce3b382b0217f37c20b81ac8530cd34087e3ac77848847244cf385ac5dd446442bc0e775327fdbb05a7cbe5aed4db158acf6f913e8ff847401ea530a0ab80d96820a4d5743e954ee0d2e3a03e0f763f2fca90fce113ec6be82c4256974b408b9846aa41bfd3e440abdb0deea00d"}, @ETHTOOL_A_BITSET_BITS={0xb0, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffc01}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'gtp\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xc6, 0x4, "17e9145a020d2c862387af613e2145873ef4c3dc13998d1b65a5922f2580514c393ec276cba3c7b4cd5cf7428dc7e045b6d638bc3630f1e6f617d053227555e82f0ca38dfd9e25524b4c70f55002e39ab65f88c137e6c40726e6adebd044a498d12a9b2cb77da58dd6c727a05cbcc1466b29f798e58a1de11d1aeac00dd6661b807d684405e63644f6c42d73f45013b2469a4785caa241b289d86bc4a4fd7318efe8cb882dc4cfdb2ccaa2f951c5c8be118d8a65e198db6ed7ebf680825bd5dbe654"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x7d, 0x4, "88f9f7e6ca81b52cc005e088a9d652e6b1902431f3b98d19360e1213c3b0f552d8c2ba02fd93473bafdb0d4c70ae02f81f4329be3954ef98a0ce9f0d999b52ce9b00e155f4050e4235edfdcf15ac926643d932c0a4816f8f19fbde59d93c85877ebdb2ea4e46992fdc7362fb09dbcbeebc07d62ad3854c9d06"}]}, @ETHTOOL_A_EEE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xfffffff9}]}, 0x470}, 0x1, 0x0, 0x0, 0x20044094}, 0x48840) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) r6 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r6, 0x0) (async, rerun: 32) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r6) (rerun: 32) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000780)={'wpan1\x00'}) r9 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/user\x00') ioctl$NS_GET_USERNS(r9, 0xb701, 0x0) (async) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="04042dbd7000ffdb9f25ecffffff08000a00421319889e42e5db", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r6, 0x0) r10 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r10, 0xffffffffffffffff}, 0x4) (async) r12 = syz_open_dev$vcsu(&(0x7f0000000700), 0x0, 0x0) write$bt_hci(r12, 0x0, 0x25) (async, rerun: 64) getsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000380)={@local, @empty, 0x0}, &(0x7f00000003c0)=0xc) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="8510000005000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000a50000261acae9dc985a2f0d95e00018170000", @ANYRES32=r12, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000240)='syzkaller\x00', 0xffffff7e, 0xeb, &(0x7f0000000280)=""/235, 0x40f00, 0x40, '\x00', r13, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x3, 0x7, 0x81}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000440), &(0x7f0000000480)=[{0x3, 0x4, 0xe, 0xb}, {0x1, 0x4, 0xb, 0x7}], 0x10, 0x1000}, 0x90) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0xcb1) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r10, 0x0) 14:11:58 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x2, 0x0) r1 = getpid() openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000001c0)={r1, 0x1, 0x2}) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r3 = syz_open_dev$vcsu(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x5a}, @val={0x8}, @val={0xc, 0x99, {0x400, 0x28}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x240000c4}, 0x1001) r4 = syz_open_dev$vcsu(&(0x7f0000000200), 0x2, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r4, 0x20ff6000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x34, r6, 0x1, 0x0, 0x0, {0x14}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x34}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x3c, r11, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x3f, 0x5, 0x4, @private0, @empty, 0x7800, 0x80, 0x0, 0x3}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa4, r6, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10000}, 0x0) r14 = syz_open_dev$evdev(&(0x7f0000000000), 0x100000000, 0x0) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000100)=""/10) ioctl$EVIOCGSND(r14, 0x8040451a, &(0x7f0000000040)=""/167) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) 14:11:58 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x80000000001, 0x22080) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x80000000001, 0x22080) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) 14:11:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="1d50ca0d18ce2bdddc907220b427b9dc0cacc2d505a94718cef80fcb8dfa12ba68093e4b55f9c4db6a9cf679e664fdfd5e32943fc1221bd41cbabf546da832a41e01e01edf33d525e3355ad0baf39a318ce249ae6ea25ac6540bec4ceb5f90355ce1d87ccf4df8b4677a97736fe25d92d5390e78cd62db19ebb50a2036c5a087", @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000"], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="1d50ca0d18ce2bdddc907220b427b9dc0cacc2d505a94718cef80fcb8dfa12ba68093e4b55f9c4db6a9cf679e664fdfd5e32943fc1221bd41cbabf546da832a41e01e01edf33d525e3355ad0baf39a318ce249ae6ea25ac6540bec4ceb5f90355ce1d87ccf4df8b4677a97736fe25d92d5390e78cd62db19ebb50a2036c5a087", @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000"], 0x14}}, 0x0) (async) 14:11:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008050) (async, rerun: 64) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x24, 0x1000, 0x81, 0x97300f9, 0x1001, 0x1, 0x181, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000740)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="118100200000000000", @ANYRES32, @ANYBLOB], 0x20}}, 0x0) (async) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000b40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000b80)={0x470, r1, 0x8, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x108, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xf7, 0x4, "983d2604cfbb7ff6cd9094de57dbb638b73e0303da2dad6bd982f48202912b2d24b3e72ac9f6f825150570e92c711a2deb41066ae57e71b06cd867ceea6da61aa1092678ea720187c1a7b1bee3c2877effb83911f0e200fe398e7f9fe1169af4cd14e9eea8023e2e7b65d28c1bed8622005ff8b685fbcd3d6ec4d3df09786b8fc732690866a088731cb82f97dd3a165af3b5c56ef1789193255dd27c322de4c4df720fe2521132900e18e3f52126a11c457546885fa375d82c5b2d758a5da56be31a2948ec1c516c2d1e1eac8e35922dd105452e3b9958fb297be10a133c646232b459088099d202162f52b0594f43a09f898e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x8}, @ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_EEE_MODES_OURS={0x2fc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x17}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'+[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x8e, 0x5, "5eab054c8af1eeb5ce5274b7f9e9a210aad284720c7734327340c4a02ce3b382b0217f37c20b81ac8530cd34087e3ac77848847244cf385ac5dd446442bc0e775327fdbb05a7cbe5aed4db158acf6f913e8ff847401ea530a0ab80d96820a4d5743e954ee0d2e3a03e0f763f2fca90fce113ec6be82c4256974b408b9846aa41bfd3e440abdb0deea00d"}, @ETHTOOL_A_BITSET_BITS={0xb0, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffc01}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'gtp\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xc6, 0x4, "17e9145a020d2c862387af613e2145873ef4c3dc13998d1b65a5922f2580514c393ec276cba3c7b4cd5cf7428dc7e045b6d638bc3630f1e6f617d053227555e82f0ca38dfd9e25524b4c70f55002e39ab65f88c137e6c40726e6adebd044a498d12a9b2cb77da58dd6c727a05cbcc1466b29f798e58a1de11d1aeac00dd6661b807d684405e63644f6c42d73f45013b2469a4785caa241b289d86bc4a4fd7318efe8cb882dc4cfdb2ccaa2f951c5c8be118d8a65e198db6ed7ebf680825bd5dbe654"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x7d, 0x4, "88f9f7e6ca81b52cc005e088a9d652e6b1902431f3b98d19360e1213c3b0f552d8c2ba02fd93473bafdb0d4c70ae02f81f4329be3954ef98a0ce9f0d999b52ce9b00e155f4050e4235edfdcf15ac926643d932c0a4816f8f19fbde59d93c85877ebdb2ea4e46992fdc7362fb09dbcbeebc07d62ad3854c9d06"}]}, @ETHTOOL_A_EEE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xfffffff9}]}, 0x470}, 0x1, 0x0, 0x0, 0x20044094}, 0x48840) (async, rerun: 64) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async, rerun: 64) r6 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r6, 0x0) (async, rerun: 32) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r6) (async, rerun: 32) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000780)={'wpan1\x00'}) (async, rerun: 64) r9 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/user\x00') (rerun: 64) ioctl$NS_GET_USERNS(r9, 0xb701, 0x0) (async, rerun: 64) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="04042dbd7000ffdb9f25ecffffff08000a00421319889e42e5db", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async, rerun: 64) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r6, 0x0) (async) r10 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r10, 0xffffffffffffffff}, 0x4) r12 = syz_open_dev$vcsu(&(0x7f0000000700), 0x0, 0x0) write$bt_hci(r12, 0x0, 0x25) (async) getsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000380)={@local, @empty, 0x0}, &(0x7f00000003c0)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="8510000005000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000a50000261acae9dc985a2f0d95e00018170000", @ANYRES32=r12, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000240)='syzkaller\x00', 0xffffff7e, 0xeb, &(0x7f0000000280)=""/235, 0x40f00, 0x40, '\x00', r13, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x3, 0x7, 0x81}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000440), &(0x7f0000000480)=[{0x3, 0x4, 0xe, 0xb}, {0x1, 0x4, 0xb, 0x7}], 0x10, 0x1000}, 0x90) (async, rerun: 64) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0xcb1) (async, rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r10, 0x0) 14:11:58 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x80000000001, 0x22080) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:58 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x2, 0x0) r1 = getpid() openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs2/binder0\x00', 0x2, 0x0) (async) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000001c0)={r1, 0x1, 0x2}) (async, rerun: 64) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (rerun: 64) r3 = syz_open_dev$vcsu(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x5a}, @val={0x8}, @val={0xc, 0x99, {0x400, 0x28}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x240000c4}, 0x1001) r4 = syz_open_dev$vcsu(&(0x7f0000000200), 0x2, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r4, 0x20ff6000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x34, r6, 0x1, 0x0, 0x0, {0x14}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x34}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x3c, r11, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x3f, 0x5, 0x4, @private0, @empty, 0x7800, 0x80, 0x0, 0x3}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa4, r6, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10000}, 0x0) (async, rerun: 64) r14 = syz_open_dev$evdev(&(0x7f0000000000), 0x100000000, 0x0) (rerun: 64) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000100)=""/10) (async, rerun: 32) ioctl$EVIOCGSND(r14, 0x8040451a, &(0x7f0000000040)=""/167) (async, rerun: 32) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) 14:11:58 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000013c0)={0x98, 0x0, &(0x7f0000001280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/4096, 0x1000, 0x1, 0x17}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/176, 0xb0, 0x0, 0x3f}, @flat=@handle={0x73682a85, 0x1100, 0x3}}, &(0x7f0000001180)={0x0, 0x28, 0x50}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000011c0)={@fda={0x66646185, 0x4, 0x0, 0x38}, @fd, @fda={0x66646185, 0x5, 0x0, 0x34}}, &(0x7f0000001240)={0x0, 0x20, 0x38}}, 0x1000}], 0x73, 0x0, &(0x7f0000001340)="41f1ab57ebe72706a3a9d14f7b47f9381f8fa6b20a80937e3ea55d364e211b4e39678612fd00d5dfee6ac8adea83e01db9985d94a0b9c276704e1cc8b4443fa9b56570238115fa1afa0ee7082fe67b2a851980f4fce4b61e77635af42886dea2b19bccb1cb48200225dbad25dd6f1c48520d9e"}) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) r1 = getpid() ioprio_set$pid(0x1, r1, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000001400)='ns/user\x00') 14:11:58 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x44400) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x6692) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x1}, 0x10, 0x0) 14:11:58 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, 0xffffffffffffffff, 0x0) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000013c0)={0x98, 0x0, &(0x7f0000001280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/4096, 0x1000, 0x1, 0x17}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/176, 0xb0, 0x0, 0x3f}, @flat=@handle={0x73682a85, 0x1100, 0x3}}, &(0x7f0000001180)={0x0, 0x28, 0x50}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000011c0)={@fda={0x66646185, 0x4, 0x0, 0x38}, @fd, @fda={0x66646185, 0x5, 0x0, 0x34}}, &(0x7f0000001240)={0x0, 0x20, 0x38}}, 0x1000}], 0x73, 0x0, &(0x7f0000001340)="41f1ab57ebe72706a3a9d14f7b47f9381f8fa6b20a80937e3ea55d364e211b4e39678612fd00d5dfee6ac8adea83e01db9985d94a0b9c276704e1cc8b4443fa9b56570238115fa1afa0ee7082fe67b2a851980f4fce4b61e77635af42886dea2b19bccb1cb48200225dbad25dd6f1c48520d9e"}) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) (async, rerun: 64) r1 = getpid() (rerun: 64) ioprio_set$pid(0x1, r1, 0x0) (async, rerun: 32) syz_open_procfs$namespace(r1, &(0x7f0000001400)='ns/user\x00') (rerun: 32) 14:11:58 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x44400) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x6692) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x1}, 0x10, 0x0) 14:11:58 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, 0xffffffffffffffff, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000013c0)={0x98, 0x0, &(0x7f0000001280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/4096, 0x1000, 0x1, 0x17}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/176, 0xb0, 0x0, 0x3f}, @flat=@handle={0x73682a85, 0x1100, 0x3}}, &(0x7f0000001180)={0x0, 0x28, 0x50}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000011c0)={@fda={0x66646185, 0x4, 0x0, 0x38}, @fd, @fda={0x66646185, 0x5, 0x0, 0x34}}, &(0x7f0000001240)={0x0, 0x20, 0x38}}, 0x1000}], 0x73, 0x0, &(0x7f0000001340)="41f1ab57ebe72706a3a9d14f7b47f9381f8fa6b20a80937e3ea55d364e211b4e39678612fd00d5dfee6ac8adea83e01db9985d94a0b9c276704e1cc8b4443fa9b56570238115fa1afa0ee7082fe67b2a851980f4fce4b61e77635af42886dea2b19bccb1cb48200225dbad25dd6f1c48520d9e"}) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) r1 = getpid() ioprio_set$pid(0x1, r1, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000001400)='ns/user\x00') 14:11:58 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x2, 0x0) (async) r1 = getpid() openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs2/binder0\x00', 0x2, 0x0) (async, rerun: 64) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000001c0)={r1, 0x1, 0x2}) (async, rerun: 64) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r3 = syz_open_dev$vcsu(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x5a}, @val={0x8}, @val={0xc, 0x99, {0x400, 0x28}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x240000c4}, 0x1001) r4 = syz_open_dev$vcsu(&(0x7f0000000200), 0x2, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r4, 0x20ff6000) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x34, r6, 0x1, 0x0, 0x0, {0x14}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x34}}, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) (rerun: 64) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x3c, r11, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x3c}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x3f, 0x5, 0x4, @private0, @empty, 0x7800, 0x80, 0x0, 0x3}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa4, r6, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10000}, 0x0) (async, rerun: 64) r14 = syz_open_dev$evdev(&(0x7f0000000000), 0x100000000, 0x0) (rerun: 64) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000100)=""/10) (async) ioctl$EVIOCGSND(r14, 0x8040451a, &(0x7f0000000040)=""/167) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) 14:11:58 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x44400) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x6692) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x1}, 0x10, 0x0) 14:11:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB='\x00'/14], 0x14}}, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)=0x1, 0x4) 14:11:58 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x94) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x7) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x703, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4094}, 0x20040000) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:58 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000000)=""/20) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:58 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_write_def_data_len={{0x2024, 0x4}, {0x8f5}}}, 0x8) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:11:58 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000000)=""/20) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:58 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_write_def_data_len={{0x2024, 0x4}, {0x8f5}}}, 0x8) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_write_def_data_len={{0x2024, 0x4}, {0x8f5}}}, 0x8) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) 14:11:58 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x94) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x7) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x703, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4094}, 0x20040000) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x94) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder0\x00', 0x2, 0x0) (async) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x7) (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x703, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4094}, 0x20040000) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) 14:11:58 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000000)=""/20) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xfffffffffffffffb) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0xfffffffffffffff8, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000340)={0x0, r2}, 0x10) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000380)=0xffff) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000080)=0x20) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000100)=[0xc18, 0x1000]) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x34, 0x0, &(0x7f00000001c0)=[@request_death={0x400c630e, 0x3}, @exit_looper, @release, @increfs={0x40046304, 0x2}, @clear_death={0x400c630f, 0x3}], 0xf2, 0x0, &(0x7f0000000200)="145a8e53a56cb23615df417595e82aa8b576664e348d16277c43a2b86b10a259705581fdc54de137f2d2bb60bda35d72a977d0f715e9dd52c8bd59475af7677a1d8ffb6aa7405d57af5f2330f5f1922d9bdd5a3b1114066422bd68c7fd4b74d2005304f8bdcb7f7f6d5d608d382370a3fc5efabec5d2c5ee4f10b0e015985403020d4fc3ee21daedffba59b5607afdfee95c865b8f80d3a5f5493c754ec28888d909fa6083d650e54b049c4747a25046380960e405859cf18609281aa5a0739a68cb6be566f6bc8d395ba14261b5b483f55248a32cedab40dae2b6a084b51e4307b83045d032a06126fe32b90f647c330073"}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) 14:11:58 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async, rerun: 64) mmap$binder(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x94) (async, rerun: 64) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x7) (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x703, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4094}, 0x20040000) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:58 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_write_def_data_len={{0x2024, 0x4}, {0x8f5}}}, 0x8) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_write_def_data_len={{0x2024, 0x4}, {0x8f5}}}, 0x8) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:11:58 executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r3, 0x1, 0x0, 0x0, {0x7}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%ps \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x2d, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffc00}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x6, 0xd, 0x8, 0x7, 0x4}, @alu={0x4, 0x0, 0x1, 0x6, 0x838d95f1936576bb, 0x40, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xc}, @generic={0x40, 0x4, 0x7, 0x4, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @printk={@lu}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x3f, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)=[r1, r6, r0, r0, r0, r0, r0], &(0x7f0000000380)=[{0x2, 0x3, 0xf, 0x5}, {0x3, 0x4, 0xd, 0xc}, {0x4, 0x2, 0xc}, {0x3, 0x2, 0x2, 0x4}], 0x10, 0x3}, 0x90) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) r7 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$HCIINQUIRY(r7, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x1, "6bb42d", 0x4, 0x20}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r7, 0x0) 14:11:58 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) r3 = syz_io_uring_setup(0x616b, &(0x7f0000000000)={0x0, 0xbf39, 0x80, 0x3, 0x17d, 0x0, r1}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x2f25, &(0x7f0000000180)={0x0, 0xa4bb, 0x4, 0x3, 0x3e5, 0x0, r3}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:11:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xfffffffffffffffb) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0xfffffffffffffff8, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000340)={0x0, r2}, 0x10) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000380)=0xffff) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000080)=0x20) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000100)=[0xc18, 0x1000]) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x34, 0x0, &(0x7f00000001c0)=[@request_death={0x400c630e, 0x3}, @exit_looper, @release, @increfs={0x40046304, 0x2}, @clear_death={0x400c630f, 0x3}], 0xf2, 0x0, &(0x7f0000000200)="145a8e53a56cb23615df417595e82aa8b576664e348d16277c43a2b86b10a259705581fdc54de137f2d2bb60bda35d72a977d0f715e9dd52c8bd59475af7677a1d8ffb6aa7405d57af5f2330f5f1922d9bdd5a3b1114066422bd68c7fd4b74d2005304f8bdcb7f7f6d5d608d382370a3fc5efabec5d2c5ee4f10b0e015985403020d4fc3ee21daedffba59b5607afdfee95c865b8f80d3a5f5493c754ec28888d909fa6083d650e54b049c4747a25046380960e405859cf18609281aa5a0739a68cb6be566f6bc8d395ba14261b5b483f55248a32cedab40dae2b6a084b51e4307b83045d032a06126fe32b90f647c330073"}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xfffffffffffffffb) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0xfffffffffffffff8, 0x2) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000340)={0x0, r2}, 0x10) (async) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000380)=0xffff) (async) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000080)=0x20) (async) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000100)=[0xc18, 0x1000]) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x34, 0x0, &(0x7f00000001c0)=[@request_death={0x400c630e, 0x3}, @exit_looper, @release, @increfs={0x40046304, 0x2}, @clear_death={0x400c630f, 0x3}], 0xf2, 0x0, &(0x7f0000000200)="145a8e53a56cb23615df417595e82aa8b576664e348d16277c43a2b86b10a259705581fdc54de137f2d2bb60bda35d72a977d0f715e9dd52c8bd59475af7677a1d8ffb6aa7405d57af5f2330f5f1922d9bdd5a3b1114066422bd68c7fd4b74d2005304f8bdcb7f7f6d5d608d382370a3fc5efabec5d2c5ee4f10b0e015985403020d4fc3ee21daedffba59b5607afdfee95c865b8f80d3a5f5493c754ec28888d909fa6083d650e54b049c4747a25046380960e405859cf18609281aa5a0739a68cb6be566f6bc8d395ba14261b5b483f55248a32cedab40dae2b6a084b51e4307b83045d032a06126fe32b90f647c330073"}) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) (async) 14:11:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xfffffffffffffffb) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0xfffffffffffffff8, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000340)={0x0, r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000340)={0x0, r2}, 0x10) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000380)=0xffff) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000080)=0x20) (async) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000080)=0x20) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000100)=[0xc18, 0x1000]) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom0\x00', 0x0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x34, 0x0, &(0x7f00000001c0)=[@request_death={0x400c630e, 0x3}, @exit_looper, @release, @increfs={0x40046304, 0x2}, @clear_death={0x400c630f, 0x3}], 0xf2, 0x0, &(0x7f0000000200)="145a8e53a56cb23615df417595e82aa8b576664e348d16277c43a2b86b10a259705581fdc54de137f2d2bb60bda35d72a977d0f715e9dd52c8bd59475af7677a1d8ffb6aa7405d57af5f2330f5f1922d9bdd5a3b1114066422bd68c7fd4b74d2005304f8bdcb7f7f6d5d608d382370a3fc5efabec5d2c5ee4f10b0e015985403020d4fc3ee21daedffba59b5607afdfee95c865b8f80d3a5f5493c754ec28888d909fa6083d650e54b049c4747a25046380960e405859cf18609281aa5a0739a68cb6be566f6bc8d395ba14261b5b483f55248a32cedab40dae2b6a084b51e4307b83045d032a06126fe32b90f647c330073"}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) 14:11:58 executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r3, 0x1, 0x0, 0x0, {0x7}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%ps \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x2d, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffc00}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x6, 0xd, 0x8, 0x7, 0x4}, @alu={0x4, 0x0, 0x1, 0x6, 0x838d95f1936576bb, 0x40, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xc}, @generic={0x40, 0x4, 0x7, 0x4, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @printk={@lu}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x3f, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)=[r1, r6, r0, r0, r0, r0, r0], &(0x7f0000000380)=[{0x2, 0x3, 0xf, 0x5}, {0x3, 0x4, 0xd, 0xc}, {0x4, 0x2, 0xc}, {0x3, 0x2, 0x2, 0x4}], 0x10, 0x3}, 0x90) (async, rerun: 64) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) (async, rerun: 64) r7 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$HCIINQUIRY(r7, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x1, "6bb42d", 0x4, 0x20}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r7, 0x0) 14:11:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x40000000}, 0x300}, 0x0) 14:11:59 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x1) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r1, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f0000000000)) 14:11:59 executing program 1: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) r3 = syz_io_uring_setup(0x616b, &(0x7f0000000000)={0x0, 0xbf39, 0x80, 0x3, 0x17d, 0x0, r1}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x2f25, &(0x7f0000000180)={0x0, 0xa4bb, 0x4, 0x3, 0x3e5, 0x0, r3}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:11:59 executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r3, 0x1, 0x0, 0x0, {0x7}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%ps \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x2d, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffc00}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x6, 0xd, 0x8, 0x7, 0x4}, @alu={0x4, 0x0, 0x1, 0x6, 0x838d95f1936576bb, 0x40, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xc}, @generic={0x40, 0x4, 0x7, 0x4, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @printk={@lu}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x3f, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)=[r1, r6, r0, r0, r0, r0, r0], &(0x7f0000000380)=[{0x2, 0x3, 0xf, 0x5}, {0x3, 0x4, 0xd, 0xc}, {0x4, 0x2, 0xc}, {0x3, 0x2, 0x2, 0x4}], 0x10, 0x3}, 0x90) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) r7 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$HCIINQUIRY(r7, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x1, "6bb42d", 0x4, 0x20}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r7, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r3, 0x1, 0x0, 0x0, {0x7}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)='%ps \x00'}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x2d, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffc00}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x6, 0xd, 0x8, 0x7, 0x4}, @alu={0x4, 0x0, 0x1, 0x6, 0x838d95f1936576bb, 0x40, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xc}, @generic={0x40, 0x4, 0x7, 0x4, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @printk={@lu}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x3f, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)=[r1, r6, r0, r0, r0, r0, r0], &(0x7f0000000380)=[{0x2, 0x3, 0xf, 0x5}, {0x3, 0x4, 0xd, 0xc}, {0x4, 0x2, 0xc}, {0x3, 0x2, 0x2, 0x4}], 0x10, 0x3}, 0x90) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) ioctl$HCIINQUIRY(r7, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x1, "6bb42d", 0x4, 0x20}) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r7, 0x0) (async) 14:11:59 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x3}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:59 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x1) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r1, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r1, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f0000000000)) 14:11:59 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) r3 = syz_io_uring_setup(0x616b, &(0x7f0000000000)={0x0, 0xbf39, 0x80, 0x3, 0x17d, 0x0, r1}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x2f25, &(0x7f0000000180)={0x0, 0xa4bb, 0x4, 0x3, 0x3e5, 0x0, r3}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:11:59 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x3}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x3}) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) 14:11:59 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x1) (async) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r1, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f0000000000)) 14:11:59 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000000)="3673056bdc92c3da2095b0b31b156afc5db072dc77ba884d2cdceeeb602f8c1f4df46e16cf2bcb43abd80833d3f09afde241101ec9846930725e2ec7715da6a3c99929ff853a344689091b4944523919395692023d1db484751651dc5255bd614b56957e87bb784ad83a22e530820251a8e06c791e9acb972c54c05567a056e0723bc4fb694bb0e00c980e4b3f9078e48a86a74797e2b106a8f1337951442d24b17ba7dd83ff04ee5f28675fc7bdbd5004cb7834039a6c36765de6b8f5a7396a7a560fff9b6e71da79c2141d42fa17972f72c37cf9ed878a46dd3135eafb38bc067f5c3c0bbc5069c14fe7af3b37") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f0000000280)="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") r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) 14:11:59 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) (async, rerun: 64) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async, rerun: 64) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x3}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:59 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/uts\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000700)=""/35) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000d8040000000000003f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018260000", @ANYRES32=r1, @ANYBLOB="0000000008000000185600000b0000000000000000000000641b50001000000018110000", @ANYRES32=0x1, @ANYBLOB="00000000d80d000000000000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000851000000200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000085200000020000008520000004000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x5ee7, 0xf9, &(0x7f0000000480)=""/249, 0x40f00, 0x5, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f0000000580)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000006c0)={0x0, r4}, 0x10) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1, 0x11, r3, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000040)={0x0, 0x5b, 0x9, &(0x7f0000000000)=0xffffffffffffffff}) r5 = syz_open_dev$evdev(&(0x7f0000000240), 0x5, 0x0) ioctl$EVIOCGMTSLOTS(r5, 0x8040450a, &(0x7f0000000280)=""/54) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000180)=""/71) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000000c0)=""/96) 14:11:59 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000000)="3673056bdc92c3da2095b0b31b156afc5db072dc77ba884d2cdceeeb602f8c1f4df46e16cf2bcb43abd80833d3f09afde241101ec9846930725e2ec7715da6a3c99929ff853a344689091b4944523919395692023d1db484751651dc5255bd614b56957e87bb784ad83a22e530820251a8e06c791e9acb972c54c05567a056e0723bc4fb694bb0e00c980e4b3f9078e48a86a74797e2b106a8f1337951442d24b17ba7dd83ff04ee5f28675fc7bdbd5004cb7834039a6c36765de6b8f5a7396a7a560fff9b6e71da79c2141d42fa17972f72c37cf9ed878a46dd3135eafb38bc067f5c3c0bbc5069c14fe7af3b37") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f0000000280)="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") (async) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) 14:11:59 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/uts\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000700)=""/35) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000d8040000000000003f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018260000", @ANYRES32=r1, @ANYBLOB="0000000008000000185600000b0000000000000000000000641b50001000000018110000", @ANYRES32=0x1, @ANYBLOB="00000000d80d000000000000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000851000000200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000085200000020000008520000004000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x5ee7, 0xf9, &(0x7f0000000480)=""/249, 0x40f00, 0x5, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f0000000580)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000006c0)={0x0, r4}, 0x10) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1, 0x11, r3, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000040)={0x0, 0x5b, 0x9, &(0x7f0000000000)=0xffffffffffffffff}) r5 = syz_open_dev$evdev(&(0x7f0000000240), 0x5, 0x0) ioctl$EVIOCGMTSLOTS(r5, 0x8040450a, &(0x7f0000000280)=""/54) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000180)=""/71) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000000c0)=""/96) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/uts\x00') (async) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x800, 0x0) (async) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000700)=""/35) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000d8040000000000003f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018260000", @ANYRES32=r1, @ANYBLOB="0000000008000000185600000b0000000000000000000000641b50001000000018110000", @ANYRES32=0x1, @ANYBLOB="00000000d80d000000000000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000851000000200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000085200000020000008520000004000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x5ee7, 0xf9, &(0x7f0000000480)=""/249, 0x40f00, 0x5, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f0000000580)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000006c0)={0x0, r4}, 0x10) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1, 0x11, r3, 0x20ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) (async) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000040)={0x0, 0x5b, 0x9, &(0x7f0000000000)=0xffffffffffffffff}) (async) syz_open_dev$evdev(&(0x7f0000000240), 0x5, 0x0) (async) ioctl$EVIOCGMTSLOTS(r5, 0x8040450a, &(0x7f0000000280)=""/54) (async) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000180)=""/71) (async) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000000c0)=""/96) (async) 14:11:59 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000000)="3673056bdc92c3da2095b0b31b156afc5db072dc77ba884d2cdceeeb602f8c1f4df46e16cf2bcb43abd80833d3f09afde241101ec9846930725e2ec7715da6a3c99929ff853a344689091b4944523919395692023d1db484751651dc5255bd614b56957e87bb784ad83a22e530820251a8e06c791e9acb972c54c05567a056e0723bc4fb694bb0e00c980e4b3f9078e48a86a74797e2b106a8f1337951442d24b17ba7dd83ff04ee5f28675fc7bdbd5004cb7834039a6c36765de6b8f5a7396a7a560fff9b6e71da79c2141d42fa17972f72c37cf9ed878a46dd3135eafb38bc067f5c3c0bbc5069c14fe7af3b37") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f0000000280)="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") r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000000)="3673056bdc92c3da2095b0b31b156afc5db072dc77ba884d2cdceeeb602f8c1f4df46e16cf2bcb43abd80833d3f09afde241101ec9846930725e2ec7715da6a3c99929ff853a344689091b4944523919395692023d1db484751651dc5255bd614b56957e87bb784ad83a22e530820251a8e06c791e9acb972c54c05567a056e0723bc4fb694bb0e00c980e4b3f9078e48a86a74797e2b106a8f1337951442d24b17ba7dd83ff04ee5f28675fc7bdbd5004cb7834039a6c36765de6b8f5a7396a7a560fff9b6e71da79c2141d42fa17972f72c37cf9ed878a46dd3135eafb38bc067f5c3c0bbc5069c14fe7af3b37") (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f0000000280)="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") (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) (async) 14:11:59 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x4, 0x4) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB='\x00'/14], 0x14}}, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)=0x1, 0x4) 14:11:59 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000001) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x81}, 0xa) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:59 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/uts\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async, rerun: 32) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x800, 0x0) (async, rerun: 32) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000700)=""/35) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000d8040000000000003f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018260000", @ANYRES32=r1, @ANYBLOB="0000000008000000185600000b0000000000000000000000641b50001000000018110000", @ANYRES32=0x1, @ANYBLOB="00000000d80d000000000000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000851000000200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000085200000020000008520000004000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x5ee7, 0xf9, &(0x7f0000000480)=""/249, 0x40f00, 0x5, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f0000000580)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000006c0)={0x0, r4}, 0x10) (async, rerun: 32) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1, 0x11, r3, 0x20ff6000) (async, rerun: 32) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) (async) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000040)={0x0, 0x5b, 0x9, &(0x7f0000000000)=0xffffffffffffffff}) (async, rerun: 64) r5 = syz_open_dev$evdev(&(0x7f0000000240), 0x5, 0x0) (rerun: 64) ioctl$EVIOCGMTSLOTS(r5, 0x8040450a, &(0x7f0000000280)=""/54) (async) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000180)=""/71) (async) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000000c0)=""/96) 14:11:59 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x4, 0x4) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:59 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000001) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x81}, 0xa) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:59 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async, rerun: 64) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (rerun: 64) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async, rerun: 32) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x4, 0x4) (rerun: 32) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:59 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x8020000000000000, 0x410600) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x20ff6800) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:11:59 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000001) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x81}, 0xa) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:59 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x8020000000000000, 0x410600) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x20ff6800) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:11:59 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) r1 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000040)={r1}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000000)) r2 = getpid() ioprio_set$pid(0x2, r2, 0x6000) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x2, 0x5002) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000080)) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r3, 0x0) 14:11:59 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0xffffffae) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:59 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x8020000000000000, 0x410600) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x20ff6800) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x8020000000000000, 0x410600) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x20ff6800) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) 14:11:59 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) r1 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000040)={r1}) (async) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000040)={r1}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000000)) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000000)) r2 = getpid() ioprio_set$pid(0x2, r2, 0x6000) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x2, 0x5002) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000080)) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r3, 0x0) 14:11:59 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0xffffffae) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:11:59 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:11:59 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async, rerun: 32) r1 = getpid() (rerun: 32) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000040)={r1}) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000000)) r2 = getpid() ioprio_set$pid(0x2, r2, 0x6000) (async, rerun: 32) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x2, 0x5002) (async, rerun: 32) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000080)) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) (async, rerun: 32) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (rerun: 32) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r3, 0x0) 14:12:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x41530000}, 0x300}, 0x0) 14:12:00 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0xffffffae) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0xffffffae) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) 14:12:00 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) 14:12:00 executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0xfffffffffffff3d5, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001580)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl0\x00', 0x0, 0x2f, 0xff, 0x6, 0x6f, 0xb, @dev={0xfe, 0x80, '\x00', 0x21}, @loopback, 0x0, 0x10, 0x23, 0x1}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000015c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xa3, '\x00', r3, r1, 0x5, 0x2, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000014c0)={0xd0, 0x0, &(0x7f00000012c0)=[@acquire_done={0x40106309, 0x3}, @acquire={0x40046305, 0x1}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0x9, 0x1, 0x38}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/4096, 0x1000, 0x0, 0x4009}, @flat=@weak_handle={0x77682a85, 0x1, 0x1}}, &(0x7f0000000100)={0x0, 0x20, 0x48}}, 0x40}, @release={0x40046306, 0x3}, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001200)={@flat=@weak_binder={0x77622a85, 0x101}, @ptr={0x70742a85, 0x1, &(0x7f0000001180)=""/73, 0x49, 0x0, 0x21}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000001280)={0x0, 0x18, 0x40}}, 0x40}, @enter_looper], 0xd1, 0x0, &(0x7f00000013c0)="955a5a6ce2939bce63a0ac7dc96da7a5e8f5de5db6112fd30a063b3944e0a7b481aca3585473c5d7c198ed099d7cd3e85addb5286b5f593ea4283bed9b13d135c93ce19c30334a36dc1dc3eea4aafb63d1405ab7d085f98178caa803c33ec138845eb63400bd1699004072291717148122630be529e511d787dc0dd236e582319613c2c9e27f96f8fa6f10b195f44c32b4f73e6813fdea5bdfd942d062faec1c497503032347034cc859f780ee059fed79661d46db06f76d51d02a45dbf8d5d675e86d0c7e29067042a327b3361954dbc2"}) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000040)={0x1}) r5 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r5, 0x0) 14:12:00 executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0xfffffffffffff3d5, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001580)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl0\x00', 0x0, 0x2f, 0xff, 0x6, 0x6f, 0xb, @dev={0xfe, 0x80, '\x00', 0x21}, @loopback, 0x0, 0x10, 0x23, 0x1}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000015c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xa3, '\x00', r3, r1, 0x5, 0x2, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000014c0)={0xd0, 0x0, &(0x7f00000012c0)=[@acquire_done={0x40106309, 0x3}, @acquire={0x40046305, 0x1}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0x9, 0x1, 0x38}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/4096, 0x1000, 0x0, 0x4009}, @flat=@weak_handle={0x77682a85, 0x1, 0x1}}, &(0x7f0000000100)={0x0, 0x20, 0x48}}, 0x40}, @release={0x40046306, 0x3}, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001200)={@flat=@weak_binder={0x77622a85, 0x101}, @ptr={0x70742a85, 0x1, &(0x7f0000001180)=""/73, 0x49, 0x0, 0x21}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000001280)={0x0, 0x18, 0x40}}, 0x40}, @enter_looper], 0xd1, 0x0, &(0x7f00000013c0)="955a5a6ce2939bce63a0ac7dc96da7a5e8f5de5db6112fd30a063b3944e0a7b481aca3585473c5d7c198ed099d7cd3e85addb5286b5f593ea4283bed9b13d135c93ce19c30334a36dc1dc3eea4aafb63d1405ab7d085f98178caa803c33ec138845eb63400bd1699004072291717148122630be529e511d787dc0dd236e582319613c2c9e27f96f8fa6f10b195f44c32b4f73e6813fdea5bdfd942d062faec1c497503032347034cc859f780ee059fed79661d46db06f76d51d02a45dbf8d5d675e86d0c7e29067042a327b3361954dbc2"}) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000040)={0x1}) (async) r5 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r5, 0x0) 14:12:00 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x6) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:00 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:00 executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0xfffffffffffff3d5, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001580)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl0\x00', 0x0, 0x2f, 0xff, 0x6, 0x6f, 0xb, @dev={0xfe, 0x80, '\x00', 0x21}, @loopback, 0x0, 0x10, 0x23, 0x1}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000015c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xa3, '\x00', r3, r1, 0x5, 0x2, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000014c0)={0xd0, 0x0, &(0x7f00000012c0)=[@acquire_done={0x40106309, 0x3}, @acquire={0x40046305, 0x1}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0x9, 0x1, 0x38}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/4096, 0x1000, 0x0, 0x4009}, @flat=@weak_handle={0x77682a85, 0x1, 0x1}}, &(0x7f0000000100)={0x0, 0x20, 0x48}}, 0x40}, @release={0x40046306, 0x3}, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001200)={@flat=@weak_binder={0x77622a85, 0x101}, @ptr={0x70742a85, 0x1, &(0x7f0000001180)=""/73, 0x49, 0x0, 0x21}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000001280)={0x0, 0x18, 0x40}}, 0x40}, @enter_looper], 0xd1, 0x0, &(0x7f00000013c0)="955a5a6ce2939bce63a0ac7dc96da7a5e8f5de5db6112fd30a063b3944e0a7b481aca3585473c5d7c198ed099d7cd3e85addb5286b5f593ea4283bed9b13d135c93ce19c30334a36dc1dc3eea4aafb63d1405ab7d085f98178caa803c33ec138845eb63400bd1699004072291717148122630be529e511d787dc0dd236e582319613c2c9e27f96f8fa6f10b195f44c32b4f73e6813fdea5bdfd942d062faec1c497503032347034cc859f780ee059fed79661d46db06f76d51d02a45dbf8d5d675e86d0c7e29067042a327b3361954dbc2"}) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000040)={0x1}) r5 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r5, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0xfffffffffffff3d5, 0x2) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001580)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl0\x00', 0x0, 0x2f, 0xff, 0x6, 0x6f, 0xb, @dev={0xfe, 0x80, '\x00', 0x21}, @loopback, 0x0, 0x10, 0x23, 0x1}}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000015c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xa3, '\x00', r3, r1, 0x5, 0x2, 0x1}, 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000014c0)={0xd0, 0x0, &(0x7f00000012c0)=[@acquire_done={0x40106309, 0x3}, @acquire={0x40046305, 0x1}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0x9, 0x1, 0x38}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/4096, 0x1000, 0x0, 0x4009}, @flat=@weak_handle={0x77682a85, 0x1, 0x1}}, &(0x7f0000000100)={0x0, 0x20, 0x48}}, 0x40}, @release={0x40046306, 0x3}, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001200)={@flat=@weak_binder={0x77622a85, 0x101}, @ptr={0x70742a85, 0x1, &(0x7f0000001180)=""/73, 0x49, 0x0, 0x21}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000001280)={0x0, 0x18, 0x40}}, 0x40}, @enter_looper], 0xd1, 0x0, &(0x7f00000013c0)="955a5a6ce2939bce63a0ac7dc96da7a5e8f5de5db6112fd30a063b3944e0a7b481aca3585473c5d7c198ed099d7cd3e85addb5286b5f593ea4283bed9b13d135c93ce19c30334a36dc1dc3eea4aafb63d1405ab7d085f98178caa803c33ec138845eb63400bd1699004072291717148122630be529e511d787dc0dd236e582319613c2c9e27f96f8fa6f10b195f44c32b4f73e6813fdea5bdfd942d062faec1c497503032347034cc859f780ee059fed79661d46db06f76d51d02a45dbf8d5d675e86d0c7e29067042a327b3361954dbc2"}) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x2, 0x0) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000040)={0x1}) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r5, 0x0) (async) 14:12:00 executing program 1: ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000000)=[0x10000, 0x1], 0x2) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1, 0x11, r1, 0x2) mmap$binder(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x5) 14:12:00 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x6) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x6) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:00 executing program 1: ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async, rerun: 32) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000000)=[0x10000, 0x1], 0x2) (rerun: 32) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1, 0x11, r1, 0x2) (async) mmap$binder(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x5) 14:12:00 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x6) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:00 executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x97d9e86, 0x31da40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x2, '\x00', 0x0, r2, 0x0, 0x0, 0x1}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="08f77bb2c744efbc751524aa4818000000010400000000000001800000106cba3d00000000000000000000778482570c2a6e22e07c6ae707581806b54ef25d578a4634a94b1f3286d45745c79e2a7d5834a8b147dd002e5988c70942ff2c26fa3a71023b583d8f317a23b12b6770c15ef1f6374aeae307130c5b081a76eac5e316d7816a90d713f2164de0247f276b444b100fd408dca223504a020f72f54b0d00000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000690000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xfb, &(0x7f0000000180)=""/251, 0x41100, 0x2, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0x5, 0xba8, 0xfffffff7}, 0x10, 0x14a80, r5, 0x2, &(0x7f0000000380)=[r6], &(0x7f00000003c0)=[{0x2, 0x2, 0x2, 0x8}, {0x3, 0x3, 0x2, 0x2}]}, 0x90) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) syz_open_dev$vcsu(&(0x7f0000000040), 0x401, 0x600000) 14:12:00 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x7f, 0x100000) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000040)=""/237) 14:12:00 executing program 1: ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async, rerun: 32) syz_open_dev$vcsu(0x0, 0x0, 0x0) (rerun: 32) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000000)=[0x10000, 0x1], 0x2) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1, 0x11, r1, 0x2) mmap$binder(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x5) 14:12:00 executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x97d9e86, 0x31da40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x2, '\x00', 0x0, r2, 0x0, 0x0, 0x1}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="08f77bb2c744efbc751524aa4818000000010400000000000001800000106cba3d00000000000000000000778482570c2a6e22e07c6ae707581806b54ef25d578a4634a94b1f3286d45745c79e2a7d5834a8b147dd002e5988c70942ff2c26fa3a71023b583d8f317a23b12b6770c15ef1f6374aeae307130c5b081a76eac5e316d7816a90d713f2164de0247f276b444b100fd408dca223504a020f72f54b0d00000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000690000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xfb, &(0x7f0000000180)=""/251, 0x41100, 0x2, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0x5, 0xba8, 0xfffffff7}, 0x10, 0x14a80, r5, 0x2, &(0x7f0000000380)=[r6], &(0x7f00000003c0)=[{0x2, 0x2, 0x2, 0x8}, {0x3, 0x3, 0x2, 0x2}]}, 0x90) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) syz_open_dev$vcsu(&(0x7f0000000040), 0x401, 0x600000) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r1, 0x0) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x97d9e86, 0x31da40) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip_vti0\x00'}) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={0xffffffffffffffff}, 0x4) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x2, '\x00', 0x0, r2, 0x0, 0x0, 0x1}, 0x48) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="08f77bb2c744efbc751524aa4818000000010400000000000001800000106cba3d00000000000000000000778482570c2a6e22e07c6ae707581806b54ef25d578a4634a94b1f3286d45745c79e2a7d5834a8b147dd002e5988c70942ff2c26fa3a71023b583d8f317a23b12b6770c15ef1f6374aeae307130c5b081a76eac5e316d7816a90d713f2164de0247f276b444b100fd408dca223504a020f72f54b0d00000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000690000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xfb, &(0x7f0000000180)=""/251, 0x41100, 0x2, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0x5, 0xba8, 0xfffffff7}, 0x10, 0x14a80, r5, 0x2, &(0x7f0000000380)=[r6], &(0x7f00000003c0)=[{0x2, 0x2, 0x2, 0x8}, {0x3, 0x3, 0x2, 0x2}]}, 0x90) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000040), 0x401, 0x600000) (async) 14:12:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB='\x00'/14], 0x14}}, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)=0x1, 0x4) 14:12:00 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x7f, 0x100000) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000040)=""/237) 14:12:00 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x8b02) syz_open_dev$vcsu(&(0x7f0000000000), 0x1f, 0x200000) syz_open_dev$vcsu(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, 0xffffffffffffffff, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:00 executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x97d9e86, 0x31da40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={0xffffffffffffffff}, 0x4) (async) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x2, '\x00', 0x0, r2, 0x0, 0x0, 0x1}, 0x48) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x2, '\x00', 0x0, r2, 0x0, 0x0, 0x1}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="08f77bb2c744efbc751524aa4818000000010400000000000001800000106cba3d00000000000000000000778482570c2a6e22e07c6ae707581806b54ef25d578a4634a94b1f3286d45745c79e2a7d5834a8b147dd002e5988c70942ff2c26fa3a71023b583d8f317a23b12b6770c15ef1f6374aeae307130c5b081a76eac5e316d7816a90d713f2164de0247f276b444b100fd408dca223504a020f72f54b0d00000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000690000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xfb, &(0x7f0000000180)=""/251, 0x41100, 0x2, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0x5, 0xba8, 0xfffffff7}, 0x10, 0x14a80, r5, 0x2, &(0x7f0000000380)=[r6], &(0x7f00000003c0)=[{0x2, 0x2, 0x2, 0x8}, {0x3, 0x3, 0x2, 0x2}]}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="08f77bb2c744efbc751524aa4818000000010400000000000001800000106cba3d00000000000000000000778482570c2a6e22e07c6ae707581806b54ef25d578a4634a94b1f3286d45745c79e2a7d5834a8b147dd002e5988c70942ff2c26fa3a71023b583d8f317a23b12b6770c15ef1f6374aeae307130c5b081a76eac5e316d7816a90d713f2164de0247f276b444b100fd408dca223504a020f72f54b0d00000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000690000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xfb, &(0x7f0000000180)=""/251, 0x41100, 0x2, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0x5, 0xba8, 0xfffffff7}, 0x10, 0x14a80, r5, 0x2, &(0x7f0000000380)=[r6], &(0x7f00000003c0)=[{0x2, 0x2, 0x2, 0x8}, {0x3, 0x3, 0x2, 0x2}]}, 0x90) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) syz_open_dev$vcsu(&(0x7f0000000040), 0x401, 0x600000) 14:12:00 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x7f, 0x100000) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000040)=""/237) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x7f, 0x100000) (async) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000040)=""/237) (async) 14:12:00 executing program 3: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_ext={0x1c, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1836000003000000020000000000000097011800010000007929880092001e9fb7d9f30400188d670414f787ce60d9259d7751a24823a595cb32477c9dd248162d4372fdaecfc6bc8075e9325f2f130f4e18bba5be25a8178a"], &(0x7f0000000040)='GPL\x00', 0x25, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080)={0x5, 0xa, 0x8001, 0x10001}, 0x10, 0x24726, 0xffffffffffffffff, 0x5, 0x0, &(0x7f00000000c0)=[{0x1, 0x4, 0xd, 0x4}, {0x4, 0x4, 0x7}, {0x5, 0x3, 0x9, 0xb}, {0x4, 0x3, 0x0, 0x8}, {0x5, 0x1, 0xb, 0xa}]}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000240)={0x0, r0}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0xfffffffffffffffd, 0x101082) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) 14:12:00 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x8b02) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x1f, 0x200000) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async, rerun: 64) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, 0xffffffffffffffff, 0x20ff6000) (rerun: 64) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:00 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) setns(r1, 0x20000) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r1, 0x376) 14:12:00 executing program 3: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_ext={0x1c, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1836000003000000020000000000000097011800010000007929880092001e9fb7d9f30400188d670414f787ce60d9259d7751a24823a595cb32477c9dd248162d4372fdaecfc6bc8075e9325f2f130f4e18bba5be25a8178a"], &(0x7f0000000040)='GPL\x00', 0x25, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080)={0x5, 0xa, 0x8001, 0x10001}, 0x10, 0x24726, 0xffffffffffffffff, 0x5, 0x0, &(0x7f00000000c0)=[{0x1, 0x4, 0xd, 0x4}, {0x4, 0x4, 0x7}, {0x5, 0x3, 0x9, 0xb}, {0x4, 0x3, 0x0, 0x8}, {0x5, 0x1, 0xb, 0xa}]}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000240)={0x0, r0}, 0x10) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0xfffffffffffffffd, 0x101082) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) 14:12:00 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x8b02) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x1f, 0x200000) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, 0xffffffffffffffff, 0x20ff6000) (async, rerun: 64) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (rerun: 64) 14:12:00 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) setns(r1, 0x20000) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r1, 0x376) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r1, 0x376) 14:12:00 executing program 3: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_ext={0x1c, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1836000003000000020000000000000097011800010000007929880092001e9fb7d9f30400188d670414f787ce60d9259d7751a24823a595cb32477c9dd248162d4372fdaecfc6bc8075e9325f2f130f4e18bba5be25a8178a"], &(0x7f0000000040)='GPL\x00', 0x25, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080)={0x5, 0xa, 0x8001, 0x10001}, 0x10, 0x24726, 0xffffffffffffffff, 0x5, 0x0, &(0x7f00000000c0)=[{0x1, 0x4, 0xd, 0x4}, {0x4, 0x4, 0x7}, {0x5, 0x3, 0x9, 0xb}, {0x4, 0x3, 0x0, 0x8}, {0x5, 0x1, 0xb, 0xa}]}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000240)={0x0, r0}, 0x10) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0xfffffffffffffffd, 0x101082) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) 14:12:00 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) setns(r1, 0x20000) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r1, 0x376) 14:12:00 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) accept4$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711}, 0x10, 0x800) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x21ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:00 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x260000, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x40}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x48000) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:00 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xac9) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x101, 0x214002) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x7fffefff}, 0x300}, 0x0) 14:12:01 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x260000, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x40}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x48000) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x260000, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x40}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x48000) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) 14:12:01 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) accept4$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711}, 0x10, 0x800) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x21ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:01 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xac9) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xac9) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x101, 0x214002) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:01 executing program 4: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xac9) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x101, 0x214002) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:01 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x260000, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x40}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x48000) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:01 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) accept4$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711}, 0x10, 0x800) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x21ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:01 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x80000002) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:01 executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x4}, @ldst={0x1, 0x3, 0x4, 0xb, 0x5, 0xfffffffffffffff0, 0x1}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x7}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f00000000c0)='GPL\x00', 0x7fff, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[r0, r0, r0, r0, r0, r0], &(0x7f00000001c0)=[{0x5, 0x2, 0xd, 0x9}, {0x3, 0x5, 0xb}], 0x10, 0xfffffe00}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r3, 0x0) 14:12:01 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000380)={@loopback, @dev, 0x0}, &(0x7f00000003c0)=0xc) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000400)={@broadcast, @private, 0x0}, &(0x7f0000000440)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x4, 0x3f, 0x9, 0x3, 0x82, @private0, @loopback, 0x20, 0x10, 0xfffffffb}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x0, 0x2, 0x40, @mcast2, @mcast1, 0x7800, 0x80, 0x3, 0x1000}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f00000008c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0x1d8, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4080}, 0x800) r10 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r10, 0x20ff6000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000000)=""/187) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f00000000c0)={@id={0x2, 0x0, @b}}) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000180)=""/152) 14:12:01 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x80000002) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x80000002) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) 14:12:01 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x4}, @ldst={0x1, 0x3, 0x4, 0xb, 0x5, 0xfffffffffffffff0, 0x1}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x7}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f00000000c0)='GPL\x00', 0x7fff, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[r0, r0, r0, r0, r0, r0], &(0x7f00000001c0)=[{0x5, 0x2, 0xd, 0x9}, {0x3, 0x5, 0xb}], 0x10, 0xfffffe00}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r3, 0x0) 14:12:01 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) (async) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000380)={@loopback, @dev, 0x0}, &(0x7f00000003c0)=0xc) (async) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000400)={@broadcast, @private, 0x0}, &(0x7f0000000440)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x4, 0x3f, 0x9, 0x3, 0x82, @private0, @loopback, 0x20, 0x10, 0xfffffffb}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan1\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x0, 0x2, 0x40, @mcast2, @mcast1, 0x7800, 0x80, 0x3, 0x1000}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f00000008c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0x1d8, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4080}, 0x800) (async) r10 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r10, 0x20ff6000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000000)=""/187) (async) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f00000000c0)={@id={0x2, 0x0, @b}}) (async) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000180)=""/152) 14:12:01 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x80000002) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x80000002) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) 14:12:01 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) (async) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000380)={@loopback, @dev, 0x0}, &(0x7f00000003c0)=0xc) (async) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000400)={@broadcast, @private, 0x0}, &(0x7f0000000440)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x4, 0x3f, 0x9, 0x3, 0x82, @private0, @loopback, 0x20, 0x10, 0xfffffffb}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x0, 0x2, 0x40, @mcast2, @mcast1, 0x7800, 0x80, 0x3, 0x1000}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f00000008c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0x1d8, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4080}, 0x800) (async) r10 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r10, 0x20ff6000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000000)=""/187) (async) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f00000000c0)={@id={0x2, 0x0, @b}}) (async) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000180)=""/152) 14:12:01 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x237be6a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) read$msr(r2, &(0x7f0000000040)=""/2, 0x2) 14:12:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x4, 0x2, 0x95, 0x1, 0x7, 0xce, 0xffffffffffffffff, 0x4}, &(0x7f0000000080)={0x306f, 0x4, 0x8000000000000000, 0x7, 0x80, 0x1, 0xfff, 0x8000000000000000}, &(0x7f0000000100)={0x9, 0x80000000, 0x1, 0xffffffffffffffa4, 0x9, 0x50d, 0x1, 0xffff}, &(0x7f0000000180)={r2, r3+60000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x8]}, 0x8}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x0, {0x14}}, 0x14}}, 0x0) 14:12:01 executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x4}, @ldst={0x1, 0x3, 0x4, 0xb, 0x5, 0xfffffffffffffff0, 0x1}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x7}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f00000000c0)='GPL\x00', 0x7fff, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[r0, r0, r0, r0, r0, r0], &(0x7f00000001c0)=[{0x5, 0x2, 0xd, 0x9}, {0x3, 0x5, 0xb}], 0x10, 0xfffffe00}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) (async, rerun: 32) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) (rerun: 32) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r3, 0x0) 14:12:01 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x200, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:01 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x237be6a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) (async) read$msr(r2, &(0x7f0000000040)=""/2, 0x2) 14:12:01 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fcdbdf250d0000000c00018008000300020000002c000180140002006d616373656330000000000000000000140002006272696467655f736c6176655f3000000c00018008000300020000003800018008000300020000001400020070696d72656700000000000000000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB], 0x90}, 0x1, 0x0, 0x0, 0x20040894}, 0xc000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x11, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x7fff, 0x38, &(0x7f0000000180)=""/56, 0x41000, 0x8, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000001c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8e}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f0000000000), &(0x7f0000000300)=r3}, 0x20) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x5, '\x00', r2, r1, 0x2, 0x3, 0x2}, 0x48) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r4, 0x0) 14:12:01 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x200, 0x0) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async, rerun: 64) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (rerun: 64) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:01 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x237be6a, 0x0) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) (async) read$msr(r2, &(0x7f0000000040)=""/2, 0x2) 14:12:01 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fcdbdf250d0000000c00018008000300020000002c000180140002006d616373656330000000000000000000140002006272696467655f736c6176655f3000000c00018008000300020000003800018008000300020000001400020070696d72656700000000000000000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB], 0x90}, 0x1, 0x0, 0x0, 0x20040894}, 0xc000) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x11, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x7fff, 0x38, &(0x7f0000000180)=""/56, 0x41000, 0x8, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000001c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8e}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f0000000000), &(0x7f0000000300)=r3}, 0x20) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) (async) r4 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x5, '\x00', r2, r1, 0x2, 0x3, 0x2}, 0x48) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r4, 0x0) 14:12:01 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fcdbdf250d0000000c00018008000300020000002c000180140002006d616373656330000000000000000000140002006272696467655f736c6176655f3000000c00018008000300020000003800018008000300020000001400020070696d72656700000000000000000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB], 0x90}, 0x1, 0x0, 0x0, 0x20040894}, 0xc000) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x11, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x7fff, 0x38, &(0x7f0000000180)=""/56, 0x41000, 0x8, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000001c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8e}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f0000000000), &(0x7f0000000300)=r3}, 0x20) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) (async) r4 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x5, '\x00', r2, r1, 0x2, 0x3, 0x2}, 0x48) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r4, 0x0) 14:12:01 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x200, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x200, 0x0) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) 14:12:01 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x6, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@bridge_setlink={0x38, 0x10, 0x3, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xa, 0x2, @remote}, @IFLA_PROP_LIST={0x4}, @IFLA_NET_NS_PID={0x8}]}, 0x38}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, r3, 0x1, 0x0, 0x0, {0x25, 0x0, 0x2}}, 0x14}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x11c, 0x0, &(0x7f0000000580)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x6, 0x0, 0x14}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0x1}, @request_death={0x400c630e, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x78, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/170, 0xaa, 0x0, 0xe}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/191, 0xbf, 0x2, 0x28}, @ptr={0x70742a85, 0x1, &(0x7f0000000300)=""/140, 0x8c, 0x2, 0x5}}, &(0x7f0000000440)={0x0, 0x28, 0x50}}, 0x40}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f00000004c0)={@flat=@weak_handle={0x77682a85, 0x100}, @fda={0x66646185, 0x7, 0x0, 0x7}, @ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/10, 0xa, 0x0, 0x22}}, &(0x7f0000000540)={0x0, 0x18, 0x38}}, 0x40}, @release, @increfs_done={0x40106308, 0x1}, @register_looper], 0xbe, 0x0, &(0x7f00000006c0)="5e78aee3903c72a3e03bc32c869826f68659219ed5e21ce6e6b0f359a4d3d563f79263407263512cb16f7ec9bfda4a55c0b9e2e896445c43b55806cc4f27a48e01755a5a865f8a19f51c06a0a604ea7f836ec2df25df0384dc400ad53c52d9c32d4b967625eaad5e344e53b6195d38ff9c193fb502128450dbf1df65b7f6c2a4a160bae395f2820400491381dfd98189a6574da15b7fd0d2178f164ffc7b1ffdc28d6e6297d4f4401229b501e7e2ff3c5bf5bf6468e2d8f92567a2660a64"}) r4 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r4, 0x8004af7a, &(0x7f0000000000)) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r4, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000140), 0x8000000005, 0x4d4003) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r5, 0x0) 14:12:01 executing program 1: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x20ff6000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x8) 14:12:01 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x2, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xfffffffffffffffd) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:01 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x6, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@bridge_setlink={0x38, 0x10, 0x3, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xa, 0x2, @remote}, @IFLA_PROP_LIST={0x4}, @IFLA_NET_NS_PID={0x8}]}, 0x38}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, r3, 0x1, 0x0, 0x0, {0x25, 0x0, 0x2}}, 0x14}}, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x11c, 0x0, &(0x7f0000000580)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x6, 0x0, 0x14}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0x1}, @request_death={0x400c630e, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x78, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/170, 0xaa, 0x0, 0xe}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/191, 0xbf, 0x2, 0x28}, @ptr={0x70742a85, 0x1, &(0x7f0000000300)=""/140, 0x8c, 0x2, 0x5}}, &(0x7f0000000440)={0x0, 0x28, 0x50}}, 0x40}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f00000004c0)={@flat=@weak_handle={0x77682a85, 0x100}, @fda={0x66646185, 0x7, 0x0, 0x7}, @ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/10, 0xa, 0x0, 0x22}}, &(0x7f0000000540)={0x0, 0x18, 0x38}}, 0x40}, @release, @increfs_done={0x40106308, 0x1}, @register_looper], 0xbe, 0x0, &(0x7f00000006c0)="5e78aee3903c72a3e03bc32c869826f68659219ed5e21ce6e6b0f359a4d3d563f79263407263512cb16f7ec9bfda4a55c0b9e2e896445c43b55806cc4f27a48e01755a5a865f8a19f51c06a0a604ea7f836ec2df25df0384dc400ad53c52d9c32d4b967625eaad5e344e53b6195d38ff9c193fb502128450dbf1df65b7f6c2a4a160bae395f2820400491381dfd98189a6574da15b7fd0d2178f164ffc7b1ffdc28d6e6297d4f4401229b501e7e2ff3c5bf5bf6468e2d8f92567a2660a64"}) (async, rerun: 32) r4 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r4, 0x8004af7a, &(0x7f0000000000)) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r4, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000140), 0x8000000005, 0x4d4003) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r5, 0x0) 14:12:01 executing program 1: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x20ff6000) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x8) 14:12:01 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x2, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xfffffffffffffffd) (async) mmap$binder(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xfffffffffffffffd) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x7ffff000}, 0x300}, 0x0) 14:12:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 32) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0) (rerun: 32) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x4, 0x2, 0x95, 0x1, 0x7, 0xce, 0xffffffffffffffff, 0x4}, &(0x7f0000000080)={0x306f, 0x4, 0x8000000000000000, 0x7, 0x80, 0x1, 0xfff, 0x8000000000000000}, &(0x7f0000000100)={0x9, 0x80000000, 0x1, 0xffffffffffffffa4, 0x9, 0x50d, 0x1, 0xffff}, &(0x7f0000000180)={r2, r3+60000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x8]}, 0x8}) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x0, {0x14}}, 0x14}}, 0x0) 14:12:01 executing program 1: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x20ff6000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x8) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x20ff6000) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x8) (async) 14:12:01 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x2, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xfffffffffffffffd) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:01 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x6, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@bridge_setlink={0x38, 0x10, 0x3, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xa, 0x2, @remote}, @IFLA_PROP_LIST={0x4}, @IFLA_NET_NS_PID={0x8}]}, 0x38}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, r3, 0x1, 0x0, 0x0, {0x25, 0x0, 0x2}}, 0x14}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x11c, 0x0, &(0x7f0000000580)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x6, 0x0, 0x14}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0x1}, @request_death={0x400c630e, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x78, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/170, 0xaa, 0x0, 0xe}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/191, 0xbf, 0x2, 0x28}, @ptr={0x70742a85, 0x1, &(0x7f0000000300)=""/140, 0x8c, 0x2, 0x5}}, &(0x7f0000000440)={0x0, 0x28, 0x50}}, 0x40}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f00000004c0)={@flat=@weak_handle={0x77682a85, 0x100}, @fda={0x66646185, 0x7, 0x0, 0x7}, @ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/10, 0xa, 0x0, 0x22}}, &(0x7f0000000540)={0x0, 0x18, 0x38}}, 0x40}, @release, @increfs_done={0x40106308, 0x1}, @register_looper], 0xbe, 0x0, &(0x7f00000006c0)="5e78aee3903c72a3e03bc32c869826f68659219ed5e21ce6e6b0f359a4d3d563f79263407263512cb16f7ec9bfda4a55c0b9e2e896445c43b55806cc4f27a48e01755a5a865f8a19f51c06a0a604ea7f836ec2df25df0384dc400ad53c52d9c32d4b967625eaad5e344e53b6195d38ff9c193fb502128450dbf1df65b7f6c2a4a160bae395f2820400491381dfd98189a6574da15b7fd0d2178f164ffc7b1ffdc28d6e6297d4f4401229b501e7e2ff3c5bf5bf6468e2d8f92567a2660a64"}) (async, rerun: 32) r4 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (rerun: 32) ioctl$VHOST_VDPA_GET_AS_NUM(r4, 0x8004af7a, &(0x7f0000000000)) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r4, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000140), 0x8000000005, 0x4d4003) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r5, 0x0) 14:12:01 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xffffffffffffff8c) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x7, 0x0, r1, 0x1ff, '\x00', r2, r1, 0x1, 0x2, 0x3}, 0x48) 14:12:01 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x203302) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000040)=""/124) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000000c0)=0x6) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000180)=""/216) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) 14:12:01 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x7fff) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000000)=""/39) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:01 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xffffffffffffff8c) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x7, 0x0, r1, 0x1ff, '\x00', r2, r1, 0x1, 0x2, 0x3}, 0x48) 14:12:01 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x7fff) (async) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000000)=""/39) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:01 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x203302) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000040)=""/124) (async) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000040)=""/124) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000000c0)=0x6) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000180)=""/216) (async) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000180)=""/216) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) 14:12:01 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xffffffffffffff8c) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x7, 0x0, r1, 0x1ff, '\x00', r2, r1, 0x1, 0x2, 0x3}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xffffffffffffff8c) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x7, 0x0, r1, 0x1ff, '\x00', r2, r1, 0x1, 0x2, 0x3}, 0x48) (async) 14:12:01 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x7fff) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000000)=""/39) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x7fff) (async) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000000)=""/39) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) 14:12:01 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x246980) mmap$binder(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x2, 0x11, r0, 0x4) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x5) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x4, '\x00', 0x0, r0, 0x0, 0x3, 0x1}, 0x48) 14:12:01 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x203302) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000040)=""/124) (async) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000000c0)=0x6) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000180)=""/216) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) (async, rerun: 32) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (rerun: 32) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) 14:12:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x4, 0x2, 0x95, 0x1, 0x7, 0xce, 0xffffffffffffffff, 0x4}, &(0x7f0000000080)={0x306f, 0x4, 0x8000000000000000, 0x7, 0x80, 0x1, 0xfff, 0x8000000000000000}, &(0x7f0000000100)={0x9, 0x80000000, 0x1, 0xffffffffffffffa4, 0x9, 0x50d, 0x1, 0xffff}, &(0x7f0000000180)={r2, r3+60000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x8]}, 0x8}) (async, rerun: 32) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x0, {0x14}}, 0x14}}, 0x0) (rerun: 32) 14:12:01 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x400) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_setlink={0x20, 0x10, 0x3, 0x0, 0x0, {0x7, 0x0, 0x0, r4}}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@bridge_getvlan={0x28, 0x72, 0x0, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x40000) r5 = syz_open_dev$vcsu(&(0x7f0000000080), 0x3, 0x351040) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r5, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r8, 0x1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x30, r12, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x30}}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@empty, @broadcast, 0x0}, &(0x7f0000000100)=0xc) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r15, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r17 = socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r17, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r18, 0x1, 0x0, 0x0, {0x5}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="14040000", @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="080001089cb2f0c3400468ec52bdc147ff23c17b72feb268a8a21a39f7de554addc9aebd1661afe04ec4aa67d7e90d7e43977503895a8d2e60f0ab4f4782f1c580f575aceb4501d6", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB], 0x414}, 0x1, 0x0, 0x0, 0x90}, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x3, 0x4}, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'ip6_vti0\x00', r14, 0x2f, 0x9, 0x0, 0x0, 0x20, @mcast2, @remote, 0x80, 0x8000, 0x10000, 0xf7}}) 14:12:01 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x246980) mmap$binder(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x2, 0x11, r0, 0x4) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x5) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x4, '\x00', 0x0, r0, 0x0, 0x3, 0x1}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x246980) (async) mmap$binder(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x2, 0x11, r0, 0x4) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x5) (async) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x4, '\x00', 0x0, r0, 0x0, 0x3, 0x1}, 0x48) (async) 14:12:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = getpid() r6 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x34}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x2e}}, @NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_PID={0x8, 0x52, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x40010) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x14, r2, 0x1, 0x0, 0x0, {0x14}}, 0x14}}, 0x0) 14:12:01 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x128, 0x4, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xa8, 0xc, "5d63faf670e32bfd6d541ad56048e36d247d24b61c37df05a0d3dce14eb14311fe2f73217b50376af0bd48a242692b45ca387c16d16a4ed00e51c0cff9fb594ccdc676f1b2ebfcd4111d1095c4cfb4caff1988aebf330fd5f5c5f4a3a83ab2b874a66da6b1249e85ea4da36a3810c02d5e67ec224a9da3b4e645899c3ac3872c03a080c4eb6640cff297e0dc042d0824973b7567e2fd90dcf688b256ab3e367b4bafb09a"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x17fd}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x604bd2be}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xbf}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x8080}, 0x4040040) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) 14:12:01 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x246980) mmap$binder(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x2, 0x11, r0, 0x4) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x5) (async) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x4, '\x00', 0x0, r0, 0x0, 0x3, 0x1}, 0x48) 14:12:01 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x400) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_setlink={0x20, 0x10, 0x3, 0x0, 0x0, {0x7, 0x0, 0x0, r4}}, 0x20}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@bridge_getvlan={0x28, 0x72, 0x0, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x40000) (async, rerun: 64) r5 = syz_open_dev$vcsu(&(0x7f0000000080), 0x3, 0x351040) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r5, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r8, 0x1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}}, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x30, r12, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x30}}, 0x0) (async) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@empty, @broadcast, 0x0}, &(0x7f0000000100)=0xc) (async) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r15, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) (async) r17 = socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r17, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r18, 0x1, 0x0, 0x0, {0x5}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="14040000", @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="080001089cb2f0c3400468ec52bdc147ff23c17b72feb268a8a21a39f7de554addc9aebd1661afe04ec4aa67d7e90d7e43977503895a8d2e60f0ab4f4782f1c580f575aceb4501d6", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB], 0x414}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x3, 0x4}, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'ip6_vti0\x00', r14, 0x2f, 0x9, 0x0, 0x0, 0x20, @mcast2, @remote, 0x80, 0x8000, 0x10000, 0xf7}}) 14:12:01 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0) (async) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x128, 0x4, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xa8, 0xc, "5d63faf670e32bfd6d541ad56048e36d247d24b61c37df05a0d3dce14eb14311fe2f73217b50376af0bd48a242692b45ca387c16d16a4ed00e51c0cff9fb594ccdc676f1b2ebfcd4111d1095c4cfb4caff1988aebf330fd5f5c5f4a3a83ab2b874a66da6b1249e85ea4da36a3810c02d5e67ec224a9da3b4e645899c3ac3872c03a080c4eb6640cff297e0dc042d0824973b7567e2fd90dcf688b256ab3e367b4bafb09a"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x17fd}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x604bd2be}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xbf}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x8080}, 0x4040040) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) 14:12:02 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x400) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_setlink={0x20, 0x10, 0x3, 0x0, 0x0, {0x7, 0x0, 0x0, r4}}, 0x20}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@bridge_getvlan={0x28, 0x72, 0x0, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x40000) r5 = syz_open_dev$vcsu(&(0x7f0000000080), 0x3, 0x351040) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r5, 0x20ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) (rerun: 32) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r8, 0x1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}}, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x30, r12, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x30}}, 0x0) (async) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@empty, @broadcast, 0x0}, &(0x7f0000000100)=0xc) (async) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r15, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) (async) r17 = socket$nl_generic(0x10, 0x3, 0x10) (async) r18 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r17, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r18, 0x1, 0x0, 0x0, {0x5}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="14040000", @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="080001089cb2f0c3400468ec52bdc147ff23c17b72feb268a8a21a39f7de554addc9aebd1661afe04ec4aa67d7e90d7e43977503895a8d2e60f0ab4f4782f1c580f575aceb4501d6", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB], 0x414}, 0x1, 0x0, 0x0, 0x90}, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x3, 0x4}, 0x6) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'ip6_vti0\x00', r14, 0x2f, 0x9, 0x0, 0x0, 0x20, @mcast2, @remote, 0x80, 0x8000, 0x10000, 0xf7}}) 14:12:02 executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x3, 0x2c03) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0x11, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x1, 0x2aec72f16166c54d, 0x9, 0x0, 0x80, 0xfffffffffffffffc}, @ldst={0x2, 0x1, 0x1, 0x7, 0x9, 0x2, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x95}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x796}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x7, &(0x7f0000000100)=""/7, 0x41100, 0xac, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x4, 0x0, 0x6, 0x50}, 0x10, 0x391e, r2, 0x9, &(0x7f0000000280)=[r0, r3, r0, r0], &(0x7f00000002c0)=[{0x2, 0x2, 0xd, 0x7}, {0x0, 0x2, 0xd, 0x8}, {0x0, 0x3, 0x0, 0x9}, {0x4, 0x4, 0x1, 0x8}, {0x1, 0x3, 0x5, 0x6}, {0x0, 0x2, 0x6, 0x6}, {0x2, 0x5, 0x6, 0x6}, {0x3, 0x4, 0xb, 0x6}, {0x2, 0x5, 0x7, 0x3}], 0x10, 0x401}, 0x90) r4 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r4, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r5, 0x0) 14:12:02 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x128, 0x4, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xa8, 0xc, "5d63faf670e32bfd6d541ad56048e36d247d24b61c37df05a0d3dce14eb14311fe2f73217b50376af0bd48a242692b45ca387c16d16a4ed00e51c0cff9fb594ccdc676f1b2ebfcd4111d1095c4cfb4caff1988aebf330fd5f5c5f4a3a83ab2b874a66da6b1249e85ea4da36a3810c02d5e67ec224a9da3b4e645899c3ac3872c03a080c4eb6640cff297e0dc042d0824973b7567e2fd90dcf688b256ab3e367b4bafb09a"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x17fd}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x604bd2be}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xbf}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x8080}, 0x4040040) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0) (async) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x128, 0x4, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xa8, 0xc, "5d63faf670e32bfd6d541ad56048e36d247d24b61c37df05a0d3dce14eb14311fe2f73217b50376af0bd48a242692b45ca387c16d16a4ed00e51c0cff9fb594ccdc676f1b2ebfcd4111d1095c4cfb4caff1988aebf330fd5f5c5f4a3a83ab2b874a66da6b1249e85ea4da36a3810c02d5e67ec224a9da3b4e645899c3ac3872c03a080c4eb6640cff297e0dc042d0824973b7567e2fd90dcf688b256ab3e367b4bafb09a"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x17fd}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x604bd2be}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xbf}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x8080}, 0x4040040) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) (async) 14:12:02 executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x3, 0x2c03) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0x11, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x1, 0x2aec72f16166c54d, 0x9, 0x0, 0x80, 0xfffffffffffffffc}, @ldst={0x2, 0x1, 0x1, 0x7, 0x9, 0x2, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x95}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x796}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x7, &(0x7f0000000100)=""/7, 0x41100, 0xac, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x4, 0x0, 0x6, 0x50}, 0x10, 0x391e, r2, 0x9, &(0x7f0000000280)=[r0, r3, r0, r0], &(0x7f00000002c0)=[{0x2, 0x2, 0xd, 0x7}, {0x0, 0x2, 0xd, 0x8}, {0x0, 0x3, 0x0, 0x9}, {0x4, 0x4, 0x1, 0x8}, {0x1, 0x3, 0x5, 0x6}, {0x0, 0x2, 0x6, 0x6}, {0x2, 0x5, 0x6, 0x6}, {0x3, 0x4, 0xb, 0x6}, {0x2, 0x5, 0x7, 0x3}], 0x10, 0x401}, 0x90) r4 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r4, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r5, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000180), 0x3, 0x2c03) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x48) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0x11, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x1, 0x2aec72f16166c54d, 0x9, 0x0, 0x80, 0xfffffffffffffffc}, @ldst={0x2, 0x1, 0x1, 0x7, 0x9, 0x2, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x95}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x796}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x7, &(0x7f0000000100)=""/7, 0x41100, 0xac, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x4, 0x0, 0x6, 0x50}, 0x10, 0x391e, r2, 0x9, &(0x7f0000000280)=[r0, r3, r0, r0], &(0x7f00000002c0)=[{0x2, 0x2, 0xd, 0x7}, {0x0, 0x2, 0xd, 0x8}, {0x0, 0x3, 0x0, 0x9}, {0x4, 0x4, 0x1, 0x8}, {0x1, 0x3, 0x5, 0x6}, {0x0, 0x2, 0x6, 0x6}, {0x2, 0x5, 0x6, 0x6}, {0x3, 0x4, 0xb, 0x6}, {0x2, 0x5, 0x7, 0x3}], 0x10, 0x401}, 0x90) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r4, 0x0) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r5, 0x0) (async) 14:12:02 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000040)=[0x7, 0x7ff, 0x6, 0x4, 0x4, 0x1ff, 0x59, 0x6]) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x2}) 14:12:02 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) getpid() (async) r5 = getpid() r6 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x34}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x2e}}, @NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_PID={0x8, 0x52, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x40010) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x14, r2, 0x1, 0x0, 0x0, {0x14}}, 0x14}}, 0x0) 14:12:02 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x101, 0x250d02) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:02 executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x3, 0x2c03) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0x11, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x1, 0x2aec72f16166c54d, 0x9, 0x0, 0x80, 0xfffffffffffffffc}, @ldst={0x2, 0x1, 0x1, 0x7, 0x9, 0x2, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x95}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x796}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x7, &(0x7f0000000100)=""/7, 0x41100, 0xac, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x4, 0x0, 0x6, 0x50}, 0x10, 0x391e, r2, 0x9, &(0x7f0000000280)=[r0, r3, r0, r0], &(0x7f00000002c0)=[{0x2, 0x2, 0xd, 0x7}, {0x0, 0x2, 0xd, 0x8}, {0x0, 0x3, 0x0, 0x9}, {0x4, 0x4, 0x1, 0x8}, {0x1, 0x3, 0x5, 0x6}, {0x0, 0x2, 0x6, 0x6}, {0x2, 0x5, 0x6, 0x6}, {0x3, 0x4, 0xb, 0x6}, {0x2, 0x5, 0x7, 0x3}], 0x10, 0x401}, 0x90) (async) r4 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r4, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) (async) r5 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r5, 0x0) 14:12:02 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000040)=[0x7, 0x7ff, 0x6, 0x4, 0x4, 0x1ff, 0x59, 0x6]) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x2}) 14:12:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0xf0ffffff}, 0x300}, 0x0) 14:12:02 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) syz_open_dev$vcsu(0x0, 0x101, 0x250d02) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:02 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, &(0x7f0000000100)) 14:12:02 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000040)=[0x7, 0x7ff, 0x6, 0x4, 0x4, 0x1ff, 0x59, 0x6]) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x2}) 14:12:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = getpid() r6 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x34}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x2e}}, @NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_PID={0x8, 0x52, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x40010) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x14, r2, 0x1, 0x0, 0x0, {0x14}}, 0x14}}, 0x0) 14:12:02 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) syz_open_dev$vcsu(0x0, 0x101, 0x250d02) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:02 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, &(0x7f0000000100)) 14:12:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) pselect6(0x40, &(0x7f0000001000)={0x9, 0x4, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400f100"], 0x14}}, 0x0) 14:12:02 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0xffffffffffffffff, 0x208800) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) r3 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000000)={r3, 0x1, 0x240}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) getpid() 14:12:02 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x4, 0x81042) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000000)={r2, 0x0, 0x4}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:02 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, &(0x7f0000000100)) 14:12:02 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x4, 0x81042) (async) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000000)={r2, 0x0, 0x4}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:02 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0xffffffffffffffff, 0x208800) (async) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) (async) r3 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000000)={r3, 0x1, 0x240}) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) getpid() 14:12:02 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x7ffffff7) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:02 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async, rerun: 64) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x4, 0x81042) (async, rerun: 64) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000000)={r2, 0x0, 0x4}) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:02 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x7ffffff7) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:02 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0xffffffffffffffff, 0x208800) (async, rerun: 64) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) (rerun: 64) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) (async) r3 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000000)={r3, 0x1, 0x240}) (async, rerun: 32) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async, rerun: 32) getpid() 14:12:02 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x7ffffff7) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x7ffffff7) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) 14:12:02 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001240)={0x3, 0x0, [{0x100003, 0x1000, &(0x7f0000000180)=""/4096}, {0x6000, 0xfe, &(0x7f0000000000)=""/254}, {0x0, 0x83, &(0x7f0000001180)=""/131}]}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) openat$null(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000100)={0x3, 0xc12}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:02 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000040)={0x0, 0x6, 0x1000, &(0x7f0000000000)=0x8}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:02 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000040), &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) 14:12:02 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001240)={0x3, 0x0, [{0x100003, 0x1000, &(0x7f0000000180)=""/4096}, {0x6000, 0xfe, &(0x7f0000000000)=""/254}, {0x0, 0x83, &(0x7f0000001180)=""/131}]}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) openat$null(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) (async) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000100)={0x3, 0xc12}) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:02 executing program 1: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000040)={0x0, 0x6, 0x1000, &(0x7f0000000000)=0x8}) (async) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000040)={0x0, 0x6, 0x1000, &(0x7f0000000000)=0x8}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:02 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000040), &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) 14:12:02 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001240)={0x3, 0x0, [{0x100003, 0x1000, &(0x7f0000000180)=""/4096}, {0x6000, 0xfe, &(0x7f0000000000)=""/254}, {0x0, 0x83, &(0x7f0000001180)=""/131}]}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) openat$null(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000100)={0x3, 0xc12}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:02 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000040)={0x0, 0x6, 0x1000, &(0x7f0000000000)=0x8}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000040)={0x0, 0x6, 0x1000, &(0x7f0000000000)=0x8}) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) 14:12:02 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1c, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={0x1}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) futex_waitv(&(0x7f0000000d40)=[{0x6, &(0x7f00000000c0)=0x10001, 0x82}, {0xffffffffffffc46b, &(0x7f0000000100)=0x8, 0x2}, {0x81, &(0x7f0000000180)=0x9, 0x82}, {0x2, &(0x7f00000001c0)=0xff, 0x2}, {0x7, &(0x7f0000000200)=0x2, 0x82}, {0x2, &(0x7f0000000240)=0x6, 0x2}, {0xff, &(0x7f0000000280)=0xe1e7, 0x80}, {0x8, &(0x7f00000002c0)=0x8c, 0x82}, {0x200, &(0x7f0000000300)=0x2, 0x2}, {0x5, &(0x7f0000000340)=0x1000, 0x2}, {0x2134bd89, &(0x7f0000000380)=0x3, 0x2}, {0x80, &(0x7f00000003c0)=0x4, 0x82}, {0x6, &(0x7f0000000400)=0x7, 0x82}, {0x7, &(0x7f0000000440)=0x8, 0x82}, {0xfffffffffffffffc, &(0x7f0000000480)=0x5, 0x82}, {0x8, &(0x7f00000004c0)=0x1, 0x2}, {0x7f, &(0x7f0000000500)=0x7fffffff, 0x2}, {0x1ff, &(0x7f0000000540)=0x5, 0x82}, {0x5174, &(0x7f0000000580)=0xa2, 0x82}, {0x0, &(0x7f00000005c0)=0x8a5f, 0x82}, {0x1ff, &(0x7f0000000600)=0x100, 0x82}, {0x616, &(0x7f0000000640)=0x9, 0x2}, {0x10001, &(0x7f0000000680)=0x8, 0x82}, {0x6, &(0x7f00000006c0)=0x3, 0x2}, {0x6, &(0x7f0000000700), 0x80}, {0x0, &(0x7f0000000740)=0x6, 0x82}, {0xfffffffffffff68d, &(0x7f0000000780)=0x7, 0x2}, {0xe09b, &(0x7f00000007c0)=0x80000001, 0x2}, {0x20, &(0x7f0000000800)=0x9, 0x2}, {0x21e9bdfb, &(0x7f0000000840)=0x7fffffffffffffff, 0x2}, {0x5, &(0x7f0000000880)=0x4, 0x82}, {0x0, &(0x7f00000008c0)=0x9, 0x2}, {0x3, &(0x7f0000000900)=0x6, 0x82}, {0x565f, &(0x7f0000000940)=0xff, 0x2}, {0xf8e4, &(0x7f0000000980)=0x5, 0x82}, {0x5, &(0x7f00000009c0)=0x2, 0x82}, {0x8, &(0x7f0000000a00)=0x9, 0x5c0e4bdcb563a65f}, {0x8000, &(0x7f0000000a40)=0x1, 0x82}, {0xeeaf, &(0x7f0000000a80)=0x1, 0x2}, {0x101, &(0x7f0000000ac0)=0x7, 0x82}, {0x200, &(0x7f0000000b00)=0xff93, 0x82}, {0x8, &(0x7f0000000b40)=0x3, 0x82}, {0x1ff, &(0x7f0000000b80)=0x949, 0x82}, {0x0, &(0x7f0000000bc0)=0x4, 0x82}, {0x1, &(0x7f0000000c00)=0x1, 0x2}, {0x9, &(0x7f0000000c40)=0x6000, 0x2}, {0x13e, &(0x7f0000000c80)=0x3, 0x82}, {0x4, &(0x7f0000000cc0)=0x3f, 0x2}, {0x2, &(0x7f0000000d00)=0x935, 0x82}], 0x31, 0x0, &(0x7f0000001200)={0x0, 0x3938700}, 0x0) 14:12:02 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000040), &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) 14:12:02 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 14:12:02 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1c, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={0x1}) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) (async) futex_waitv(&(0x7f0000000d40)=[{0x6, &(0x7f00000000c0)=0x10001, 0x82}, {0xffffffffffffc46b, &(0x7f0000000100)=0x8, 0x2}, {0x81, &(0x7f0000000180)=0x9, 0x82}, {0x2, &(0x7f00000001c0)=0xff, 0x2}, {0x7, &(0x7f0000000200)=0x2, 0x82}, {0x2, &(0x7f0000000240)=0x6, 0x2}, {0xff, &(0x7f0000000280)=0xe1e7, 0x80}, {0x8, &(0x7f00000002c0)=0x8c, 0x82}, {0x200, &(0x7f0000000300)=0x2, 0x2}, {0x5, &(0x7f0000000340)=0x1000, 0x2}, {0x2134bd89, &(0x7f0000000380)=0x3, 0x2}, {0x80, &(0x7f00000003c0)=0x4, 0x82}, {0x6, &(0x7f0000000400)=0x7, 0x82}, {0x7, &(0x7f0000000440)=0x8, 0x82}, {0xfffffffffffffffc, &(0x7f0000000480)=0x5, 0x82}, {0x8, &(0x7f00000004c0)=0x1, 0x2}, {0x7f, &(0x7f0000000500)=0x7fffffff, 0x2}, {0x1ff, &(0x7f0000000540)=0x5, 0x82}, {0x5174, &(0x7f0000000580)=0xa2, 0x82}, {0x0, &(0x7f00000005c0)=0x8a5f, 0x82}, {0x1ff, &(0x7f0000000600)=0x100, 0x82}, {0x616, &(0x7f0000000640)=0x9, 0x2}, {0x10001, &(0x7f0000000680)=0x8, 0x82}, {0x6, &(0x7f00000006c0)=0x3, 0x2}, {0x6, &(0x7f0000000700), 0x80}, {0x0, &(0x7f0000000740)=0x6, 0x82}, {0xfffffffffffff68d, &(0x7f0000000780)=0x7, 0x2}, {0xe09b, &(0x7f00000007c0)=0x80000001, 0x2}, {0x20, &(0x7f0000000800)=0x9, 0x2}, {0x21e9bdfb, &(0x7f0000000840)=0x7fffffffffffffff, 0x2}, {0x5, &(0x7f0000000880)=0x4, 0x82}, {0x0, &(0x7f00000008c0)=0x9, 0x2}, {0x3, &(0x7f0000000900)=0x6, 0x82}, {0x565f, &(0x7f0000000940)=0xff, 0x2}, {0xf8e4, &(0x7f0000000980)=0x5, 0x82}, {0x5, &(0x7f00000009c0)=0x2, 0x82}, {0x8, &(0x7f0000000a00)=0x9, 0x5c0e4bdcb563a65f}, {0x8000, &(0x7f0000000a40)=0x1, 0x82}, {0xeeaf, &(0x7f0000000a80)=0x1, 0x2}, {0x101, &(0x7f0000000ac0)=0x7, 0x82}, {0x200, &(0x7f0000000b00)=0xff93, 0x82}, {0x8, &(0x7f0000000b40)=0x3, 0x82}, {0x1ff, &(0x7f0000000b80)=0x949, 0x82}, {0x0, &(0x7f0000000bc0)=0x4, 0x82}, {0x1, &(0x7f0000000c00)=0x1, 0x2}, {0x9, &(0x7f0000000c40)=0x6000, 0x2}, {0x13e, &(0x7f0000000c80)=0x3, 0x82}, {0x4, &(0x7f0000000cc0)=0x3f, 0x2}, {0x2, &(0x7f0000000d00)=0x935, 0x82}], 0x31, 0x0, &(0x7f0000001200)={0x0, 0x3938700}, 0x0) 14:12:02 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 14:12:02 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001280)={r3, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) ptrace$ARCH_SHSTK_DISABLE(0x1e, r3, 0x1, 0x5002) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x10, 0x3, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@IFLA_NET_NS_PID={0x8, 0x13, r5}, @IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x34}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8014}, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r1}, 0x4) [ 3266.649020][T22032] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. 14:12:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0xff600000}, 0x300}, 0x0) 14:12:03 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 14:12:03 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1c, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={0x1}) (async, rerun: 32) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async, rerun: 32) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) (async) futex_waitv(&(0x7f0000000d40)=[{0x6, &(0x7f00000000c0)=0x10001, 0x82}, {0xffffffffffffc46b, &(0x7f0000000100)=0x8, 0x2}, {0x81, &(0x7f0000000180)=0x9, 0x82}, {0x2, &(0x7f00000001c0)=0xff, 0x2}, {0x7, &(0x7f0000000200)=0x2, 0x82}, {0x2, &(0x7f0000000240)=0x6, 0x2}, {0xff, &(0x7f0000000280)=0xe1e7, 0x80}, {0x8, &(0x7f00000002c0)=0x8c, 0x82}, {0x200, &(0x7f0000000300)=0x2, 0x2}, {0x5, &(0x7f0000000340)=0x1000, 0x2}, {0x2134bd89, &(0x7f0000000380)=0x3, 0x2}, {0x80, &(0x7f00000003c0)=0x4, 0x82}, {0x6, &(0x7f0000000400)=0x7, 0x82}, {0x7, &(0x7f0000000440)=0x8, 0x82}, {0xfffffffffffffffc, &(0x7f0000000480)=0x5, 0x82}, {0x8, &(0x7f00000004c0)=0x1, 0x2}, {0x7f, &(0x7f0000000500)=0x7fffffff, 0x2}, {0x1ff, &(0x7f0000000540)=0x5, 0x82}, {0x5174, &(0x7f0000000580)=0xa2, 0x82}, {0x0, &(0x7f00000005c0)=0x8a5f, 0x82}, {0x1ff, &(0x7f0000000600)=0x100, 0x82}, {0x616, &(0x7f0000000640)=0x9, 0x2}, {0x10001, &(0x7f0000000680)=0x8, 0x82}, {0x6, &(0x7f00000006c0)=0x3, 0x2}, {0x6, &(0x7f0000000700), 0x80}, {0x0, &(0x7f0000000740)=0x6, 0x82}, {0xfffffffffffff68d, &(0x7f0000000780)=0x7, 0x2}, {0xe09b, &(0x7f00000007c0)=0x80000001, 0x2}, {0x20, &(0x7f0000000800)=0x9, 0x2}, {0x21e9bdfb, &(0x7f0000000840)=0x7fffffffffffffff, 0x2}, {0x5, &(0x7f0000000880)=0x4, 0x82}, {0x0, &(0x7f00000008c0)=0x9, 0x2}, {0x3, &(0x7f0000000900)=0x6, 0x82}, {0x565f, &(0x7f0000000940)=0xff, 0x2}, {0xf8e4, &(0x7f0000000980)=0x5, 0x82}, {0x5, &(0x7f00000009c0)=0x2, 0x82}, {0x8, &(0x7f0000000a00)=0x9, 0x5c0e4bdcb563a65f}, {0x8000, &(0x7f0000000a40)=0x1, 0x82}, {0xeeaf, &(0x7f0000000a80)=0x1, 0x2}, {0x101, &(0x7f0000000ac0)=0x7, 0x82}, {0x200, &(0x7f0000000b00)=0xff93, 0x82}, {0x8, &(0x7f0000000b40)=0x3, 0x82}, {0x1ff, &(0x7f0000000b80)=0x949, 0x82}, {0x0, &(0x7f0000000bc0)=0x4, 0x82}, {0x1, &(0x7f0000000c00)=0x1, 0x2}, {0x9, &(0x7f0000000c40)=0x6000, 0x2}, {0x13e, &(0x7f0000000c80)=0x3, 0x82}, {0x4, &(0x7f0000000cc0)=0x3f, 0x2}, {0x2, &(0x7f0000000d00)=0x935, 0x82}], 0x31, 0x0, &(0x7f0000001200)={0x0, 0x3938700}, 0x0) 14:12:03 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001280)={r3, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) ptrace$ARCH_SHSTK_DISABLE(0x1e, r3, 0x1, 0x5002) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x10, 0x3, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@IFLA_NET_NS_PID={0x8, 0x13, r5}, @IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x34}}, 0x0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8014}, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r1}, 0x4) 14:12:03 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffffd, 0x2) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:03 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001280)={r3, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) ptrace$ARCH_SHSTK_DISABLE(0x1e, r3, 0x1, 0x5002) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = getpid() (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x10, 0x3, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@IFLA_NET_NS_PID={0x8, 0x13, r5}, @IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x34}}, 0x0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8014}, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r1}, 0x4) 14:12:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) pselect6(0x40, &(0x7f0000001000)={0x9, 0x4, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400f100"], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) (async) pselect6(0x40, &(0x7f0000001000)={0x9, 0x4, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400f100"], 0x14}}, 0x0) (async) 14:12:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8930, &(0x7f0000000480)={'ip6gre0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4e, 0x0, &(0x7f0000000040), 0x27, 0x0, &(0x7f0000000080)="ee86b44ae16dfd4ac9c96b2e9c517eb01327f95a9fb0d0e5f41bafc7ec00971fc687cbf9bc4438"}) 14:12:03 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffffd, 0x2) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) (async, rerun: 32) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (rerun: 32) 14:12:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8930, &(0x7f0000000480)={'ip6gre0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4e, 0x0, &(0x7f0000000040), 0x27, 0x0, &(0x7f0000000080)="ee86b44ae16dfd4ac9c96b2e9c517eb01327f95a9fb0d0e5f41bafc7ec00971fc687cbf9bc4438"}) 14:12:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8930, &(0x7f0000000480)={'ip6gre0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4e, 0x0, &(0x7f0000000040), 0x27, 0x0, &(0x7f0000000080)="ee86b44ae16dfd4ac9c96b2e9c517eb01327f95a9fb0d0e5f41bafc7ec00971fc687cbf9bc4438"}) 14:12:03 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffffd, 0x2) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffffd, 0x2) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) 14:12:03 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xffffff47) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', r2, r1, 0x1f, 0x2, 0x1}, 0x48) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000180)=""/101, 0x65, 0x40, &(0x7f0000000200)=@ax25={{0x3, @null, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @default]}, 0x80) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000c00)={0x2c, r4, 0x301, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="f7539d6fae0f8600", @ANYRES16=r4, @ANYBLOB="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"], 0x12b0}, 0x1, 0x0, 0x0, 0x844}, 0x8c1) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r5, 0x0) 14:12:03 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x200}, 0xc) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) pselect6(0x40, &(0x7f0000001000)={0x9, 0x4, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400f100"], 0x14}}, 0x0) 14:12:03 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000000)=""/83, &(0x7f0000000080)=0x53) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f0000000100)) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x802, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 14:12:03 executing program 1: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x200}, 0xc) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:03 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000000)=""/83, &(0x7f0000000080)=0x53) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f0000000100)) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x802, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 14:12:03 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xffffff47) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', r2, r1, 0x1f, 0x2, 0x1}, 0x48) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000180)=""/101, 0x65, 0x40, &(0x7f0000000200)=@ax25={{0x3, @null, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @default]}, 0x80) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000c00)={0x2c, r4, 0x301, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="f7539d6fae0f8600", @ANYRES16=r4, @ANYBLOB="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"], 0x12b0}, 0x1, 0x0, 0x0, 0x844}, 0x8c1) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xffffff47) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', r2, r1, 0x1f, 0x2, 0x1}, 0x48) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000180)=""/101, 0x65, 0x40, &(0x7f0000000200)=@ax25={{0x3, @null, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @default]}, 0x80) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000c00)={0x2c, r4, 0x301, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="f7539d6fae0f8600", @ANYRES16=r4, @ANYBLOB="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"], 0x12b0}, 0x1, 0x0, 0x0, 0x844}, 0x8c1) (async) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r5, 0x0) (async) 14:12:03 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) (async) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x200}, 0xc) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:03 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xffffff47) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', r2, r1, 0x1f, 0x2, 0x1}, 0x48) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000180)=""/101, 0x65, 0x40, &(0x7f0000000200)=@ax25={{0x3, @null, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @default]}, 0x80) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000c00)={0x2c, r4, 0x301, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="f7539d6fae0f8600", @ANYRES16=r4, @ANYBLOB="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"], 0x12b0}, 0x1, 0x0, 0x0, 0x844}, 0x8c1) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xffffff47) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', r2, r1, 0x1f, 0x2, 0x1}, 0x48) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000180)=""/101, 0x65, 0x40, &(0x7f0000000200)=@ax25={{0x3, @null, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @default]}, 0x80) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000c00)={0x2c, r4, 0x301, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="f7539d6fae0f8600", @ANYRES16=r4, @ANYBLOB="000127bd7000fcdbdf2518000000e001028008000200f80000006800038014000180080001008100000008000100020000002c000180040003000f0002002f6465762f76637375230000040003000800010043a7000008000100c705000024000180080002002d212d000f0002002f6465762f766373752300000400030004000300840003801c0001800800010089000000080001000800000004000300040003000c000180070002005c2c000030000180050002000000000008000100000000000f0002002f6465762f766373752300000800010003000000040003001800018004000300070002005c2c000008000100040000001000018004000300080001008d0c000004000100e40003803800018008000100000000000f0002002f6465762f76637375230000040003000f0002002f6465762f7663737523000008000100d0c200001c0001800800010003000000060002002e00000008000100040000001c000180080001000300000008000100ffffff7f08000100ff0300003000018004000300040003000800010004000000060002002e0000000400030008000100060000000800010006000000180001800500020000000000040003000800010004000000280001800f0002002f6465762f766373752300000400030008000100000000800800010000010000080007004896a5254c000180140002007465616d5f736c6176655f30000000000800030000000000140002006970766c616e300000000000000000000800030002000000080003000200000008000300020000006810028044000500cdba20d5242fa560a0c3e8f46fcf93e9c8ff4a5eca2e7098c516632bd33cbcc987dd454fc093d49a97962bb2ab00b49d503726dcb64488d01279bc7157fec2cb1c000380180001800f0002002f6465762f766373752300000400030004100400d73954fefa17782d0de0f9922a3d9b24bb8440d604735bbd319c28f9ab59057d9cfd9ff6f801800014595aacaa92fdd5f19aa50359317e559f6a3ae683c33c003a595b727d41926eb2c665161ed4dc748c33c5326bbe1e69f5513a95a7035e6291d4eba8bf6a0b329c66369f3062ba531df7d2aa5122880320d9bc9454ab0d0a5a689221edace7a30e8ed61e4a789cfcef55bb67c563ff37ca74534bdf723f1775958466aecb08bb1ef75e12fe96e8abf0d9e381787f9ed0b15a24580825e0c45fc9e4afeecfc27a802e6fedb5feb7508f13222c78d6956993b4ee8b13be2bdd0fc1dc2b6fefc62bb1b45950b008acff2538ec596b9cfcc9868805ad0b4f4e47d21da583192c7d74e3e4d2d1ef118bc3a10dd8acff218a743058df1f890c96e010861bbbd3a2d0dcd2f66bc01367fe2e42b0e897cea2424eba352f7edb50f39d99d98f15d2ec1b4655eac80514f35c02169e852faf3a0b194bf81625aaf26f740ab7e57133205c6ea01c2ef1d92fd370dc4d4643a68136cada6c8a8d8ef443d1e8ab86a00f8427320058f281e6337a0bc53b5fa1b595026d36b5bd58fc943f6dbcd1da0617fd7567a7db6cfa8271dbda911364d1094dce6ecb750d79c508a93cdbb28158e7e10739f7d75aadad988a9f4c4388fa40fc9ca71cd506f376d3a72f190fe36401f1f3d066d8af8fefd12711f877da39e4c39134850066c5a6ff175c3be91fbb33c609416c851808322d736493a57eda8b869038904b9da653d40f97cce5483f05e9d6960effdaa2afde0e23b4276e58208cb13285b1072e694f9ce9a4a8ee1689f5af6e5457f895bf3c4eb2e11568b3116520329af4326678df9f333b6a9c7f46286818fa458b416246172af94a8deae48fdd8e0bc815da4adfac706e7c443f4427814b23341935208bca356b8eafdfd28ddac79c3b3e75442233b56520aedde34804b5349bcbdc2dd909cba0810446c535666ab9e17013fee0d46daf7cbc233c147f6ad401153ddc7f5bc733ad5dd27a70e42812b36cae58baa3e508df6575a627a0ab35f2f3506c12cf9684d576a8c80128be45b9248f022fe89ca67dde8905ed7eaf2be312655c8eab08361e6b983bd197bb9b91de202e13f1d22d77546ca94e011166ff3852a50b249eaaee12c1159a526a4bfd8bed60dbbc1ee49053de47e7b863e6df01b836154fc122910259b285be36f6590404e40e8321cf879981df8ed904176dc6217804a3404014179ba1d19c9871d965144df82728b11406608db46caf8477892942490def20571413e286753b8053b3f5851429630ffba382cbedd42fb264405369a0254a53ea4f5e17ee6250ae4ac076cf9c4e138286f2376622a40687e7d34a42d251b1baf5c063a472de5ad75f8fa3321f504473ba4d6c57a1a2e580053552e1d2c5682067801a0ba895d660f34bf0e5ab7f8b675fdc8ea53d68cf99b1b4a600de097ab00a4ee8d7d45c4a25395cd76d06cb86bbb7765379430a8e92f53e8bb8b9b33d16b671956946f51de66cf3ae254c3a3eae8e5313b2096bb942fa8d7abf88ecb596bfca38a2d81c3d634ca4a8b74e728aab424d351fbbc72abb0f623731577216c74d62250870c76a4fb41419f6879b6f2688531c857867ab974b7b14f35c1cdb4f206c27ed3ee6f1608ca5f379de33b2980f6d9d0891f5c99278e87332d4c60b7977afb4e7ec1f6e24e4cbb93308d460b4ef6a96867f075c95398b22bce6c7475e1071d7c743b0b0cf9dc11e29ef42c02dff35048a26bd028ff194af2ffc54bcd222991ffa32683f20bf7a797515872b89cf4463630f5ec9712ccf78c9ee77200d6ba5a2c40ca822b109c4b386d54bb9f76c2d8afd573f314b3a773857c8cdff33188af1c45e6b1d42ffa497465b9ebb1c7b2b17bd09f12a0fd9bd5fc1f4e3bf1424361c15dbc7b07366898fa9a82492327549d0262088472075b201376357a8a917db8806b77762bb992f904b222aa08d1cba0c730a812d6a8707b9241a26465e394969b7d8e2b3a82339dcefb07a016ba3feb40ea5a1cdd06245dc09c9a055439a682023c6c7eb23977ccc81b5f5969313f98f43c1f037dcea0543bdd6491575cc8b0b6722187936fb4dd81be30e785b6571fe8b33f3352758c6036737de63174212178b00613d5542e71ac4596064b875a5650dce611aa46113e41a9a5fdb15d82e5c52c55f0c1331a29e151702faa700a30cc46912300985530786d88706afb7cfd2fddbb11790dbdea958a80c40b98184e1936643ec22775186690cc4bf229d9637c052df511e5acaa20b41804a1ff0b3dc5a7eab6062280d8a6eb322d59c805d20a4826bad807d4d1f0702e91260206b54cc11460a58fa24e84afe604156ffb123526927689a5d362d065f59d4d4b24cfc73229124ae359df864dc6510c036dca08d2ae3051a740bfd2a7b534c9890cf88dceaf083fb85cfae24f3ccbce4f53802000a2b3febf004fbca5946709ec8e81183cfcdafc4b10f413437bf5e98c88c5f3d722453c1cc4b40e29ae9777285df1aa880c9f4b63eb619ee8a64d9db672a8c522d3d86fe6f1a46eceffb14cb806fb5db5922f5459f545f85dc5e610a18d76a4f7419e1cdcba37df6c898b506e4bb5af8bade4008258b0da5ad64df6353a07e13fba664ab9df1c69bf1374d8f6700fa461e1c507deed3939182618db6c49377e802a05d6a27db9460ba6c1941ca0b5a77e3b3b6e8f8b6a4e8d4011d2aea112fb3372e8909fd916b44e8b97dbd82166e2c4394374257bdf822e91f6df80bcf62d83ad3048b38c547a0896e9785090602c11672047acc7642608224fd637319d53f534dac1c2a161ad14f935ad89e02ab0c813895c7f3aa2916f19fa5a9e8329fe9668376d2fd8efff1af382a02977c9a05df3ff5b606a8550982f02d11dba502e1706ced8c320a37cfe421f8ecd5f66d4d4264197004b3d81d360470e0578cd6d7f3d258f0937870439355bac67c17629d43aa403a94cf0bb5d52cb0f718fb465a5af83483f03f4f6705111d5408b8ad4d75164ac5bf810c61fbcd4d26bdc353bfa62a3082208ce8ab937d098d5ad157e0fb32aae2be2e616ce7c11bd0119c083628fa4492c6a10f4cf515bb9eafcca496f62350005a83fb7708a7dc1a54b9d6c10c95b2920cfac939a2343e5eabe829e0839b362c98c234fbc25e0b18e32aaa852dc3f381c7eb7d454994851dcfc8e5e6855da6a6411360193190e9598ac2541433ead2f3fe20b1896fc57458f6e4a5c27b8b31ac70f6f3db56bff960de380ac5e8e4596ac103d3d15dce88bde06381edd1f367725be12f2b9ba005ee25d7f7787982500a74007e3164a6a239c86810a6a5a3970a00d4aca802f2ed8252db55d5c2966b0c86d4b1a69f4c9f35d633a4c7244eae7239092dd9ccdfed857e950adb8afb15bae0066dfb5c0f98cd95729face29b6fcfd67f12c50af4872164c421ccf9dd0075863c252a059dc7008c6c95c3156803691dd447bcb1d4780e3e2ee0a03c5acfeef2211fedae5636441b4efff5dd5c12a066a08b4c9a30eb03f123d12b80e0065d082c23ef68dca0d5243da18e38e4aceb386bd4514766bf6f2ffe7b1d150e66a338ac5849d2af4e6c70f8ef98a96b2c2ab0f6429aa8ddbe802758bde0967f166971b8967c4aee450366e0fa2038ec5f25e0036355f65a32fcd7b6a3d53a7e10928976b27fbff679a4f0d1e378b00e4a43b59e166fd10a4f8a6b685176291c769598ffc65ce02cf485feede03414b84c72b5dbdd3497cc5d7adbd914153311dbe17d71d812fac4ccc27cece24d3fa46c1a6eb824a300ccefef596c4a937f3a8b034746c2a61ac4bb0439c76264763a17944491f1fa56b594dffbd3c7efbb49ecf3a86c3b4dcece2981c7ec7b55b787208e6fff821abafb7cf4076e0da61f0edf322d4f4c1fc9a3bd45d54903cd5e2ac3c48b69990bb084adb2722d74ca897d76738c47b8ca6702046f3cd4947240660fc126332360f0afcaa22547bafb2d5bfd3824792fe5cfe73c6a695038407bccacaf2ca6b359db5506282d116627e42b6e26115d48adea7b7801c4bc9c2932e02552a5ea8fe40fa94f036645e6176382014864662786344562456f102bcc015bc8e78b8bdb1d1cda8dd3be09b3c9196e220d7688ac3a02208a3ede5cc6e6099a8436c2ad9c73b200b3f19a73645bcf8faee11aecea8849a205b8576912f03717448bd7f4eec49808460de08e9c25fae2469e68f6389047f6eb6a13a09aec3e69bb25fdd646072cbb53a816d2c70651cd420195dcfbdf2952c81166a71bef418fddb6b23f14561351c5220af615fdaa5fa04900b0949ea877843a1f07f089338de69347d403699ee010439d1c74d1cd105402e34620d2b727f3e5f0253c975840fb63d8b0c6ca15baeb2d8d3a7cb9218129b5dc50951c357b2b2b66cf9f9e0b9016a692e6af9014aaeba70040d9b23899835dfefd3362935e15c0fc55de8f838facb23fa700d064f3c6899d2cf0c14c18c5399f2108250b61def4b4b829ebb578940211dadea394351c61f481310164192c0ead742c5c692ca4a3c37dec156a1ad3637f315bbb92992d7121a9df3c0cadacdd8b9e50cff18d8e45fbc1c3b1dd4754fc79452acf5ca570c64427b5cefe194b3996d5e841ccf97ed094f91f07aabee7b0bab980fbac1941227eb03b9b2acd9225fc74e52f1bce55ffe96d5a8c37c2f3e5dbf2abea543c57800de6f6acd21f818f008321d138c862d73019722c59ee9fc3016660dacd331bfb54fecb5ba5377328b224cf8f6ed200c0779107dbe3e446b51f765b45a0e32e9d58da9a281c8204a3ed4ab016921919277b94b21a18485baa91225e24125d003a07b6510bea80c7d12c6f8ccfb8a05d2fdad56d6c8ef9c8f2e0537ae37a128a0c061ae00e16239fa6605a87c91e0d36e11e91ab64e28a6bd2f83d583b05b9300be9a9954f976b6238c9a7b79001f4de9c814c76e197d495376966bb6caa7f614c4fae8adc200055ca8526802defe7e34f230a0dbe68834f0de633499b417feb1843f955ef9759a0029ca441ca9eb1d1998b91a172b26f596a1aeb397e3762dc358e8693556e7e605cdb1382f3e03fa76a20a8d234168e457e66468b4e8d8c7078a9f81fc4f99bef34a0fd458a2d964582a270ee0ceb83ed2568c77be3e034f50ab68d8eb23a842e4766b31504bd251d4da54963ceb602154b77f1b44ff7a25cb643f066802a6c4a3ef0b2f4154b0543f060434eaa4ce6e4a081f23aa18aa3ceeb6a568f8eeeb8aea4427570b05fa53df0dca5b9ec9f2dca318c0fea9b7309b43621f843e3fd66e86ad02b9fec991b792d61c73918de441da2dfca771c83c77e7cc9720dc2f95d0e3459718bc7ce8874150579994055b40366a563c915620b48d7d0550c72d89591fd821290b3c8e523ae952f0ebf096bbc1f33f85fd463cb22f2426bcdad205f4de4096bbb2b0cc6a7d7f75137709cc37adaa205e3df985106eb92d576d04d61c7dc544f8757480b5c0571c900c982e14ca9ed20f8f1a36fb8c333dd0c18da7ea8ea9a4ef696b23633df781119c5742d690939129e694015a52a339bf536ed379215ce99c3ec17597a8dcfb51cbf6eca2f4ca4518cc149670097ef2b9ff4e1bf0f97c55082a8748a64457c72317373356dcd1a9eba10938d4395cb76ced56ea3d0b77c3c267cb48c3030cbd4125b2b5810798d2e4fb1499a5580e3b2d32499a61649116b9a2fbce1f7585236df9cbcc14fee88d45505d958947a2fe687b064f45a63c02c2ce82298ed"], 0x12b0}, 0x1, 0x0, 0x0, 0x844}, 0x8c1) (async) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r5, 0x0) (async) 14:12:03 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000000)=""/83, &(0x7f0000000080)=0x53) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f0000000100)) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async, rerun: 32) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x802, 0x0) (rerun: 32) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 14:12:03 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:03 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @multicast2, 0x0}, &(0x7f0000000080)=0xc) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000ff0300fbdbdf25e4f2aba20000000000", @ANYRES32=r2, @ANYBLOB="0c000180060002000e6baf00020008000000000000009d82f8b919ad06bf050cbc0a3800"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c080}, 0x20004080) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:03 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) r1 = mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r1}, @acquire={0x40046305, 0x3}, @register_looper], 0xa, 0x0, &(0x7f0000000040)="7e47973b4b0d24d38acc"}) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) 14:12:03 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) 14:12:03 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @multicast2, 0x0}, &(0x7f0000000080)=0xc) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000ff0300fbdbdf25e4f2aba20000000000", @ANYRES32=r2, @ANYBLOB="0c000180060002000e6baf00020008000000000000009d82f8b919ad06bf050cbc0a3800"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c080}, 0x20004080) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @multicast2}, &(0x7f0000000080)=0xc) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000ff0300fbdbdf25e4f2aba20000000000", @ANYRES32=r2, @ANYBLOB="0c000180060002000e6baf00020008000000000000009d82f8b919ad06bf050cbc0a3800"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c080}, 0x20004080) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) 14:12:03 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) (async) r1 = mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r1}, @acquire={0x40046305, 0x3}, @register_looper], 0xa, 0x0, &(0x7f0000000040)="7e47973b4b0d24d38acc"}) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) 14:12:03 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async, rerun: 32) socket$vsock_stream(0x28, 0x1, 0x0) (async, rerun: 32) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:03 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @multicast2, 0x0}, &(0x7f0000000080)=0xc) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000ff0300fbdbdf25e4f2aba20000000000", @ANYRES32=r2, @ANYBLOB="0c000180060002000e6baf00020008000000000000009d82f8b919ad06bf050cbc0a3800"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c080}, 0x20004080) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000ff0300fbdbdf25e4f2aba20000000000", @ANYRES32=r2, @ANYBLOB="0c000180060002000e6baf00020008000000000000009d82f8b919ad06bf050cbc0a3800"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c080}, 0x20004080) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:03 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) r1 = mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r1}, @acquire={0x40046305, 0x3}, @register_looper], 0xa, 0x0, &(0x7f0000000040)="7e47973b4b0d24d38acc"}) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) 14:12:03 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x94, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r5, 0x0) 14:12:04 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x3, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000040)=[0x0, 0x5]) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000000)=[0x9], 0x2) 14:12:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0xffefff1f}, 0x300}, 0x0) 14:12:04 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x94, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r5, 0x0) 14:12:04 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f00000014c0), 0x1006, 0x6a0911795302262c) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom$inet_nvme(r2, 0x0, 0x0, 0x2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x4, 0xf8, 0x20, 0x0, 0x71, @empty, @loopback, 0x8000, 0x7800, 0x6, 0x2}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r8, 0x1, 0x0, 0x0, {0x5}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) lstat(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000001340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001300)={&(0x7f0000000200)={0x10f8, r3, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1018, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xefe}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}]}, 0x10f8}, 0x1, 0x0, 0x0, 0x24000800}, 0x20008081) openat$uhid(0xffffffffffffff9c, &(0x7f0000001480), 0x2, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000001440)={'ipvlan1\x00'}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:04 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x3, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000040)=[0x0, 0x5]) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000000)=[0x9], 0x2) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) syz_open_dev$vcsu(0x0, 0x3, 0x0) (async) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000040)=[0x0, 0x5]) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000000)=[0x9], 0x2) (async) 14:12:04 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x94, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (async) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) r5 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r5, 0x0) 14:12:04 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x3, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000040)=[0x0, 0x5]) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000000)=[0x9], 0x2) 14:12:04 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:04 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x400, 0x88a83) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) recvmsg$inet_nvme(r1, &(0x7f0000000840)={&(0x7f0000000040)=@can, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/160, 0xa0}, {&(0x7f0000000240)=""/170, 0xaa}, {&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f0000000300)=""/122, 0x7a}, {&(0x7f0000000380)=""/122, 0x7a}, {&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f0000000400)=""/181, 0xb5}, {&(0x7f00000004c0)=""/48, 0x30}, {&(0x7f0000000500)=""/216, 0xd8}, {&(0x7f0000000600)=""/159, 0x9f}], 0xa, &(0x7f0000000780)=""/144, 0x90}, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000880)=""/65) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:04 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:04 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x400, 0x88a83) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x400, 0x88a83) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) recvmsg$inet_nvme(r1, &(0x7f0000000840)={&(0x7f0000000040)=@can, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/160, 0xa0}, {&(0x7f0000000240)=""/170, 0xaa}, {&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f0000000300)=""/122, 0x7a}, {&(0x7f0000000380)=""/122, 0x7a}, {&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f0000000400)=""/181, 0xb5}, {&(0x7f00000004c0)=""/48, 0x30}, {&(0x7f0000000500)=""/216, 0xd8}, {&(0x7f0000000600)=""/159, 0x9f}], 0xa, &(0x7f0000000780)=""/144, 0x90}, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000880)=""/65) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:04 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:04 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x400, 0x88a83) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) recvmsg$inet_nvme(r1, &(0x7f0000000840)={&(0x7f0000000040)=@can, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/160, 0xa0}, {&(0x7f0000000240)=""/170, 0xaa}, {&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f0000000300)=""/122, 0x7a}, {&(0x7f0000000380)=""/122, 0x7a}, {&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f0000000400)=""/181, 0xb5}, {&(0x7f00000004c0)=""/48, 0x30}, {&(0x7f0000000500)=""/216, 0xd8}, {&(0x7f0000000600)=""/159, 0x9f}], 0xa, &(0x7f0000000780)=""/144, 0x90}, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000880)=""/65) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:04 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x400, 0x88a83) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) recvmsg$inet_nvme(r1, &(0x7f0000000840)={&(0x7f0000000040)=@can, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/160, 0xa0}, {&(0x7f0000000240)=""/170, 0xaa}, {&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f0000000300)=""/122, 0x7a}, {&(0x7f0000000380)=""/122, 0x7a}, {&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f0000000400)=""/181, 0xb5}, {&(0x7f00000004c0)=""/48, 0x30}, {&(0x7f0000000500)=""/216, 0xd8}, {&(0x7f0000000600)=""/159, 0x9f}], 0xa, &(0x7f0000000780)=""/144, 0x90}, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000880)=""/65) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x400, 0x88a83) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) (async) recvmsg$inet_nvme(r1, &(0x7f0000000840)={&(0x7f0000000040)=@can, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/160, 0xa0}, {&(0x7f0000000240)=""/170, 0xaa}, {&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f0000000300)=""/122, 0x7a}, {&(0x7f0000000380)=""/122, 0x7a}, {&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f0000000400)=""/181, 0xb5}, {&(0x7f00000004c0)=""/48, 0x30}, {&(0x7f0000000500)=""/216, 0xd8}, {&(0x7f0000000600)=""/159, 0x9f}], 0xa, &(0x7f0000000780)=""/144, 0x90}, 0x2) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)) (async) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000880)=""/65) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) 14:12:04 executing program 0: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x5, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="e1f744aa62b28e47c61d703830576d3624ab001b2aa7b3adfa50cc83b8b4ffe92d270ee43c0a7edb6f06e39ed9347d5692217aeb50b3a7d8bee427e0c269a4dd0f2d38e3896a4481b0052a0ed4bd84a4d3eb962fe42058a2277175dc7b3d3101afcbd1339d62fc2807eadb5f86fbb5f9493e43dd763506a8157ab03c4f6bcd3761a286edf95331f5676f45f924da27885bdf71b6dcc28c08ba63b22a14d593786cc990e64e872e117f9bdb243c034f427f492a5c76e63ded2bbc61b7d42a623f3d45b897506feedd395e402a984014da75108a00ac5a61abbd46912f0c4cbb92adf7349288ff", @ANYRES16=r0, @ANYBLOB="0100000000000000000014000000"], 0x14}}, 0x0) 14:12:04 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @multicast2, 0x0}, &(0x7f0000000080)=0xc) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000ff0300fbdbdf25e4f2aba20000000000", @ANYRES32=r2, @ANYBLOB="0c000180060002000e6baf00020008000000000000009d82f8b919ad06bf050cbc0a3800"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c080}, 0x20004080) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:04 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, 0xffffffffffffffff, 0x20ff6000) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000040)={0x0, 0x4, 0x9}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x3ff) 14:12:04 executing program 0: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x5, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) (async, rerun: 32) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="e1f744aa62b28e47c61d703830576d3624ab001b2aa7b3adfa50cc83b8b4ffe92d270ee43c0a7edb6f06e39ed9347d5692217aeb50b3a7d8bee427e0c269a4dd0f2d38e3896a4481b0052a0ed4bd84a4d3eb962fe42058a2277175dc7b3d3101afcbd1339d62fc2807eadb5f86fbb5f9493e43dd763506a8157ab03c4f6bcd3761a286edf95331f5676f45f924da27885bdf71b6dcc28c08ba63b22a14d593786cc990e64e872e117f9bdb243c034f427f492a5c76e63ded2bbc61b7d42a623f3d45b897506feedd395e402a984014da75108a00ac5a61abbd46912f0c4cbb92adf7349288ff", @ANYRES16=r0, @ANYBLOB="0100000000000000000014000000"], 0x14}}, 0x0) (rerun: 32) 14:12:04 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, 0xffffffffffffffff, 0x20ff6000) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000040)={0x0, 0x4, 0x9}) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x3ff) 14:12:04 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001280)={r3, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) ptrace$ARCH_SHSTK_DISABLE(0x1e, r3, 0x1, 0x5002) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x10, 0x3, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@IFLA_NET_NS_PID={0x8, 0x13, r5}, @IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x34}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8014}, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r1}, 0x4) 14:12:04 executing program 0: syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$vcsu(&(0x7f0000000080), 0x5, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x5, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="e1f744aa62b28e47c61d703830576d3624ab001b2aa7b3adfa50cc83b8b4ffe92d270ee43c0a7edb6f06e39ed9347d5692217aeb50b3a7d8bee427e0c269a4dd0f2d38e3896a4481b0052a0ed4bd84a4d3eb962fe42058a2277175dc7b3d3101afcbd1339d62fc2807eadb5f86fbb5f9493e43dd763506a8157ab03c4f6bcd3761a286edf95331f5676f45f924da27885bdf71b6dcc28c08ba63b22a14d593786cc990e64e872e117f9bdb243c034f427f492a5c76e63ded2bbc61b7d42a623f3d45b897506feedd395e402a984014da75108a00ac5a61abbd46912f0c4cbb92adf7349288ff", @ANYRES16=r0, @ANYBLOB="0100000000000000000014000000"], 0x14}}, 0x0) 14:12:04 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, 0xffffffffffffffff, 0x20ff6000) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000040)={0x0, 0x4, 0x9}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x3ff) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, 0xffffffffffffffff, 0x20ff6000) (async) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000040)={0x0, 0x4, 0x9}) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x3ff) (async) 14:12:04 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) connect$bt_rfcomm(r1, &(0x7f0000000340), 0xfffffffffffffe43) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={0xffffffffffffffff}, 0x4) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0xfffffff8, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{0x1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)='%-010d \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0xa, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x896c}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0xe}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000180)='syzkaller\x00', 0x3727be6d, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x0, 0x8, 0x2, 0x1}, 0x10, 0x41e3, r2, 0x1, &(0x7f00000004c0)=[r3, r4, 0x1, r5, r6], &(0x7f0000000500)=[{0x5, 0x3, 0x8, 0xb}], 0x10, 0x3}, 0x90) r7 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r8 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r8, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) 14:12:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x48, r1, 0x1, 0x2, 0x0, {0x14}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40400d4}, 0x0) 14:12:04 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async, rerun: 32) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (rerun: 32) connect$bt_rfcomm(r1, &(0x7f0000000340), 0xfffffffffffffe43) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={0xffffffffffffffff}, 0x4) (async) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0xfffffff8, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{0x1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)='%-010d \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0xa, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x896c}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0xe}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000180)='syzkaller\x00', 0x3727be6d, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x0, 0x8, 0x2, 0x1}, 0x10, 0x41e3, r2, 0x1, &(0x7f00000004c0)=[r3, r4, 0x1, r5, r6], &(0x7f0000000500)=[{0x5, 0x3, 0x8, 0xb}], 0x10, 0x3}, 0x90) r7 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) r8 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r8, 0x20ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) 14:12:04 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x237be6a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) read$msr(r2, &(0x7f0000000040)=""/2, 0x2) 14:12:04 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) connect$bt_rfcomm(r1, &(0x7f0000000340), 0xfffffffffffffe43) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={0xffffffffffffffff}, 0x4) (async) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={0xffffffffffffffff}, 0x4) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0xfffffff8, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{0x1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)='%-010d \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0xa, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x896c}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0xe}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000180)='syzkaller\x00', 0x3727be6d, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x0, 0x8, 0x2, 0x1}, 0x10, 0x41e3, r2, 0x1, &(0x7f00000004c0)=[r3, r4, 0x1, r5, r6], &(0x7f0000000500)=[{0x5, 0x3, 0x8, 0xb}], 0x10, 0x3}, 0x90) r7 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) r8 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r8, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) 14:12:04 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x8b02) syz_open_dev$vcsu(&(0x7f0000000000), 0x1f, 0x200000) syz_open_dev$vcsu(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, 0xffffffffffffffff, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:04 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x10001, 0x1) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:04 executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x97d9e86, 0x31da40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x2, '\x00', 0x0, r2, 0x0, 0x0, 0x1}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="08f77bb2c744efbc751524aa4818000000010400000000000001800000106cba3d00000000000000000000778482570c2a6e22e07c6ae707581806b54ef25d578a4634a94b1f3286d45745c79e2a7d5834a8b147dd002e5988c70942ff2c26fa3a71023b583d8f317a23b12b6770c15ef1f6374aeae307130c5b081a76eac5e316d7816a90d713f2164de0247f276b444b100fd408dca223504a020f72f54b0d00000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000690000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xfb, &(0x7f0000000180)=""/251, 0x41100, 0x2, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0x5, 0xba8, 0xfffffff7}, 0x10, 0x14a80, r5, 0x2, &(0x7f0000000380)=[r6], &(0x7f00000003c0)=[{0x2, 0x2, 0x2, 0x8}, {0x3, 0x3, 0x2, 0x2}]}, 0x90) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) syz_open_dev$vcsu(&(0x7f0000000040), 0x401, 0x600000) 14:12:04 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x10001, 0x1) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) syz_open_dev$vcsu(0x0, 0x10001, 0x1) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) 14:12:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x40000000}, 0x300}, 0x0) [ 3268.313637][T22228] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. 14:12:04 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x10001, 0x1) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0xffefff7f}, 0x300}, 0x0) 14:12:05 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000000)=""/247) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1, 0x1}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000180)={0x0, 0x6, 0xc000000000, &(0x7f0000000100)=0x8000}) 14:12:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x48, r1, 0x1, 0x2, 0x0, {0x14}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40400d4}, 0x0) 14:12:05 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f00000014c0), 0x1006, 0x6a0911795302262c) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom$inet_nvme(r2, 0x0, 0x0, 0x2, 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x4, 0xf8, 0x20, 0x0, 0x71, @empty, @loopback, 0x8000, 0x7800, 0x6, 0x2}}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r8, 0x1, 0x0, 0x0, {0x5}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) (async) lstat(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000001340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001300)={&(0x7f0000000200)={0x10f8, r3, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1018, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xefe}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}]}, 0x10f8}, 0x1, 0x0, 0x0, 0x24000800}, 0x20008081) openat$uhid(0xffffffffffffff9c, &(0x7f0000001480), 0x2, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000001440)={'ipvlan1\x00'}) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x48, r1, 0x1, 0x2, 0x0, {0x14}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40400d4}, 0x0) 14:12:05 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000000)=""/247) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1, 0x1}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000180)={0x0, 0x6, 0xc000000000, &(0x7f0000000100)=0x8000}) 14:12:05 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f00000014c0), 0x1006, 0x6a0911795302262c) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) recvfrom$inet_nvme(r2, 0x0, 0x0, 0x2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x4, 0xf8, 0x20, 0x0, 0x71, @empty, @loopback, 0x8000, 0x7800, 0x6, 0x2}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r8, 0x1, 0x0, 0x0, {0x5}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) lstat(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000001340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001300)={&(0x7f0000000200)={0x10f8, r3, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1018, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "23eff0ae56f4c398255ef73e0e46a8a932bfcbb1e920614cd16953e8036f8ca0074ba07a7619e67e269584f11a51f8c6c22a60cb443d18985ad7cb264f1087e181e59471d3c23d7d9d67041d3f1d60eb4796e38d3c6d38e627a177b4aa6a79e2f7adb59d9e4aba2e02d6e6f1810bbe2792a314a419fc3f9208fe441d01a49e5e6ad9d621da907f1dda9dbfa32bb13e2cf92de6906dcc5297caa2f6cc2332dc757ea41f9cb1a1751807fbec52dcaf234ab507a0163c72ce56f02a8f023c1418768bb3aa100fc10792f1f01ccb2eb5a0f438c9f9e28c44b5b07303a57c7a0a10e0ab07fb0ad92c2f6a7958eabca991a049e72b8d448d1c256ace122c993dc560868f97451c2da7d04c59f9b5a479429d1f015503665d060f105f927a3fed65f3119035996a75fc558dd8d0922f4f869a89fb097fdb511a9a86906e33fe3978ac3c82fd05edf7b6fd0fc4fa0fd3fd821dabc0b01789ad4b498686795d33cb4d326a0fa40bdd8e988a4b3d44d00ce4605e58e532d09a2b7e4421bcfbf4ab739649e0ad718180af7d3f7f4457b14851e3a1ac38e5e730a79ad5d02bf85f623be357b86b23ae315749dee846782ea14191443457f985c2bdce42a3bf617f41c1944b1d0490cf535622c905a8f6d75eaf89865af5b5585d7e82b1b3eb9458b24946a37261ede574cc866f963a073b6571b6afd62bcd6e0925ae12c68d57615f26b5d0372c68854307e195478ef1c04b17147e48c8549f56717f80ae7d16a228522246c08a93676a03157572a08aaf4eb4d045d3be0524d64a07e0340315bf69c46dca1e39e295f2a20b79797b9091340f1c7b29ce0f3ec46d6592c4b270fc2fa681a8409bb15e6d7e71e46fe47eb86c7a73f66529da55f5fdefe55cb4902cd37b700066a385ad46b411fd6ab640ed0ffd6c5c0b0b0d3cc5bdc8159956107d0058d8c42292cc56baf2e518733830159f809cce9f4e4fb1ea9e9030058abd2cd80bbb743be20c97240d77fd4579a652014d7fbbdec11934e84f95b5d204ed13d8034de8f134cbd733edfe9f8c50ab37836388729c9f487e53411f1d393830d45e974e2b2e7a4a691fab9ac71ac279a93d0e4900863ecd7fc1b6d53786711df4fc60308b09fc7364af177812719f99e1d0def2167e8a8375f3aeb8c5e87645072a59c5b1f1dbb90ffd027a72598dedd269fb65b7b249c627220fc875478ca82acef96fa30ac0142c6c6b3db1ecbe6815757144a0a9969f17bc748d8143025fbda6d16d85869ac345cbf1527dbd2d46c07c5916fafc702361ff614e988dd9ea3e2687a9a9df0810fb337cbad7da9366e47a83768485d3a95604063c6b9fec9663e1ecb207de445a2c3f8329db6d495ac911386a135a6eb2a7c2a35199ba406e52c6979660684f4299e4668e15fa29b63665bba4fa20d61bfc7fcdc3cfcb84b00e7366bb40debf4e79d59d1f0763b167d215f0db838227000d27eeee3d877c42bb6bd1596604160d20d5e47fdbe07c487ca386e68a80bf54d0e331c82bfd05f74b2b178164776c70f8427a1d4e00f0b1ab78e0089bdcbe49c334ac1540ffb1ee4df81ecb9ce31ace0a2f04a40f04394df442e378b86c5f5f6a9debecec2e0360906797b8052b3dfd091bd1e90022ceb2ae72771741438bbe998fd2d28780d3ecb084e9243433df0515040adac8141d6a1e4d4202d377ee47d568990f7f8a4b8f958bfc2cb71f363117d575eaac501da502dd55e21731b89a4f292e68858ffe762e458139d1b7e01bf95bd4a0bc50fa2d7e4f32f4a26b768b0856ac7b276c0ba6b78e3e80c78ced2dd6ee64e63607fb9a4f8e10355b8f2e70391865cd249121de3fddd06517658fbf241a9eeb33b72dcf4309ea8d37281d4af66f6b9951e0ce90217ff16ed7be4c9788bee1d1547ca93d7aafb48a1d04c0eac4396198578730c41043c70b36152727686ecf732f03795b2b5c411e52dab09990c0053b2a81212d4a54726f81b5dfc30e8115fd5e8bc8e5316e5aae368fafb3f1b8d397d27767d5dc073728081cfd9bbc9c09442b156ea555abe9a1d67efa072824cc802255bc483918bde60d938b1ab340a64afc3ef2600407d09dd64dbf4eee8b62f72eaeafdb4bd44bdb69b2f4fe65417cab26b2d5bef3885c7c3641da411a5baa6d2d953a395405f9dcd4ab7c71bf85118456bbd2f0213a05c3069b354332dc2bd085239d5f7c3c411713a0ea5aafbc41413a6eecebef7747e4bf85183782c76c38a674267f95daa04af5876bb72f5cfe80937b9604f6dc24eb8faeda48165681b09cd92db7b1e16bf469dd5339c0615969fb08ee02da001f4b8e5e15344e565c0dfaac4535c6fdb5a82368e8d16f7440e01ca6ca9ed1d13afdf0400aafa7404a41fb6382131049efbf26a2ffa7f56bd62297c229134ebc10d205c665c0d068b14a44dd03bb9d73778584f14d04362cc8dc845ba2b08a1d9075526cf3f5b89e2d9279ff9f82c89cbfd5c8144bc869c075631afc615d4dc2eb8d1ef4718e8d3813042bf99f8643dcac90af1547ef46243572814b0059879708cc53c2f251d95894910ea14a677b1d67bce33ccd4c18a8c7d720a2c8a03dd11f5949cc3a3984de25c6d038e51a3171b1199b9fa0119356672988a0a2a4cfc8ce42b66b12740ddbd826ec9f214d93345dec777cdbb1377b3cb7b898737d46c117c684974e8c51252f7dfb1de72ee0aa6636b01e1e3a4fed4290c4287b883eb18aedd041b3de41da0e91c0ea37eb1dc33f12bc3cd7926e89119ebda4a1fdc3c4d30cc4e68cc3e157032daac886395616c847e82ceece2f9fdbe14ebe382f18df92c960358bddc53b68f25ea689ed05fc8c122b31300277cd9c8b1e42e4d0f0224af56478c73d813d5747da82d23d6584ebf4a91c902d2a977d3f199a9ff5322d7d830fa91c701312a558c83d943972447d155fdfdda6927fa390cf00014f6f4bba3e0aa28bbbd77ba0f585cf7e147588ac880b3dca9f7b01894c79a6f7d8a38dede75b75e1bb6c3dc395bfc3d9f7aac9a5a2ed33ddd2f91e602ee1be8f438898f86387adbf0e8e624bc1db56f8f0b987d92a666ef1fe49936769ece709d6a6288f25bcc956a001bc26e805eba81163dffc80743cf8e23b3f5aa20c56ee2dc842aecfc19685eee8ef3aae78eb5c52df2eb93ce9171f4c253ac1ff3698cb603a756157a5fe603d258cacd68d93f4ff2dcd87b5324807fa52051b849928445bbe40fa7c5335e1d842c10e98efa155f519dfe270986420bda8575fef09039521fa7557f0ba0fdd6095dce1c11c1c553c68a9b302755cae529cdbef29b36aee1e5602bacf8253d59645bf121d906e83caeb2e208352556bf47b4ddebaf2e72dcbd76115cb7d7ccb58d78e05b546192c3ab5501e9dfca36527e0a2b045e1bf1d618eb296f865e084b72b8eaf6fd02c260a61ef54dba054f9d8b6553a6b64a3f635c1d8e022f6a1a876dc6f5a37a2d1023a4857412ac55ddae9f769e6af89a88f78da3221b3ec87b005be146547412ea48262262e264b9d48bd6925a7f247ec68a314f6f43ed437a4717254b8bc1d1dc7ac0ba0ac1276c338b02b681c71fe091c33b1b7bb58f6e62748d46097dc6ed014621efe53b6b92ac750615460cc3d909e19baedeca75725270115ac8409b8903deb37c3bc3f1ca9de0cff71bd2f80554c6d1cfb731338003a738e05ce4dd03d58f41be215e501b3554d63e14a305f743f73ed362485fb1993ec31d394b93cc4249250c255bfe80da9f6ef54cd1e4fe50e5f6732d32d471913783a85fa788376f98fa50bc8f5d843861637ce1f7f70d27b96561b2d5e7d2b0fd153564bc03be3b86cbe6e61ec5fc140237765bbd3de99a9a5c8353e9ca0a6184726bbffa572639f39417fd50fe6c95aaa241f434606d0712c1a5a89b6d30babd61fb5e682483fdc212aed215badc635ed04dabea4a326f46dd49ac668dbcc643a6c5151225ca61a8012ad373094eec862872f02a4335dfddda4cdcd144d3e19b03f9b02d9b89ae37e47732ad5be77724d3cd6acbaa284f07861981a623e7de60398ac474bc37554793ba3b1a65b3ffa8c79aa89677614981634155f681be38b970e727a3ad1b5695953cfa7bde91cd73b4390c39dbcd2e51f08a7b310cfc56d3fd2d116ea3ba52277081b35488af56cb0542aafaee371944f9260db4b48aed9cbd649ecafeef39c67c4779f7fb4e81f8b1e31113da768af8fcdd43ade682b1a18b27c1a02ed0ad45ef5e7d33b3f06cef8ead600e16590c42eecd7783af06a808538d48e13732ddbd31c6f35290acce3612c5a204b263f749efa0b0f17fc553c125d5f116176a6613cc416c58bc5b6b55ba45200dacaec1ef4b2346024b845f48776ec7643d2d7e05f03d3f319b195fb83d5e78e49c5203df7753cb2fe0d63e8e5a2f592c9d86930fc180dab9026772e116cb51d4654e0a80531f7fca78c8287cfed1086f8388b76b61487cb1893e233eceb6f3fb7cb70ce23463f76fee2111eece8c79a7b2dfabe1de2c5e7cfb9add16db08f01973f87133e727c2e6d49c469fab523787feb3b66af32a746ddfe9efb3dad217a4c242d66899ee9fd9b9947d5515eb2ea4d02cbfbff51229322ec1221096d7f9b6ae7fb6a3c91c9141a54537f097de54f83575e1f6a39b4cd507e7681b8545853fee5efc331ee49ceb3541a9e37b8771a5b2fdeab320c5cf76fd93d79b3781832effb204b2a7202b36632defddb17a4f8733e69266074874446ed12ef18a6b9337d144404faba8d89c6245c6c1b38bc6ad688a14268e596985fc54350edbf609936f0ccd70596de76865c8ab19b63bdd77aed6e60bab36828919655e50efef0b4ba5636691b83e29b1856ac927388ee48f751aeef159770153575545f5ac294823dff1e721fb6fd28254da0b16a19f7dbc40c93014fe123228aac4351e2a53e8aee9483519ac4910f61c0893509b0275b4c018d86ba5945a6e6b7708318e22150a71fe8eb04a7053363e75952f3db846ad60f09727257c7129f10c103d3332c9332f5ecaeb1cb150016fe57415802410741f1825788a98ec9839b74a5bc69c9b5c1c4de6e7806463a609af3562b30921a20facf7e4111453ef36c01d6e8b217855d0402971237ecc234b16e9828ed35cda7aaef17206aefb7939308be987559089115fd403c73f4ae94b50155ae4cd1c110dc52089b1b5c6a3c3c11e656ed6498a1660c6313ef148de0d68bdc5cfb7533879236966dee77fb4cae5230685a16380e188ea66452496f22985e3a014f555d5ba62f1a8b2d618d4e9c7bb21d1f373e2fa5b5993246decbaf0d34123ef32c37c37a0b3a662190a9a244f4752179f0de26bdd0b1cdf9d04389f8d65d6be07c9d7ea2de05cdc98ed5ec10b9c70283dc1ba95d2247e5ef86345b647abcb8f6abac7f6e5b9ce05911f2feb4fa95ef797c8d2b6f580cf572a62a62cb71c5046f5417b78dc0ddc09b9a682673bcfdc3abcbfd021b640c100b26609346eb0a54cd029bddbc236dd1c7053d40aa3326ec804033b2966d21066939a30cae313f76108fb43770c12f4c996b6487d22eb5cdc67fc1bc30287c7b9ecfc39c1a3aedfdfae6d8d60b8c6cd89a335a7af3c5a383152ff248cc963150fa773d1fa91a6d6824c5ecc1af5af78bfaeaa93466e94cf961e98b4e277e35b169a4e7ead94e1615dbf6b12b9e06704c9b6f6f6204f243112fa7e68df9e326be48bda9004fd767fe10c1e72fd5ace6493e0f06b9dd57301fff63b99c9d14fdbbcaf1b3228dc223e0fa5ea1283d5f7229081210e19fb5"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xefe}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}]}, 0x10f8}, 0x1, 0x0, 0x0, 0x24000800}, 0x20008081) openat$uhid(0xffffffffffffff9c, &(0x7f0000001480), 0x2, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000001440)={'ipvlan1\x00'}) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:05 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000000)=""/247) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1, 0x1}) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000180)={0x0, 0x6, 0xc000000000, &(0x7f0000000100)=0x8000}) 14:12:05 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)) syz_open_dev$vcsu(0x0, 0x0, 0x80) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:05 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)) (async) syz_open_dev$vcsu(0x0, 0x0, 0x80) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:05 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)) syz_open_dev$vcsu(0x0, 0x0, 0x80) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:05 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) write$UHID_INPUT2(r2, &(0x7f0000000280)={0xc, {0x96, "ee5491063fe87db489875506904801c107428cf1dc3fbb5869f7fe5a5c110cb85b68a33bcf4c60201b63033fcc26f266705436547eae1fe2d885a172cc63ba51cf072b37e12a21dd04e35c70f7470d81cad45e3eb1368c2e2c95811469cbea63bd816c5ceee80e2c0f3b3ac2e91af1d64e39506fb49bbfd4dde6a8df0e6e6d1f344974019a28be8f4655d446ad31ebaafc910a6b8108"}}, 0x9c) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r8, 0x1, 0x0, 0x0, {0x5}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x64, r3, 0x111, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FLOW={0x6}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_VERSION={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x804) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:05 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async, rerun: 32) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) (rerun: 32) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) (rerun: 64) write$UHID_INPUT2(r2, &(0x7f0000000280)={0xc, {0x96, "ee5491063fe87db489875506904801c107428cf1dc3fbb5869f7fe5a5c110cb85b68a33bcf4c60201b63033fcc26f266705436547eae1fe2d885a172cc63ba51cf072b37e12a21dd04e35c70f7470d81cad45e3eb1368c2e2c95811469cbea63bd816c5ceee80e2c0f3b3ac2e91af1d64e39506fb49bbfd4dde6a8df0e6e6d1f344974019a28be8f4655d446ad31ebaafc910a6b8108"}}, 0x9c) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r8, 0x1, 0x0, 0x0, {0x5}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x64, r3, 0x111, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FLOW={0x6}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_VERSION={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x804) (async, rerun: 32) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) (rerun: 32) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) select(0x40, &(0x7f0000000000)={0x9, 0x0, 0x100000001, 0x5, 0x1, 0x1ff, 0xfff0000000000000}, &(0x7f0000000080)={0x100, 0x8, 0x6, 0x3, 0x80000000, 0x8, 0x20, 0x9}, &(0x7f0000000100)={0x1, 0x8, 0x0, 0x200, 0xc6b, 0x8, 0xa40, 0x9}, &(0x7f0000000180)={r2, r3/1000+10000}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x0, {0x14}}, 0x14}}, 0x0) 14:12:05 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) recvmsg$inet_nvme(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002440)=""/4109, 0x100d}, {&(0x7f0000001380)=""/87, 0x57}, {&(0x7f0000000080)}, {&(0x7f00000000c0)=""/72, 0x48}, {&(0x7f0000001180)=""/190, 0xbe}, {&(0x7f0000001240)=""/56, 0x38}, {&(0x7f0000001280)=""/41, 0x29}], 0x7}, 0x40010001) 14:12:05 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) (async) write$UHID_INPUT2(r2, &(0x7f0000000280)={0xc, {0x96, "ee5491063fe87db489875506904801c107428cf1dc3fbb5869f7fe5a5c110cb85b68a33bcf4c60201b63033fcc26f266705436547eae1fe2d885a172cc63ba51cf072b37e12a21dd04e35c70f7470d81cad45e3eb1368c2e2c95811469cbea63bd816c5ceee80e2c0f3b3ac2e91af1d64e39506fb49bbfd4dde6a8df0e6e6d1f344974019a28be8f4655d446ad31ebaafc910a6b8108"}}, 0x9c) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r8, 0x1, 0x0, 0x0, {0x5}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x64, r3, 0x111, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FLOW={0x6}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_VERSION={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x804) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:05 executing program 4: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) recvmsg$inet_nvme(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002440)=""/4109, 0x100d}, {&(0x7f0000001380)=""/87, 0x57}, {&(0x7f0000000080)}, {&(0x7f00000000c0)=""/72, 0x48}, {&(0x7f0000001180)=""/190, 0xbe}, {&(0x7f0000001240)=""/56, 0x38}, {&(0x7f0000001280)=""/41, 0x29}], 0x7}, 0x40010001) 14:12:05 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000040)=""/137) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x200, 0x20840) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f00000002c0)=""/63, &(0x7f0000000300)=0x3f) r2 = syz_open_dev$vcsu(&(0x7f0000000240), 0x1f, 0x80000) ioctl$VHOST_VDPA_GET_VRING_NUM(r2, 0x8002af76, &(0x7f0000000280)) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid\x00') ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000100), 0x7fffffff, 0x10b240) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f00000001c0)={0x0, 0x2, 0x3, &(0x7f0000000180)=0x1}) 14:12:05 executing program 4: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) recvmsg$inet_nvme(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002440)=""/4109, 0x100d}, {&(0x7f0000001380)=""/87, 0x57}, {&(0x7f0000000080)}, {&(0x7f00000000c0)=""/72, 0x48}, {&(0x7f0000001180)=""/190, 0xbe}, {&(0x7f0000001240)=""/56, 0x38}, {&(0x7f0000001280)=""/41, 0x29}], 0x7}, 0x40010001) 14:12:05 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000040)=""/137) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x200, 0x20840) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) (async) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f00000002c0)=""/63, &(0x7f0000000300)=0x3f) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000240), 0x1f, 0x80000) ioctl$VHOST_VDPA_GET_VRING_NUM(r2, 0x8002af76, &(0x7f0000000280)) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid\x00') (async) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) r4 = syz_open_dev$vcsu(&(0x7f0000000100), 0x7fffffff, 0x10b240) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f00000001c0)={0x0, 0x2, 0x3, &(0x7f0000000180)=0x1}) 14:12:05 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs\x00', 0x1ff) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x11, r1, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) 14:12:05 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000040)=""/137) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x200, 0x20840) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f00000002c0)=""/63, &(0x7f0000000300)=0x3f) (async, rerun: 64) r2 = syz_open_dev$vcsu(&(0x7f0000000240), 0x1f, 0x80000) (rerun: 64) ioctl$VHOST_VDPA_GET_VRING_NUM(r2, 0x8002af76, &(0x7f0000000280)) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid\x00') (async, rerun: 64) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) (rerun: 64) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000100), 0x7fffffff, 0x10b240) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f00000001c0)={0x0, 0x2, 0x3, &(0x7f0000000180)=0x1}) 14:12:05 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs\x00', 0x1ff) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x11, r1, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs\x00', 0x1ff) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x11, r1, 0x0) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) 14:12:05 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs\x00', 0x1ff) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x11, r1, 0x0) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) 14:12:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) select(0x40, &(0x7f0000000000)={0x9, 0x0, 0x100000001, 0x5, 0x1, 0x1ff, 0xfff0000000000000}, &(0x7f0000000080)={0x100, 0x8, 0x6, 0x3, 0x80000000, 0x8, 0x20, 0x9}, &(0x7f0000000100)={0x1, 0x8, 0x0, 0x200, 0xc6b, 0x8, 0xa40, 0x9}, &(0x7f0000000180)={r2, r3/1000+10000}) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x0, {0x14}}, 0x14}}, 0x0) 14:12:05 executing program 1: r0 = syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000000000000) 14:12:05 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x10000, 0x20401) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r1, 0x91) 14:12:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) select(0x40, &(0x7f0000000000)={0x9, 0x0, 0x100000001, 0x5, 0x1, 0x1ff, 0xfff0000000000000}, &(0x7f0000000080)={0x100, 0x8, 0x6, 0x3, 0x80000000, 0x8, 0x20, 0x9}, &(0x7f0000000100)={0x1, 0x8, 0x0, 0x200, 0xc6b, 0x8, 0xa40, 0x9}, &(0x7f0000000180)={r2, r3/1000+10000}) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x0, {0x14}}, 0x14}}, 0x0) 14:12:05 executing program 1: r0 = syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000000000000) 14:12:05 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x10000, 0x20401) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r1, 0x91) 14:12:05 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs\x00', 0x1ff) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x11, r1, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) 14:12:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB="57ed1356ec2e20d0", @ANYRESDEC, @ANYBLOB="0100000000000000000014000000"], 0x14}}, 0x20044854) 14:12:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0xffffff7f}, 0x300}, 0x0) 14:12:06 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0xffffffae) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:06 executing program 1: r0 = syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) (async, rerun: 32) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000000000000) (rerun: 32) 14:12:06 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x10000, 0x20401) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r1, 0x91) 14:12:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB="57ed1356ec2e20d0", @ANYRESDEC, @ANYBLOB="0100000000000000000014000000"], 0x14}}, 0x20044854) 14:12:06 executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r3, 0x1, 0x0, 0x0, {0x7}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%ps \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x2d, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffc00}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x6, 0xd, 0x8, 0x7, 0x4}, @alu={0x4, 0x0, 0x1, 0x6, 0x838d95f1936576bb, 0x40, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xc}, @generic={0x40, 0x4, 0x7, 0x4, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @printk={@lu}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x3f, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)=[r1, r6, r0, r0, r0, r0, r0], &(0x7f0000000380)=[{0x2, 0x3, 0xf, 0x5}, {0x3, 0x4, 0xd, 0xc}, {0x4, 0x2, 0xc}, {0x3, 0x2, 0x2, 0x4}], 0x10, 0x3}, 0x90) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) r7 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$HCIINQUIRY(r7, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x1, "6bb42d", 0x4, 0x20}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r7, 0x0) 14:12:06 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1000, 0x1}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@ipv4_newroute={0x24, 0x18, 0x90b83253ecd83317, 0x0, 0x0, {}, [@RTA_METRICS={0x5, 0x8, 0x0, 0x1, "98"}]}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_setlink={0x90, 0x13, 0x100, 0x70bd2b, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x40000, 0x1080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}, @IFLA_BROADCAST={0xa}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_macvtap\x00'}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x7edc3}, @IFLA_TXQLEN={0x8, 0xd, 0xfffff97a}, @IFLA_PHYS_SWITCH_ID={0x11, 0x24, "383c77fdc2411c20eb099ddd68"}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x3f}, @IFLA_NET_NS_PID={0x8, 0x13, r1}]}, 0x90}, 0x1, 0x0, 0x0, 0x8045}, 0x8000) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x2, 0x200703) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000000)={0x1}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r3, 0x0) 14:12:06 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1000, 0x1}) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:06 executing program 4: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@ipv4_newroute={0x24, 0x18, 0x90b83253ecd83317, 0x0, 0x0, {}, [@RTA_METRICS={0x5, 0x8, 0x0, 0x1, "98"}]}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_setlink={0x90, 0x13, 0x100, 0x70bd2b, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x40000, 0x1080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}, @IFLA_BROADCAST={0xa}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_macvtap\x00'}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x7edc3}, @IFLA_TXQLEN={0x8, 0xd, 0xfffff97a}, @IFLA_PHYS_SWITCH_ID={0x11, 0x24, "383c77fdc2411c20eb099ddd68"}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x3f}, @IFLA_NET_NS_PID={0x8, 0x13, r1}]}, 0x90}, 0x1, 0x0, 0x0, 0x8045}, 0x8000) syz_open_dev$vcsu(&(0x7f0000000140), 0x2, 0x200703) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x2, 0x200703) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000000)={0x1}) (async) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000000)={0x1}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r3, 0x0) 14:12:06 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000000)=""/20) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:06 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1000, 0x1}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1000, 0x1}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@ipv4_newroute={0x24, 0x18, 0x90b83253ecd83317, 0x0, 0x0, {}, [@RTA_METRICS={0x5, 0x8, 0x0, 0x1, "98"}]}, 0x24}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = getpid() sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_setlink={0x90, 0x13, 0x100, 0x70bd2b, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x40000, 0x1080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}, @IFLA_BROADCAST={0xa}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_macvtap\x00'}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x7edc3}, @IFLA_TXQLEN={0x8, 0xd, 0xfffff97a}, @IFLA_PHYS_SWITCH_ID={0x11, 0x24, "383c77fdc2411c20eb099ddd68"}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x3f}, @IFLA_NET_NS_PID={0x8, 0x13, r1}]}, 0x90}, 0x1, 0x0, 0x0, 0x8045}, 0x8000) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x2, 0x200703) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x0) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000000)={0x1}) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r3, 0x0) 14:12:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008050) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x24, 0x1000, 0x81, 0x97300f9, 0x1001, 0x1, 0x181, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000740)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="118100200000000000", @ANYRES32, @ANYBLOB], 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000b40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000b80)={0x470, r1, 0x8, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x108, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xf7, 0x4, "983d2604cfbb7ff6cd9094de57dbb638b73e0303da2dad6bd982f48202912b2d24b3e72ac9f6f825150570e92c711a2deb41066ae57e71b06cd867ceea6da61aa1092678ea720187c1a7b1bee3c2877effb83911f0e200fe398e7f9fe1169af4cd14e9eea8023e2e7b65d28c1bed8622005ff8b685fbcd3d6ec4d3df09786b8fc732690866a088731cb82f97dd3a165af3b5c56ef1789193255dd27c322de4c4df720fe2521132900e18e3f52126a11c457546885fa375d82c5b2d758a5da56be31a2948ec1c516c2d1e1eac8e35922dd105452e3b9958fb297be10a133c646232b459088099d202162f52b0594f43a09f898e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x8}, @ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_EEE_MODES_OURS={0x2fc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x17}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'+[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x8e, 0x5, "5eab054c8af1eeb5ce5274b7f9e9a210aad284720c7734327340c4a02ce3b382b0217f37c20b81ac8530cd34087e3ac77848847244cf385ac5dd446442bc0e775327fdbb05a7cbe5aed4db158acf6f913e8ff847401ea530a0ab80d96820a4d5743e954ee0d2e3a03e0f763f2fca90fce113ec6be82c4256974b408b9846aa41bfd3e440abdb0deea00d"}, @ETHTOOL_A_BITSET_BITS={0xb0, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffc01}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'gtp\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xc6, 0x4, "17e9145a020d2c862387af613e2145873ef4c3dc13998d1b65a5922f2580514c393ec276cba3c7b4cd5cf7428dc7e045b6d638bc3630f1e6f617d053227555e82f0ca38dfd9e25524b4c70f55002e39ab65f88c137e6c40726e6adebd044a498d12a9b2cb77da58dd6c727a05cbcc1466b29f798e58a1de11d1aeac00dd6661b807d684405e63644f6c42d73f45013b2469a4785caa241b289d86bc4a4fd7318efe8cb882dc4cfdb2ccaa2f951c5c8be118d8a65e198db6ed7ebf680825bd5dbe654"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x7d, 0x4, "88f9f7e6ca81b52cc005e088a9d652e6b1902431f3b98d19360e1213c3b0f552d8c2ba02fd93473bafdb0d4c70ae02f81f4329be3954ef98a0ce9f0d999b52ce9b00e155f4050e4235edfdcf15ac926643d932c0a4816f8f19fbde59d93c85877ebdb2ea4e46992fdc7362fb09dbcbeebc07d62ad3854c9d06"}]}, @ETHTOOL_A_EEE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xfffffff9}]}, 0x470}, 0x1, 0x0, 0x0, 0x20044094}, 0x48840) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r6 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r6, 0x0) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000780)={'wpan1\x00'}) r9 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/user\x00') ioctl$NS_GET_USERNS(r9, 0xb701, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="04042dbd7000ffdb9f25ecffffff08000a00421319889e42e5db", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r6, 0x0) r10 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r10, 0xffffffffffffffff}, 0x4) r12 = syz_open_dev$vcsu(&(0x7f0000000700), 0x0, 0x0) write$bt_hci(r12, 0x0, 0x25) getsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000380)={@local, @empty, 0x0}, &(0x7f00000003c0)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="8510000005000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000a50000261acae9dc985a2f0d95e00018170000", @ANYRES32=r12, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000240)='syzkaller\x00', 0xffffff7e, 0xeb, &(0x7f0000000280)=""/235, 0x40f00, 0x40, '\x00', r13, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x3, 0x7, 0x81}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000440), &(0x7f0000000480)=[{0x3, 0x4, 0xe, 0xb}, {0x1, 0x4, 0xb, 0x7}], 0x10, 0x1000}, 0x90) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0xcb1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r10, 0x0) 14:12:06 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0xb0, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x100}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/251, 0xfb, 0x1, 0x9}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x400}, @acquire_done={0x40106309, 0x3}, @request_death={0x400c630e, 0x2}, @clear_death={0x400c630f, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x3}, @increfs={0x40046304, 0x3}], 0x32, 0x0, &(0x7f0000000300)="e8ca7fd7711219b29bc98218c1ba0b0dc8dc39d46dbc683842e26aea50cf3d1393b7c96ab5d34454383ed4288900da7247e1"}) 14:12:06 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000100)={0xffffffffffffffff}) readlinkat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/190, 0xbe) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0xfffffffffffffffe, 0xb489aed95b7c2f0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f00000001c0)=""/53) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008050) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x24, 0x1000, 0x81, 0x97300f9, 0x1001, 0x1, 0x181, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000740)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="118100200000000000", @ANYRES32, @ANYBLOB], 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000b40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000b80)={0x470, r1, 0x8, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x108, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xf7, 0x4, "983d2604cfbb7ff6cd9094de57dbb638b73e0303da2dad6bd982f48202912b2d24b3e72ac9f6f825150570e92c711a2deb41066ae57e71b06cd867ceea6da61aa1092678ea720187c1a7b1bee3c2877effb83911f0e200fe398e7f9fe1169af4cd14e9eea8023e2e7b65d28c1bed8622005ff8b685fbcd3d6ec4d3df09786b8fc732690866a088731cb82f97dd3a165af3b5c56ef1789193255dd27c322de4c4df720fe2521132900e18e3f52126a11c457546885fa375d82c5b2d758a5da56be31a2948ec1c516c2d1e1eac8e35922dd105452e3b9958fb297be10a133c646232b459088099d202162f52b0594f43a09f898e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x8}, @ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_EEE_MODES_OURS={0x2fc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x17}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'+[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x8e, 0x5, "5eab054c8af1eeb5ce5274b7f9e9a210aad284720c7734327340c4a02ce3b382b0217f37c20b81ac8530cd34087e3ac77848847244cf385ac5dd446442bc0e775327fdbb05a7cbe5aed4db158acf6f913e8ff847401ea530a0ab80d96820a4d5743e954ee0d2e3a03e0f763f2fca90fce113ec6be82c4256974b408b9846aa41bfd3e440abdb0deea00d"}, @ETHTOOL_A_BITSET_BITS={0xb0, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffc01}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'gtp\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xc6, 0x4, "17e9145a020d2c862387af613e2145873ef4c3dc13998d1b65a5922f2580514c393ec276cba3c7b4cd5cf7428dc7e045b6d638bc3630f1e6f617d053227555e82f0ca38dfd9e25524b4c70f55002e39ab65f88c137e6c40726e6adebd044a498d12a9b2cb77da58dd6c727a05cbcc1466b29f798e58a1de11d1aeac00dd6661b807d684405e63644f6c42d73f45013b2469a4785caa241b289d86bc4a4fd7318efe8cb882dc4cfdb2ccaa2f951c5c8be118d8a65e198db6ed7ebf680825bd5dbe654"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x7d, 0x4, "88f9f7e6ca81b52cc005e088a9d652e6b1902431f3b98d19360e1213c3b0f552d8c2ba02fd93473bafdb0d4c70ae02f81f4329be3954ef98a0ce9f0d999b52ce9b00e155f4050e4235edfdcf15ac926643d932c0a4816f8f19fbde59d93c85877ebdb2ea4e46992fdc7362fb09dbcbeebc07d62ad3854c9d06"}]}, @ETHTOOL_A_EEE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xfffffff9}]}, 0x470}, 0x1, 0x0, 0x0, 0x20044094}, 0x48840) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r6 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r6, 0x0) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000780)={'wpan1\x00'}) r9 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/user\x00') ioctl$NS_GET_USERNS(r9, 0xb701, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="04042dbd7000ffdb9f25ecffffff08000a00421319889e42e5db", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r6, 0x0) r10 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r10, 0xffffffffffffffff}, 0x4) r12 = syz_open_dev$vcsu(&(0x7f0000000700), 0x0, 0x0) write$bt_hci(r12, 0x0, 0x25) getsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000380)={@local, @empty, 0x0}, &(0x7f00000003c0)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="8510000005000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000a50000261acae9dc985a2f0d95e00018170000", @ANYRES32=r12, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000240)='syzkaller\x00', 0xffffff7e, 0xeb, &(0x7f0000000280)=""/235, 0x40f00, 0x40, '\x00', r13, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x3, 0x7, 0x81}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000440), &(0x7f0000000480)=[{0x3, 0x4, 0xe, 0xb}, {0x1, 0x4, 0xb, 0x7}], 0x10, 0x1000}, 0x90) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0xcb1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r10, 0x0) 14:12:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB="57ed1356ec2e20d0", @ANYRESDEC, @ANYBLOB="0100000000000000000014000000"], 0x14}}, 0x20044854) socket$nl_generic(0x10, 0x3, 0x10) (async) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB="57ed1356ec2e20d0", @ANYRESDEC, @ANYBLOB="0100000000000000000014000000"], 0x14}}, 0x20044854) (async) 14:12:06 executing program 4: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0xb0, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x100}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/251, 0xfb, 0x1, 0x9}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x400}, @acquire_done={0x40106309, 0x3}, @request_death={0x400c630e, 0x2}, @clear_death={0x400c630f, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x3}, @increfs={0x40046304, 0x3}], 0x32, 0x0, &(0x7f0000000300)="e8ca7fd7711219b29bc98218c1ba0b0dc8dc39d46dbc683842e26aea50cf3d1393b7c96ab5d34454383ed4288900da7247e1"}) 14:12:06 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r1, 0x0) 14:12:06 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0xb0, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x100}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/251, 0xfb, 0x1, 0x9}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x400}, @acquire_done={0x40106309, 0x3}, @request_death={0x400c630e, 0x2}, @clear_death={0x400c630f, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x3}, @increfs={0x40046304, 0x3}], 0x32, 0x0, &(0x7f0000000300)="e8ca7fd7711219b29bc98218c1ba0b0dc8dc39d46dbc683842e26aea50cf3d1393b7c96ab5d34454383ed4288900da7247e1"}) 14:12:06 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000100)={0xffffffffffffffff}) readlinkat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/190, 0xbe) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0xfffffffffffffffe, 0xb489aed95b7c2f0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f00000001c0)=""/53) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:06 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r1, 0x0) 14:12:06 executing program 1: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000100)={0xffffffffffffffff}) (async) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000100)={0xffffffffffffffff}) readlinkat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/190, 0xbe) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0xfffffffffffffffe, 0xb489aed95b7c2f0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f00000001c0)=""/53) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:06 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x3, 0x242601) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:06 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r1, 0x0) 14:12:06 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000080)={0x2, 0x4, "e33f70", 0x0, 0x4}) 14:12:06 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x3, 0x242601) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:06 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 14:12:06 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000080)={0x2, 0x4, "e33f70", 0x0, 0x4}) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x20ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000080)={0x2, 0x4, "e33f70", 0x0, 0x4}) (async) 14:12:06 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x3, 0x242601) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:06 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 14:12:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0xfffffff0}, 0x300}, 0x0) 14:12:07 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) getdents64(r0, &(0x7f0000000000)=""/126, 0x7e) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000080)=0x11fc588) 14:12:07 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x20ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000080)={0x2, 0x4, "e33f70", 0x0, 0x4}) 14:12:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1f}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x60, r1, 0x0, 0x70bd2a, 0x0, {0x14}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x60000080) 14:12:07 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 14:12:07 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0xffffffffffffffff) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r1, 0x0) 14:12:07 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) getdents64(r0, &(0x7f0000000000)=""/126, 0x7e) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000080)=0x11fc588) 14:12:07 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) write$UHID_DESTROY(r2, &(0x7f0000000040), 0x4) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x80000) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000280)=""/189) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x7) 14:12:07 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) getdents64(r0, &(0x7f0000000000)=""/126, 0x7e) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000080)=0x11fc588) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) getdents64(r0, &(0x7f0000000000)=""/126, 0x7e) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000080)=0x11fc588) (async) 14:12:07 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0xffffffffffffffff) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r1, 0x0) 14:12:07 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) (async) write$UHID_DESTROY(r2, &(0x7f0000000040), 0x4) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x80000) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000280)=""/189) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x7) 14:12:07 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000000)={0x1, 0x2}) 14:12:07 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) write$UHID_DESTROY(r2, &(0x7f0000000040), 0x4) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x80000) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000280)=""/189) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x7) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) (async) write$UHID_DESTROY(r2, &(0x7f0000000040), 0x4) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x80000) (async) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000280)=""/189) (async) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x7) (async) 14:12:07 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0xffffffffffffffff) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r1, 0x0) 14:12:07 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000000)={0x1, 0x2}) 14:12:07 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r1, 0x0) 14:12:07 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000000)={0x4}) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r3 = getpid() ioprio_set$pid(0x1, r3, 0x2007) 14:12:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1f}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x60, r1, 0x0, 0x70bd2a, 0x0, {0x14}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x60000080) 14:12:07 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000000)={0x1, 0x2}) 14:12:07 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x0) 14:12:07 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000000)={0x4}) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r3 = getpid() ioprio_set$pid(0x1, r3, 0x2007) 14:12:07 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0xfffffffffffffffc, 0x701203) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:07 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x0) 14:12:07 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) r3 = getpid() ioprio_set$pid(0x1, r3, 0x2007) 14:12:07 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0xfffffffffffffffc, 0x701203) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:07 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x0) 14:12:07 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100026bd7000fcdbdf25310000000c00990005000000670000000800db00", @ANYRES32=r0, @ANYBLOB="0800f2ff11092a828056e02cf8", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:07 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0xfffffffffffffffc, 0x701203) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0xfffffffffffffffc, 0x701203) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) 14:12:07 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100026bd7000fcdbdf25310000000c00990005000000670000000800db00", @ANYRES32=r0, @ANYBLOB="0800f2ff11092a828056e02cf8", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:07 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r1, 0x0) 14:12:07 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r1 = getpid() r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x6c, r2, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048880) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000000)={r1}) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x2, 0x11, r0, 0x3f) 14:12:07 executing program 3: r0 = syz_open_dev$vcsu(0x0, 0x0, 0x2) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r1, 0x0) 14:12:07 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100026bd7000fcdbdf25310000000c00990005000000670000000800db00", @ANYRES32=r0, @ANYBLOB="0800f2ff11092a828056e02cf8", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) (async, rerun: 64) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (rerun: 64) 14:12:07 executing program 3: r0 = syz_open_dev$vcsu(0x0, 0x0, 0x2) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r1, 0x0) 14:12:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x60ffffffffff}, 0x300}, 0x0) 14:12:07 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r1 = getpid() (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x6c, r2, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048880) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000000)={r1}) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x2, 0x11, r0, 0x3f) 14:12:07 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x4, 0x11, r0, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r2, 0x8002af76, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x1, 0x11, r3, 0x400) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) 14:12:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1f}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x60, r1, 0x0, 0x70bd2a, 0x0, {0x14}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x60000080) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) (async) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1f}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x60, r1, 0x0, 0x70bd2a, 0x0, {0x14}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x60000080) (async) 14:12:07 executing program 3: r0 = syz_open_dev$vcsu(0x0, 0x0, 0x2) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r1, 0x0) 14:12:07 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x4, 0x11, r0, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) (async) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r2, 0x8002af76, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x2, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x1, 0x11, r3, 0x400) (async) mmap$binder(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x1, 0x11, r3, 0x400) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) 14:12:07 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r1 = getpid() r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x6c, r2, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048880) (async) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000000)={r1}) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x2, 0x11, r0, 0x3f) 14:12:07 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r1, 0x0) 14:12:07 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xf4, 0x0, &(0x7f0000000280)=[@register_looper, @acquire_done={0x40106309, 0x1}, @request_death, @request_death={0x400c630e, 0x1}, @release, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000000000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000000000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="00000000ff01000000000000"], &(0x7f0000000080)={0x0, 0x18, 0x30}}, 0x1000}, @increfs_done={0x40106308, 0x2}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x1, 0x1, 0x21}, @ptr={0x70742a85, 0xca, &(0x7f0000000180)=""/187, 0xbb, 0x0, 0x3e}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0x2}], 0x2c, 0x0, &(0x7f0000000380)="26e9c9a834e77f8735e152b300624d903a50427126c8ef33970802993dacfcd28402760116957e96516ca9e6"}) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:07 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x4, 0x11, r0, 0x0) (async) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r2, 0x8002af76, &(0x7f0000000100)) (async, rerun: 32) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x2, 0x0) (rerun: 32) mmap$binder(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x1, 0x11, r3, 0x400) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) 14:12:07 executing program 3: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x0) 14:12:07 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xf4, 0x0, &(0x7f0000000280)=[@register_looper, @acquire_done={0x40106309, 0x1}, @request_death, @request_death={0x400c630e, 0x1}, @release, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000000000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000000000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="00000000ff01000000000000"], &(0x7f0000000080)={0x0, 0x18, 0x30}}, 0x1000}, @increfs_done={0x40106308, 0x2}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x1, 0x1, 0x21}, @ptr={0x70742a85, 0xca, &(0x7f0000000180)=""/187, 0xbb, 0x0, 0x3e}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0x2}], 0x2c, 0x0, &(0x7f0000000380)="26e9c9a834e77f8735e152b300624d903a50427126c8ef33970802993dacfcd28402760116957e96516ca9e6"}) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xf4, 0x0, &(0x7f0000000280)=[@register_looper, @acquire_done={0x40106309, 0x1}, @request_death, @request_death={0x400c630e, 0x1}, @release, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000000000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000000000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="00000000ff01000000000000"], &(0x7f0000000080)={0x0, 0x18, 0x30}}, 0x1000}, @increfs_done={0x40106308, 0x2}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x1, 0x1, 0x21}, @ptr={0x70742a85, 0xca, &(0x7f0000000180)=""/187, 0xbb, 0x0, 0x3e}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0x2}], 0x2c, 0x0, &(0x7f0000000380)="26e9c9a834e77f8735e152b300624d903a50427126c8ef33970802993dacfcd28402760116957e96516ca9e6"}) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) 14:12:07 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r3 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000000)={r3}) 14:12:07 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xf4, 0x0, &(0x7f0000000280)=[@register_looper, @acquire_done={0x40106309, 0x1}, @request_death, @request_death={0x400c630e, 0x1}, @release, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000000000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000000000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="00000000ff01000000000000"], &(0x7f0000000080)={0x0, 0x18, 0x30}}, 0x1000}, @increfs_done={0x40106308, 0x2}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x1, 0x1, 0x21}, @ptr={0x70742a85, 0xca, &(0x7f0000000180)=""/187, 0xbb, 0x0, 0x3e}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0x2}], 0x2c, 0x0, &(0x7f0000000380)="26e9c9a834e77f8735e152b300624d903a50427126c8ef33970802993dacfcd28402760116957e96516ca9e6"}) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xf4, 0x0, &(0x7f0000000280)=[@register_looper, @acquire_done={0x40106309, 0x1}, @request_death, @request_death={0x400c630e, 0x1}, @release, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000000000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000000000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="00000000ff01000000000000"], &(0x7f0000000080)={0x0, 0x18, 0x30}}, 0x1000}, @increfs_done={0x40106308, 0x2}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x1, 0x1, 0x21}, @ptr={0x70742a85, 0xca, &(0x7f0000000180)=""/187, 0xbb, 0x0, 0x3e}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0x2}], 0x2c, 0x0, &(0x7f0000000380)="26e9c9a834e77f8735e152b300624d903a50427126c8ef33970802993dacfcd28402760116957e96516ca9e6"}) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) 14:12:07 executing program 3: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x0) 14:12:08 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r3 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000000)={r3}) (async) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000000)={r3}) 14:12:08 executing program 3: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x0) 14:12:08 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:08 executing program 0: getitimer(0x1, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x80, 0x1, 0x20, 0x10, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x1, 0x3, 0xfff}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@multicast1, @broadcast, 0x0}, &(0x7f0000000200)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x74, r0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000380)={@remote, @local}, &(0x7f00000003c0)=0xc) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x14, r0, 0x1, 0x0, 0x0, {0x14}}, 0x14}}, 0x0) 14:12:08 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r1, 0x0) 14:12:08 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r3 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000000)={r3}) 14:12:08 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:08 executing program 0: getitimer(0x1, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x80, 0x1, 0x20, 0x10, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x1, 0x3, 0xfff}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@multicast1, @broadcast, 0x0}, &(0x7f0000000200)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x74, r0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000380)={@remote, @local}, &(0x7f00000003c0)=0xc) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x14, r0, 0x1, 0x0, 0x0, {0x14}}, 0x14}}, 0x0) 14:12:08 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x20540) syz_open_dev$vcsu(0x0, 0xde, 0x20400) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={0x1}) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000000)=""/196) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:08 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r1, 0x0) 14:12:08 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:08 executing program 0: getitimer(0x1, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x80, 0x1, 0x20, 0x10, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x1, 0x3, 0xfff}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@multicast1, @broadcast, 0x0}, &(0x7f0000000200)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x74, r0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000380)={@remote, @local}, &(0x7f00000003c0)=0xc) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x14, r0, 0x1, 0x0, 0x0, {0x14}}, 0x14}}, 0x0) getitimer(0x1, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x80, 0x1, 0x20, 0x10, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x1, 0x3, 0xfff}}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@multicast1, @broadcast}, &(0x7f0000000200)=0xc) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x74, r0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000380)={@remote, @local}, &(0x7f00000003c0)=0xc) (async) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x14, r0, 0x1, 0x0, 0x0, {0x14}}, 0x14}}, 0x0) (async) 14:12:08 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x20540) syz_open_dev$vcsu(0x0, 0xde, 0x20400) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={0x1}) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000000)=""/196) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x20540) (async) syz_open_dev$vcsu(0x0, 0xde, 0x20400) (async) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={0x1}) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000000)=""/196) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) 14:12:08 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000000), 0x4) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x1f9a) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:08 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r1, 0x0) 14:12:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="00bba0fe1400000000000000000007000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000"], 0x14}}, 0x0) 14:12:08 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x20540) syz_open_dev$vcsu(0x0, 0xde, 0x20400) (async) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={0x1}) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000000)=""/196) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x777ee63fa3ff}, 0x300}, 0x0) 14:12:08 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r1, 0x0) 14:12:08 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000000), 0x4) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x1f9a) (async) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x1f9a) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:08 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r1, 0x0) 14:12:08 executing program 1: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1884, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000140000000c00018008000100", @ANYRES32=r4, @ANYBLOB="dbe1fdaf91ac78fdbf76759eb7d506006f37bc29374b0a43107f54a3f25cde57adaa64a7cb98369576ffc139a5a1c228a3b583c998341855e6830fb31f12fb292af18d3724e1cbbad223792f02284ea40a52ba77acbac6aad492ee22e5fcd157229f1d42d1a19cd4d1e88acc8a244f44b7deb967795e2ff63713224490480466a7c1b6ac17245690cb23fe850c163270abcd9740b7a61c595182c892b6a851625662804fce01b42df7dc05db57f909fb05da7fa53d1e83d8b70bcf"], 0x20}}, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) setns(r5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x2, 0x3, 0xf4ad, 0x80, r0, 0xffff8000, '\x00', r4, r5, 0x3, 0x3, 0x3, 0x1}, 0x48) r6 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r7 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r7, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) 14:12:08 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r1, 0x0) 14:12:08 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000000), 0x4) (async) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x1f9a) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:08 executing program 1: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1884, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000140000000c00018008000100", @ANYRES32=r4, @ANYBLOB="dbe1fdaf91ac78fdbf76759eb7d506006f37bc29374b0a43107f54a3f25cde57adaa64a7cb98369576ffc139a5a1c228a3b583c998341855e6830fb31f12fb292af18d3724e1cbbad223792f02284ea40a52ba77acbac6aad492ee22e5fcd157229f1d42d1a19cd4d1e88acc8a244f44b7deb967795e2ff63713224490480466a7c1b6ac17245690cb23fe850c163270abcd9740b7a61c595182c892b6a851625662804fce01b42df7dc05db57f909fb05da7fa53d1e83d8b70bcf"], 0x20}}, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) setns(r5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x2, 0x3, 0xf4ad, 0x80, r0, 0xffff8000, '\x00', r4, r5, 0x3, 0x3, 0x3, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x2, 0x3, 0xf4ad, 0x80, r0, 0xffff8000, '\x00', r4, r5, 0x3, 0x3, 0x3, 0x1}, 0x48) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) r6 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) r7 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r7, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) 14:12:08 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 14:12:08 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 14:12:08 executing program 1: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1884, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000140000000c00018008000100", @ANYRES32=r4, @ANYBLOB="dbe1fdaf91ac78fdbf76759eb7d506006f37bc29374b0a43107f54a3f25cde57adaa64a7cb98369576ffc139a5a1c228a3b583c998341855e6830fb31f12fb292af18d3724e1cbbad223792f02284ea40a52ba77acbac6aad492ee22e5fcd157229f1d42d1a19cd4d1e88acc8a244f44b7deb967795e2ff63713224490480466a7c1b6ac17245690cb23fe850c163270abcd9740b7a61c595182c892b6a851625662804fce01b42df7dc05db57f909fb05da7fa53d1e83d8b70bcf"], 0x20}}, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) setns(r5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x2, 0x3, 0xf4ad, 0x80, r0, 0xffff8000, '\x00', r4, r5, 0x3, 0x3, 0x3, 0x1}, 0x48) r6 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r7 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r7, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1884, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000140000000c00018008000100", @ANYRES32=r4, @ANYBLOB="dbe1fdaf91ac78fdbf76759eb7d506006f37bc29374b0a43107f54a3f25cde57adaa64a7cb98369576ffc139a5a1c228a3b583c998341855e6830fb31f12fb292af18d3724e1cbbad223792f02284ea40a52ba77acbac6aad492ee22e5fcd157229f1d42d1a19cd4d1e88acc8a244f44b7deb967795e2ff63713224490480466a7c1b6ac17245690cb23fe850c163270abcd9740b7a61c595182c892b6a851625662804fce01b42df7dc05db57f909fb05da7fa53d1e83d8b70bcf"], 0x20}}, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) setns(r5, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x2, 0x3, 0xf4ad, 0x80, r0, 0xffff8000, '\x00', r4, r5, 0x3, 0x3, 0x3, 0x1}, 0x48) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r7, 0x20ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) (async) 14:12:08 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 14:12:08 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64) 14:12:08 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 14:12:08 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x29, &(0x7f0000000000)="d08e986be472aecf390e22d6c03fc783424a88cab211b985f6b9231c848f9f127474782fbf6a9b200ae29dd67b6735e2394992dc029dce99840372b5ee99c50718d5d8d5452c85e82a53992a4770fad4414382c4a328a397b4d9806d57386d71fec2cca728b48bc68750f1b691186240a5b8d484f5ec08772f436090c06f0dfba956f77eda790524ead7c21fcb8b3292766d33d1ccc49cccd6114f30d474adc83ae5fc063f81a48dffba1742411f63db") r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) 14:12:08 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 14:12:08 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) ioctl$sock_bt_hci(r0, 0x29, &(0x7f0000000000)="d08e986be472aecf390e22d6c03fc783424a88cab211b985f6b9231c848f9f127474782fbf6a9b200ae29dd67b6735e2394992dc029dce99840372b5ee99c50718d5d8d5452c85e82a53992a4770fad4414382c4a328a397b4d9806d57386d71fec2cca728b48bc68750f1b691186240a5b8d484f5ec08772f436090c06f0dfba956f77eda790524ead7c21fcb8b3292766d33d1ccc49cccd6114f30d474adc83ae5fc063f81a48dffba1742411f63db") r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) 14:12:08 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000040), &(0x7f0000000080)='%-010d \x00'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) 14:12:08 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x29, &(0x7f0000000000)="d08e986be472aecf390e22d6c03fc783424a88cab211b985f6b9231c848f9f127474782fbf6a9b200ae29dd67b6735e2394992dc029dce99840372b5ee99c50718d5d8d5452c85e82a53992a4770fad4414382c4a328a397b4d9806d57386d71fec2cca728b48bc68750f1b691186240a5b8d484f5ec08772f436090c06f0dfba956f77eda790524ead7c21fcb8b3292766d33d1ccc49cccd6114f30d474adc83ae5fc063f81a48dffba1742411f63db") r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) ioctl$sock_bt_hci(r0, 0x29, &(0x7f0000000000)="d08e986be472aecf390e22d6c03fc783424a88cab211b985f6b9231c848f9f127474782fbf6a9b200ae29dd67b6735e2394992dc029dce99840372b5ee99c50718d5d8d5452c85e82a53992a4770fad4414382c4a328a397b4d9806d57386d71fec2cca728b48bc68750f1b691186240a5b8d484f5ec08772f436090c06f0dfba956f77eda790524ead7c21fcb8b3292766d33d1ccc49cccd6114f30d474adc83ae5fc063f81a48dffba1742411f63db") (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) (async) 14:12:08 executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1884, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000140000000c00018008000100", @ANYRES32=r4, @ANYBLOB="dbe1fdaf91ac78fdbf76759eb7d506006f37bc29374b0a43107f54a3f25cde57adaa64a7cb98369576ffc139a5a1c228a3b583c998341855e6830fb31f12fb292af18d3724e1cbbad223792f02284ea40a52ba77acbac6aad492ee22e5fcd157229f1d42d1a19cd4d1e88acc8a244f44b7deb967795e2ff63713224490480466a7c1b6ac17245690cb23fe850c163270abcd9740b7a61c595182c892b6a851625662804fce01b42df7dc05db57f909fb05da7fa53d1e83d8b70bcf"], 0x20}}, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) setns(r5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x2, 0x3, 0xf4ad, 0x80, r0, 0xffff8000, '\x00', r4, r5, 0x3, 0x3, 0x3, 0x1}, 0x48) r6 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r7 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r7, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) 14:12:08 executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1884, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000140000000c00018008000100", @ANYRES32=r4, @ANYBLOB="dbe1fdaf91ac78fdbf76759eb7d506006f37bc29374b0a43107f54a3f25cde57adaa64a7cb98369576ffc139a5a1c228a3b583c998341855e6830fb31f12fb292af18d3724e1cbbad223792f02284ea40a52ba77acbac6aad492ee22e5fcd157229f1d42d1a19cd4d1e88acc8a244f44b7deb967795e2ff63713224490480466a7c1b6ac17245690cb23fe850c163270abcd9740b7a61c595182c892b6a851625662804fce01b42df7dc05db57f909fb05da7fa53d1e83d8b70bcf"], 0x20}}, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) setns(r5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x2, 0x3, 0xf4ad, 0x80, r0, 0xffff8000, '\x00', r4, r5, 0x3, 0x3, 0x3, 0x1}, 0x48) r6 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r7 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r7, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) 14:12:08 executing program 4: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0xfffffffffffffbff) 14:12:08 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x0}, 0x10, 0x80000) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r2 = syz_open_dev$vcsu(0x0, 0xd8c, 0x92201) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x422240) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r3, 0x8004af79, &(0x7f0000000000)) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000180)={0x2, 0xe5, &(0x7f0000000040)="3620868e01abb82e4dd3beb02ad86811c1e1cc180f059a5bc814dc6e3564145396b577fe7dd20c1ac39a8e96943e104781e85562a0ca2526b025a6c61d052db8ae3105765aa43f44bf8a2f96eb288618cd6a9692207dba450e28cd8ae93512cc90232d212f5bcb09e7ad524d46debc1523d38ce08c74579e6e04093f00c0aa065e0388f1c7d10cf6d6746a354bdbd2f1d42f3ca0e7190d52905530b1a7a5c235b7c0d62b4330cb8d9bcd72bb50ae4ae9c853d998de655587f10bf5673ba5323ecdf740131ea6e6137b77a2952366aacb54b6e17fe3afc8003b40be0b988e93f4b8207f6e84"}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r3, 0x20ff6000) mmap$binder(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xfffffffffffffff9) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) syz_io_uring_setup(0x2b76, &(0x7f0000000200)={0x0, 0x49c5, 0x200, 0x2, 0x1a}, &(0x7f0000000280), &(0x7f00000002c0)) 14:12:08 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x0}, 0x10, 0x80000) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) r2 = syz_open_dev$vcsu(0x0, 0xd8c, 0x92201) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x422240) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r3, 0x8004af79, &(0x7f0000000000)) (async) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) (async) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000180)={0x2, 0xe5, &(0x7f0000000040)="3620868e01abb82e4dd3beb02ad86811c1e1cc180f059a5bc814dc6e3564145396b577fe7dd20c1ac39a8e96943e104781e85562a0ca2526b025a6c61d052db8ae3105765aa43f44bf8a2f96eb288618cd6a9692207dba450e28cd8ae93512cc90232d212f5bcb09e7ad524d46debc1523d38ce08c74579e6e04093f00c0aa065e0388f1c7d10cf6d6746a354bdbd2f1d42f3ca0e7190d52905530b1a7a5c235b7c0d62b4330cb8d9bcd72bb50ae4ae9c853d998de655587f10bf5673ba5323ecdf740131ea6e6137b77a2952366aacb54b6e17fe3afc8003b40be0b988e93f4b8207f6e84"}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r3, 0x20ff6000) mmap$binder(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xfffffffffffffff9) (async) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) syz_io_uring_setup(0x2b76, &(0x7f0000000200)={0x0, 0x49c5, 0x200, 0x2, 0x1a}, &(0x7f0000000280), &(0x7f00000002c0)) 14:12:08 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x4, 0x11, r0, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r2, 0x8002af76, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x1, 0x11, r3, 0x400) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) 14:12:08 executing program 4: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0xfffffffffffffbff) 14:12:08 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x0}, 0x10, 0x80000) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r2 = syz_open_dev$vcsu(0x0, 0xd8c, 0x92201) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x422240) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r3, 0x8004af79, &(0x7f0000000000)) (async) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r3, 0x8004af79, &(0x7f0000000000)) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000180)={0x2, 0xe5, &(0x7f0000000040)="3620868e01abb82e4dd3beb02ad86811c1e1cc180f059a5bc814dc6e3564145396b577fe7dd20c1ac39a8e96943e104781e85562a0ca2526b025a6c61d052db8ae3105765aa43f44bf8a2f96eb288618cd6a9692207dba450e28cd8ae93512cc90232d212f5bcb09e7ad524d46debc1523d38ce08c74579e6e04093f00c0aa065e0388f1c7d10cf6d6746a354bdbd2f1d42f3ca0e7190d52905530b1a7a5c235b7c0d62b4330cb8d9bcd72bb50ae4ae9c853d998de655587f10bf5673ba5323ecdf740131ea6e6137b77a2952366aacb54b6e17fe3afc8003b40be0b988e93f4b8207f6e84"}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r3, 0x20ff6000) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r3, 0x20ff6000) mmap$binder(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xfffffffffffffff9) (async) mmap$binder(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xfffffffffffffff9) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) syz_io_uring_setup(0x2b76, &(0x7f0000000200)={0x0, 0x49c5, 0x200, 0x2, 0x1a}, &(0x7f0000000280), &(0x7f00000002c0)) 14:12:08 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x4, 0x11, r0, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r2, 0x8002af76, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x1, 0x11, r3, 0x400) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) 14:12:08 executing program 4: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, 0x0) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0xfffffffffffffbff) 14:12:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="00bba0fe1400000000000000000007000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000"], 0x14}}, 0x0) (rerun: 64) 14:12:08 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000100)) recvmsg$inet_nvme(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@sco, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)=""/214, 0xd6}], 0x1, &(0x7f0000000280)=""/224, 0xe0}, 0x10040) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:08 executing program 4: lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x7f68efa24fff}, 0x300}, 0x0) 14:12:09 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x4, 0x11, r0, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r2, 0x8002af76, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x1, 0x11, r3, 0x400) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) 14:12:09 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) (async, rerun: 64) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000100)) (rerun: 64) recvmsg$inet_nvme(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@sco, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)=""/214, 0xd6}], 0x1, &(0x7f0000000280)=""/224, 0xe0}, 0x10040) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:09 executing program 4: lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) (async) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:09 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000100)) recvmsg$inet_nvme(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@sco, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)=""/214, 0xd6}], 0x1, &(0x7f0000000280)=""/224, 0xe0}, 0x10040) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:09 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x4, 0x11, r0, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r2, 0x8002af76, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) 14:12:09 executing program 4: lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:09 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x0) 14:12:09 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x4, 0x11, r0, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r2, 0x8002af76, &(0x7f0000000100)) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) 14:12:09 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x4, 0x11, r0, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) 14:12:09 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2e2082) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r1, 0x1) 14:12:09 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x0) 14:12:09 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2e2082) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r1, 0x1) 14:12:09 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0xffffffffffffffff) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r1, 0x0) 14:12:09 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x4, 0x11, r0, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) 14:12:09 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0xffffffffffffffff) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r1, 0x0) 14:12:09 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x4, 0x11, r0, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) 14:12:09 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2e2082) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r1, 0x1) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r1, 0x1) 14:12:09 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x4, 0x11, r0, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) 14:12:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount_setattr(r3, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x20000}, 0x20) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x54, r2, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8040}, 0x4) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="140022004bdf42c0199ad6d90600000000000000ab498ad265bca3c03cb7f51359334a7c4742a2a3faa4637c703529c97c4ff855803f52d7faa446925ba878020fcc932e854c2e6db05f671b58981d414b0d2887fc048d654e49f387f95cb576f394810c92243d8662050bda276096c5e74ff6d73624e34d063aad1aaad3f66abe4b571df863a41e740ce25685bc3356d144c975860dbb436ba51f72b155d4cc6e6226ac3a94e5daf72829d3467739feac38f12834be87486719627ef112a55c04e7ed5f16", @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000"], 0x14}}, 0x0) 14:12:09 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x101000) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5451, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x100004000) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) 14:12:09 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x4, 0x11, r0, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) 14:12:09 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x101000) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5451, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x100004000) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x101000) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0x5451, 0x0) (async) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x100004000) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) (async) 14:12:09 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x4, 0x11, r0, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) 14:12:09 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x4, 0x11, r0, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 14:12:09 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x101000) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0x5451, 0x0) (async) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x100004000) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) 14:12:09 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x4, 0x11, r0, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 14:12:09 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xffffffffffffffff, 0x200000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1001}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:09 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x4, 0x11, r0, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 14:12:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="00bba0fe1400000000000000000007000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000"], 0x14}}, 0x0) 14:12:09 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x4, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) 14:12:09 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xffffffffffffffff, 0x200000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1001}) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x7fffffffefff}, 0x300}, 0x0) 14:12:10 executing program 3: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:10 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xffffffffffffffff, 0x200000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1001}) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:10 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) r2 = getpid() ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000000)={r2, 0x1, 0x3ff}) 14:12:10 executing program 3: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:10 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) r2 = getpid() ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000000)={r2, 0x1, 0x3ff}) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) (async) getpid() (async) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000000)={r2, 0x1, 0x3ff}) (async) 14:12:10 executing program 3: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:10 executing program 3: mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x4, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:10 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) r2 = getpid() ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000000)={r2, 0x1, 0x3ff}) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) (async) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) (async) getpid() (async) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000000)={r2, 0x1, 0x3ff}) (async) 14:12:10 executing program 3: mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x4, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:10 executing program 4: r0 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r0, &(0x7f0000000380)=""/216, 0xd8, 0x10040, &(0x7f0000000480)=@caif=@dbg={0x25, 0x9}, 0x80) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000580)={'vxcan0\x00'}) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$X86_IOC_RDMSR_REGS(r2, 0xc02063a0, &(0x7f0000000500)=[0x7013, 0x2, 0x100, 0x2, 0x9, 0xfffeffff, 0x2, 0x4]) r3 = mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0xb8, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/235, 0xeb, 0x0, 0x38}, @flat=@handle={0x73682a85, 0x100a, 0x1}, @flat=@weak_binder={0x77622a85, 0x15}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @free_buffer={0x40086303, r3}, @exit_looper, @register_looper, @acquire={0x40046305, 0x2}, @decrefs={0x40046307, 0x2}, @enter_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="8500", @ANYRES32=r2, @ANYBLOB="0000000000000000000000008561646600000000030000000000000002000000000000001600000000000000852a68770b1100000300"/68], &(0x7f0000000540)={0x0, 0x18, 0x38}}, 0x1000}], 0x8d, 0x0, &(0x7f0000000280)="6162d385e74433371b53dc86d93811a8f14737677173a8ff99b8f94e63aa6708c4f365d9485590a081ef359273241effc3e1224ae46e313d41dcdf5c3a62ce4f544f572c7d53d6335707b68384aa2f5e34f00b0278b9c0b3c295d0fe6826cace9de5b3f87941e838acb088fa04c046f262aaefa5b776472a35187ec4471b4a8853fb60bdf4e45fa2eb3b352cec"}) 14:12:10 executing program 3: mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x4, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:10 executing program 4: syz_socket_connect_nvme_tcp() (async) r0 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r0, &(0x7f0000000380)=""/216, 0xd8, 0x10040, &(0x7f0000000480)=@caif=@dbg={0x25, 0x9}, 0x80) (async) recvfrom$inet_nvme(r0, &(0x7f0000000380)=""/216, 0xd8, 0x10040, &(0x7f0000000480)=@caif=@dbg={0x25, 0x9}, 0x80) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000580)={'vxcan0\x00'}) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$X86_IOC_RDMSR_REGS(r2, 0xc02063a0, &(0x7f0000000500)=[0x7013, 0x2, 0x100, 0x2, 0x9, 0xfffeffff, 0x2, 0x4]) r3 = mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0xb8, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/235, 0xeb, 0x0, 0x38}, @flat=@handle={0x73682a85, 0x100a, 0x1}, @flat=@weak_binder={0x77622a85, 0x15}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @free_buffer={0x40086303, r3}, @exit_looper, @register_looper, @acquire={0x40046305, 0x2}, @decrefs={0x40046307, 0x2}, @enter_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="8500", @ANYRES32=r2, @ANYBLOB="0000000000000000000000008561646600000000030000000000000002000000000000001600000000000000852a68770b1100000300"/68], &(0x7f0000000540)={0x0, 0x18, 0x38}}, 0x1000}], 0x8d, 0x0, &(0x7f0000000280)="6162d385e74433371b53dc86d93811a8f14737677173a8ff99b8f94e63aa6708c4f365d9485590a081ef359273241effc3e1224ae46e313d41dcdf5c3a62ce4f544f572c7d53d6335707b68384aa2f5e34f00b0278b9c0b3c295d0fe6826cace9de5b3f87941e838acb088fa04c046f262aaefa5b776472a35187ec4471b4a8853fb60bdf4e45fa2eb3b352cec"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0xb8, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/235, 0xeb, 0x0, 0x38}, @flat=@handle={0x73682a85, 0x100a, 0x1}, @flat=@weak_binder={0x77622a85, 0x15}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @free_buffer={0x40086303, r3}, @exit_looper, @register_looper, @acquire={0x40046305, 0x2}, @decrefs={0x40046307, 0x2}, @enter_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="8500", @ANYRES32=r2, @ANYBLOB="0000000000000000000000008561646600000000030000000000000002000000000000001600000000000000852a68770b1100000300"/68], &(0x7f0000000540)={0x0, 0x18, 0x38}}, 0x1000}], 0x8d, 0x0, &(0x7f0000000280)="6162d385e74433371b53dc86d93811a8f14737677173a8ff99b8f94e63aa6708c4f365d9485590a081ef359273241effc3e1224ae46e313d41dcdf5c3a62ce4f544f572c7d53d6335707b68384aa2f5e34f00b0278b9c0b3c295d0fe6826cace9de5b3f87941e838acb088fa04c046f262aaefa5b776472a35187ec4471b4a8853fb60bdf4e45fa2eb3b352cec"}) 14:12:10 executing program 3: r0 = syz_open_dev$vcsu(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x4, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) 14:12:10 executing program 4: r0 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r0, &(0x7f0000000380)=""/216, 0xd8, 0x10040, &(0x7f0000000480)=@caif=@dbg={0x25, 0x9}, 0x80) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000580)={'vxcan0\x00'}) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$X86_IOC_RDMSR_REGS(r2, 0xc02063a0, &(0x7f0000000500)=[0x7013, 0x2, 0x100, 0x2, 0x9, 0xfffeffff, 0x2, 0x4]) r3 = mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0xb8, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/235, 0xeb, 0x0, 0x38}, @flat=@handle={0x73682a85, 0x100a, 0x1}, @flat=@weak_binder={0x77622a85, 0x15}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @free_buffer={0x40086303, r3}, @exit_looper, @register_looper, @acquire={0x40046305, 0x2}, @decrefs={0x40046307, 0x2}, @enter_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="8500", @ANYRES32=r2, @ANYBLOB="0000000000000000000000008561646600000000030000000000000002000000000000001600000000000000852a68770b1100000300"/68], &(0x7f0000000540)={0x0, 0x18, 0x38}}, 0x1000}], 0x8d, 0x0, &(0x7f0000000280)="6162d385e74433371b53dc86d93811a8f14737677173a8ff99b8f94e63aa6708c4f365d9485590a081ef359273241effc3e1224ae46e313d41dcdf5c3a62ce4f544f572c7d53d6335707b68384aa2f5e34f00b0278b9c0b3c295d0fe6826cace9de5b3f87941e838acb088fa04c046f262aaefa5b776472a35187ec4471b4a8853fb60bdf4e45fa2eb3b352cec"}) 14:12:10 executing program 1: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1, 0x11, r1, 0x20fd6000) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000040)={0x0, 0xffff, 0x800a1a3, &(0x7f0000000000)=0x5}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x1802, 0x0) mmap$binder(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x1}) 14:12:10 executing program 3: r0 = syz_open_dev$vcsu(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x4, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) 14:12:10 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffffc, 0x105002) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), 0x56, 0x0, 0x0}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r1, 0x2) 14:12:10 executing program 3: r0 = syz_open_dev$vcsu(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x4, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) 14:12:10 executing program 1: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1, 0x11, r1, 0x20fd6000) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000040)={0x0, 0xffff, 0x800a1a3, &(0x7f0000000000)=0x5}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x1802, 0x0) mmap$binder(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x1}) 14:12:10 executing program 3: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x4, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:10 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffffc, 0x105002) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), 0x56, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r1, 0x2) 14:12:10 executing program 3: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x4, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:10 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffffc, 0x105002) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), 0x56, 0x0, 0x0}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r1, 0x2) 14:12:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x0, {0x14}}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 14:12:10 executing program 3: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x4, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:10 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffffc, 0x105002) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), 0x56, 0x0, 0x0}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r1, 0x2) 14:12:10 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x4, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) 14:12:10 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffffc, 0x105002) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), 0x56, 0x0, 0x0}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r1, 0x2) [ 3274.280243][T22910] binder: 22909:22910 ioctl c0306201 20000200 returned -14 [ 3274.304835][T22919] binder: 22917:22919 ioctl c0306201 20000200 returned -14 [ 3274.317596][T22924] binder: 22922:22924 ioctl c0306201 20000200 returned -14 14:12:10 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x4, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) 14:12:10 executing program 4: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x4, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 14:12:10 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x4, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) [ 3274.334853][T22931] binder: 22930:22931 ioctl c0306201 20000200 returned -14 [ 3274.337364][T22934] binder: 22933:22934 ioctl c0306201 20000200 returned -14 14:12:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x7ffffffff000}, 0x300}, 0x0) 14:12:11 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_INPUT(r1, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711, @local}, 0x10) 14:12:11 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffffc, 0x105002) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), 0x56, 0x0, 0x0}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r1, 0x2) 14:12:11 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x4, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 14:12:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x0, {0x14}}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 14:12:11 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x4, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 14:12:11 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffffc, 0x105002) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), 0x56, 0x0, 0x0}) 14:12:11 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x1f5, 0x6082) r1 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x20, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1cd26f8d63364b58c4b759d6aef66a124e8fb8", @ANYRES64=r1, @ANYBLOB="0f630c400200"/16], 0x98, 0x0, &(0x7f0000000080)="01edea564fcd8d53dde04016de8492242c2a21dcbdabb68f2d290429af783fbb6f709d2eda6ee8a3e1d422dff978c26085642d07aec40e01da44c63323692bc09b790b215dbcba7af05ba49f5e850299762304a0a404ba9c2bdc9f469f68770d5eca5695040907c130c23ecb737393f5941fb5ebed947eef970372d91f2496832089bf2e8505f4b418235cecae68ba1e1146f60aeaa75dd4"}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) 14:12:11 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x4, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 14:12:11 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x1f5, 0x6082) r1 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x20, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1cd26f8d63364b58c4b759d6aef66a124e8fb8", @ANYRES64=r1, @ANYBLOB="0f630c400200"/16], 0x98, 0x0, &(0x7f0000000080)="01edea564fcd8d53dde04016de8492242c2a21dcbdabb68f2d290429af783fbb6f709d2eda6ee8a3e1d422dff978c26085642d07aec40e01da44c63323692bc09b790b215dbcba7af05ba49f5e850299762304a0a404ba9c2bdc9f469f68770d5eca5695040907c130c23ecb737393f5941fb5ebed947eef970372d91f2496832089bf2e8505f4b418235cecae68ba1e1146f60aeaa75dd4"}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) 14:12:11 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffffc, 0x105002) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), 0x56, 0x0, 0x0}) 14:12:11 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x1f5, 0x6082) r1 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x20, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1cd26f8d63364b58c4b759d6aef66a124e8fb8", @ANYRES64=r1, @ANYBLOB="0f630c400200"/16], 0x98, 0x0, &(0x7f0000000080)="01edea564fcd8d53dde04016de8492242c2a21dcbdabb68f2d290429af783fbb6f709d2eda6ee8a3e1d422dff978c26085642d07aec40e01da44c63323692bc09b790b215dbcba7af05ba49f5e850299762304a0a404ba9c2bdc9f469f68770d5eca5695040907c130c23ecb737393f5941fb5ebed947eef970372d91f2496832089bf2e8505f4b418235cecae68ba1e1146f60aeaa75dd4"}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) 14:12:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0xc, 0x7, 0x0, 0x1, 0xffffffff, 0x24}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100000000000000509eae77ee08005a00a8bb17bf46a21671020c1e32fc2fa5ea19de40c747d5dc24d9e4c7d585b5f59a35d5e9ca2f12ae2203e5dba143db47bf6fb885a752e563c2cd7da1180b1d25afbc5fe0b52af5c9cc05a7bfed116931a88dcdce8e409326e0b21266c143b29e5834cd213356fd668aaf68ac2eb9ab9561236607e6"], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r3, 0x9, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r9 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000480)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) connect$vsock_stream(r9, &(0x7f0000000500)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040841}, 0x84850) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r7, 0x1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x7}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r11 = syz_open_dev$vcsu(&(0x7f0000000000), 0x2, 0x40) getdents64(r11, &(0x7f0000000100)=""/128, 0x80) 14:12:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x0, {0x14}}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 14:12:11 executing program 4: syz_open_dev$vcsu(&(0x7f0000000000), 0x1f5, 0x6082) 14:12:11 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffffc, 0x105002) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), 0x56, 0x0, 0x0}) 14:12:11 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) 14:12:11 executing program 4: syz_open_dev$vcsu(0x0, 0x1f5, 0x6082) 14:12:11 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffffc, 0x105002) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), 0x56, 0x0, 0x0}) [ 3275.059815][T22950] binder: 22949:22950 ioctl c0306201 20000200 returned -14 [ 3275.092334][T22957] binder: 22955:22957 ioctl c0306201 20000200 returned -14 14:12:11 executing program 4: syz_open_dev$vcsu(0x0, 0x1f5, 0x6082) 14:12:11 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), 0x56, 0x0, 0x0}) 14:12:11 executing program 4: syz_open_dev$vcsu(0x0, 0x1f5, 0x6082) 14:12:11 executing program 4: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x6082) 14:12:11 executing program 1: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), 0x56, 0x0, 0x0}) 14:12:11 executing program 4: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x6082) 14:12:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0xc, 0x7, 0x0, 0x1, 0xffffffff, 0x24}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100000000000000509eae77ee08005a00a8bb17bf46a21671020c1e32fc2fa5ea19de40c747d5dc24d9e4c7d585b5f59a35d5e9ca2f12ae2203e5dba143db47bf6fb885a752e563c2cd7da1180b1d25afbc5fe0b52af5c9cc05a7bfed116931a88dcdce8e409326e0b21266c143b29e5834cd213356fd668aaf68ac2eb9ab9561236607e6"], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r3, 0x9, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r9 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000480)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) connect$vsock_stream(r9, &(0x7f0000000500)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040841}, 0x84850) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r7, 0x1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x7}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r11 = syz_open_dev$vcsu(&(0x7f0000000000), 0x2, 0x40) getdents64(r11, &(0x7f0000000100)=""/128, 0x80) 14:12:11 executing program 4: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x6082) 14:12:11 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), 0x56, 0x0, 0x0}) 14:12:11 executing program 4: syz_open_dev$vcsu(&(0x7f0000000000), 0x1f5, 0x0) 14:12:11 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), 0x56, 0x0, 0x0}) 14:12:11 executing program 4: syz_open_dev$vcsu(&(0x7f0000000000), 0x1f5, 0x0) 14:12:11 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), 0x56, 0x0, 0x0}) [ 3275.148698][T22987] binder: 22986:22987 ioctl c0306201 20000200 returned -14 [ 3275.164019][T22993] binder: 22991:22993 ioctl c0306201 20000200 returned -14 [ 3275.185009][T23002] binder: 23000:23002 ioctl c0306201 20000200 returned -14 14:12:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0xf0ff1f00000000}, 0x300}, 0x0) 14:12:12 executing program 4: syz_open_dev$vcsu(&(0x7f0000000000), 0x1f5, 0x0) 14:12:12 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), 0x56, 0x0, 0x0}) 14:12:12 executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c00000018001733000000000000000002000000000000060000000008"], 0x4c}}, 0x0) getsockname$netlink(r5, &(0x7f0000000580), &(0x7f00000005c0)=0xc) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x90, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x74, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xffffffcf, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xfd8d}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID]}]}]}, 0x90}}, 0x0) r6 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x408001) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x2, 0x90a4, 0x800, 0x1808, 0x1, 0x8, '\x00', r4, r6, 0x0, 0x0, 0x4}, 0x48) r7 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r7, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x0) r8 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x17, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, [@exit, @ldst={0x1, 0x2, 0x4, 0x2, 0xb, 0xfffffffffffffffe, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000}, @generic={0x1, 0x7, 0x7, 0x1f, 0xc7}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @generic={0x68, 0x5, 0xa, 0xff, 0x9b}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x84}, @map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x18000000}]}, 0xfffffffffffffffe, 0xffff, 0xd6, &(0x7f0000000340)=""/214, 0x40f00, 0x4, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000100)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x4, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r8, 0x0) 14:12:12 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), 0x56, 0x0, 0x0}) 14:12:12 executing program 4: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c00000018001733000000000000000002000000000000060000000008"], 0x4c}}, 0x0) getsockname$netlink(r5, &(0x7f0000000580), &(0x7f00000005c0)=0xc) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x90, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x74, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xffffffcf, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xfd8d}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID]}]}]}, 0x90}}, 0x0) r6 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x408001) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x2, 0x90a4, 0x800, 0x1808, 0x1, 0x8, '\x00', r4, r6, 0x0, 0x0, 0x4}, 0x48) r7 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r7, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x0) r8 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x17, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, [@exit, @ldst={0x1, 0x2, 0x4, 0x2, 0xb, 0xfffffffffffffffe, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000}, @generic={0x1, 0x7, 0x7, 0x1f, 0xc7}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @generic={0x68, 0x5, 0xa, 0xff, 0x9b}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x84}, @map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x18000000}]}, 0xfffffffffffffffe, 0xffff, 0xd6, &(0x7f0000000340)=""/214, 0x40f00, 0x4, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000100)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x4, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r8, 0x0) 14:12:12 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), 0x56, 0x0, 0x0}) 14:12:12 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), 0x56, 0x0, 0x0}) 14:12:12 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) recvmsg$inet_nvme(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/91, 0x5b}, {&(0x7f0000000340)=""/150, 0x96}, {&(0x7f0000000480)=""/237, 0xed}], 0x3, &(0x7f0000000580)=""/69, 0x45}, 0x40010000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x5, 0x0, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x7f39, 0x3f, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x1, 0x6, 0x4, @mcast1, @private2, 0x1, 0x20, 0xdd68, 0xffffffff}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14020000", @ANYRES16=r2, @ANYBLOB="28727d566110002dbd7000fbdbdf2501000000040003000200008008000900", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f6272696467650008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="58000180140002007767310000000000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="14000200697036746e6c3000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="1400020076657468315f746f5f7465616d00000008000100", @ANYRES32=r4, @ANYBLOB="740102802c00018008000100060000000800010000000000080001000000000008000100020000000800010003000000340001800800010003000000080001000700000008000100080000000800010007000000080001000800000008000100000000000c00018008000100010000000c0001800800010008000000340001800800010003000000080001000000000008000100040000000800010003000000080001000100000008000100080000002c00018008000100060000000800010005000000080001000b0000000800010005000000080001000700000044000180080001000300000008000100070000000800010000000000080001000200000008000100010000000800010000000000080001000300000008000100060000002400018008000100040000000800010002000000080001000400000008000100070000002400018008000100060000000800010008000000080001000300000008000100010000000c0001800800010006000000"], 0x214}, 0x1, 0x0, 0x0, 0x4010}, 0x4008040) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x1}) 14:12:12 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="08631018add90ea5e85cd0000000000000000000a35805df2ce653878a9d5228fa40f21deb4e7432"], 0x3a, 0x0, &(0x7f0000000040)="1613c14616396702e1b6231304658eee58935bffc2fd63caa44341875b95abf7220bbce2cb662f9f20fa0c643d07972953206b19fb8b304fca07"}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:12 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 14:12:12 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="08631018add90ea5e85cd0000000000000000000a35805df2ce653878a9d5228fa40f21deb4e7432"], 0x3a, 0x0, &(0x7f0000000040)="1613c14616396702e1b6231304658eee58935bffc2fd63caa44341875b95abf7220bbce2cb662f9f20fa0c643d07972953206b19fb8b304fca07"}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) [ 3275.899803][T23020] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3275.911836][T23022] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 14:12:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@setneightbl={0x1c, 0x43, 0x1, 0x70bd29, 0x25dfdbfd, {0x1c}, [@NDTA_THRESH3={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc6a19904846ce677}, 0x4800) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000000)=""/241) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) 14:12:12 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0xffffffffff600000) 14:12:12 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 14:12:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@setneightbl={0x1c, 0x43, 0x1, 0x70bd29, 0x25dfdbfd, {0x1c}, [@NDTA_THRESH3={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc6a19904846ce677}, 0x4800) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000000)=""/241) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) 14:12:12 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) 14:12:12 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0xfc01000000000000) 14:12:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@setneightbl={0x1c, 0x43, 0x1, 0x70bd29, 0x25dfdbfd, {0x1c}, [@NDTA_THRESH3={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc6a19904846ce677}, 0x4800) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000000)=""/241) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) 14:12:12 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 3275.942424][T23034] binder: 23032:23034 ioctl c0306201 0 returned -14 [ 3275.961547][T23042] binder: 23039:23042 ioctl c0306201 0 returned -14 14:12:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@setneightbl={0x1c, 0x43, 0x1, 0x70bd29, 0x25dfdbfd, {0x1c}, [@NDTA_THRESH3={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc6a19904846ce677}, 0x4800) 14:12:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x1008}, 0x300}, 0x0) 14:12:12 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:12:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@setneightbl={0x1c, 0x43, 0x1, 0x70bd29, 0x25dfdbfd, {0x1c}, [@NDTA_THRESH3={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc6a19904846ce677}, 0x4800) 14:12:12 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:12:12 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@setneightbl={0x1c, 0x43, 0x1, 0x70bd29, 0x25dfdbfd, {0x1c}, [@NDTA_THRESH3={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc6a19904846ce677}, 0x4800) 14:12:12 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:12:12 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@setneightbl={0x1c, 0x43, 0x1, 0x70bd29, 0x25dfdbfd, {0x1c}, [@NDTA_THRESH3={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc6a19904846ce677}, 0x4800) 14:12:12 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0xd00000000000000) 14:12:12 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@setneightbl={0x1c, 0x43, 0x1, 0x70bd29, 0x25dfdbfd, {0x1c}, [@NDTA_THRESH3={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc6a19904846ce677}, 0x4800) [ 3275.987007][T23052] binder: 23050:23052 ioctl c0306201 0 returned -14 14:12:12 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xffffffffffffffa5) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) 14:12:12 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@setneightbl={0x1c, 0x43, 0x1, 0x70bd29, 0x25dfdbfd, {0x1c}, [@NDTA_THRESH3={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc6a19904846ce677}, 0x4800) 14:12:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0xf0ff7f00000000}, 0x300}, 0x0) 14:12:13 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x100000000000000) 14:12:13 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@setneightbl={0x1c, 0x43, 0x1, 0x70bd29, 0x25dfdbfd, {0x1c}, [@NDTA_THRESH3={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc6a19904846ce677}, 0x4800) 14:12:13 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0xffff80035f28a000) 14:12:13 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@setneightbl={0x1c, 0x43, 0x1, 0x70bd29, 0x25dfdbfd, {0x1c}, [@NDTA_THRESH3={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc6a19904846ce677}, 0x4800) 14:12:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4800) 14:12:13 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0xff600000) 14:12:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4800) 14:12:13 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x604000000000000) 14:12:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4800) 14:12:13 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x8000000) 14:12:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@setneightbl={0x1c, 0x43, 0x1, 0x70bd29, 0x25dfdbfd, {0x1c}, [@NDTA_THRESH3={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc6a19904846ce677}, 0x4800) 14:12:13 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0xa0ff2000000000) 14:12:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc6a19904846ce677}, 0x4800) 14:12:13 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x2000000000000) 14:12:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc6a19904846ce677}, 0x4800) 14:12:13 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) 14:12:13 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x15000000) 14:12:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc6a19904846ce677}, 0x4800) 14:12:13 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x9000000) 14:12:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0xc6a19904846ce677}, 0x4800) 14:12:13 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x21) 14:12:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x1008}, 0x300}, 0x0) 14:12:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0xc6a19904846ce677}, 0x4800) 14:12:13 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0xe) 14:12:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0xc6a19904846ce677}, 0x4800) 14:12:13 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x119c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xfffff3a1}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_EEE_MODES_OURS={0x1164, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x400}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "548f29ae3b57d32211b218863b0bc4df34fdb6b5340c8977a3bc8e7462ba049694a28e144b0c49c5551db6c609da97a063e51919bb01142ad66c6aea93f517531238a070209b54f49405be2b6aca7051479f82e708a1141f63baefeb59d07d211f2c98f86094b3efa47025fffd634a8d4b06d696c0b04032115a2f9a216b9f22254ce1ea816fbda1e82fadaedaff4c54dbb308c2fdeac7c4885ec529449b9d31695738b8c8b14c53cfede62ce9fb2b4446ae436b23250845a3a58f9fbd4a9a10ba5e97e46cd3f870597c61a6450b028c6da8f56367ad8e811871b07ea85d322f69d0aae908654efd98e69695c040413aa2e09093b6d0f92beb6b468d8c01e397d7e09d9e6d5bcec4d24da138455d86af1abe219f2d5afbf139c6e33096af8be8a66b935910445e2209348edaf057eff8af4ab5f16f49bd960dc65c00d0c29d4cddf727e9ef602998eae15e75e53f655c28b56d5f8007bc30f2954a62994647a483f3620b61594ea1fc9a72638ac08c98c48859b2b27e0b844c4f279d7619408ebe4d0845631361c2cb7728c8b03a980ea233d34cd61edad9c29739ffa5ace454b2cfcbeec2ba10d9d2ca76db5c9badb893fdefc847fdc5eb4630a1a5c907a8a115eebc2c40b51ab1272d62ce32ad3d589683368c390d28da0b04d2e721ca86734f8c76dddc7c5c8c70a5e66af8e1351696f2c406849ad153d0db80306aac97ff0e982e2ed9f1fb9f2c4d6bca6d91f5dbfa29f2fa2465fc0c4742cacc9d0730c945a1614414143fe9fbdf4d26158e54fab99cdc1d5ca4f1dcb659d477952c577d15f60abead36e60b73bb65ad2c9c69256983b58ed8b7dc7f938ea20424505db9eb5163a8b65429cde20a1b856d5e257ca239a99617ebd0f15d8a0ed51e8f57203a539da5befc4361a1021630780ebaa374d866c447773d372f3661bcbec88eaa4643a4f4e82b126fdf80c2a4ca16fd2bf435b7d48fd6d97394c2b6d0abd9bccde42bf5505cfaed6a5c6b309e081494f4a8ec857ddc81e72c0c57c8833ad2d062a4776eb8fcf6ae1009b8b3ade66e1f6226574e74c7a341e5eb35ce2b0696139f6dceab8cb7d1eea140b708692b96f1ddad51045254e2369e44bced281508a2af3a910e5fcd1cd65688a8e910d7a0939d713a05c8f2a295585bac5ef68347bdbeca6485e483aaa18ac34cef95b8d666fa5ea58ac08ea761d276b949f1ae0f334106062122e9a67caecc35c6e861ab0078780cf19102b2456393c53ab135f947cce73593b9da760dd925ec65ff2c0d88066bef450cee7c925127fe03e6f2155a979b9bc15625700f27198dab46fc2324b65fb3a225fca45b050429e35ceb11bb801f5640182ddd77d60d06254191377181553edea8ce687f39ba8309a7b849a25341b132e8903e43b3a3341f78bed2e0729678c445d7d7d071a743b85959cbc3d131f245112ed87d14b061112bc6b34ea69d5d97f28a7dbc34d2e25cd271d43807cc6a7e45076f935dcca68b1fd652603833701e476cf6f6e15a5b8f0bda5e14e22ae817e1444f2f06fd411657d8b95e54b18e6a0a7f54fe7265437d5a424fd675938dd464b189468e1fe183b683a4eb2e6af8004588e5b3c3f1970163ef91744619d95106a5429c4142e1eb504089f30168c352f05dcc52c433fa64fb2b848b9dfc75aef243d588050d8cab2f835c3ac41a50299a0d01efa3b6bc91d09759dd0f08c35c587925723d0f20af51ba118d5dbac8ec5804fecfd5611cdb43d0e857acd5f2e39da412c9213cd0b481b572ec172ba8757960ce7673ea05f1dd404c7c27b53a6dad70ea46b0f269e7826f56f7b707e8c7d4e7084b11d66632bc04838133d292adf4ed77e7199f028065e705c8e0f351e75bc6ee9c9fb4942ac5f2a7b405b0a1291a3e1b06009a0e087679fac03a3a795cdf8486351a3ccc6c1cedeb58cc225c1b22db6df53e2a6eada8f0332d83c797df2846e8288a4b0d0a99be255425c07958ce625e3b3b6bdaa7d904832fe5801ea244a83b9af7eda1d76f98fe47bd65eea8d59bff561511238f1cd2927ee94387363d9aa5a7febf567e5a3fb79d41cb3c72134089afbcd87ca4f37c97d2551cf9545f0abe8806034ad2e54a02dd75924e82c7ce11d8f4c1c61c085159eec29c1affd2193763f11f3fb7a797100987b2ecfe9aea6ff68f00964bed006503dcdb575f6951cbef4bdad6c5d3942ad7160e4701f4b25fdf5917fca7c3f47605d671b03b7c5c6cb0a29ca9aa39ae89580a91253a78990aa23fd4d30de897d3194b7e74e600f10e8cae43526761423cccf22d808a8bb7029ae57c4ef733d03c91f52aba4fa5a098a2c72186401e7d283af9ee46dce698da45f531d62de1eb1f5d8796dec0c4c4583f9697fbe6823718665acd98ffe793d842973903f8b028f752f84bd0f927299972bc598e7dd16ca808117717ebe8c7e033c7e0430d01fe2ae50839cb81faf8f44da054dae09485f0ddeb2f6efffaa1a600cbe7ee9b136e3d034639e53fdf9320d60cef26c1488cddf7eb384a0d42a7a13d717dcb6f3a03d2d424d8dc860b9cda13ac4b9267e347de740ba038b0d88ec409fe6c892780e4228792dffa9f05f381344076f33f78ac4c23dbc9554de08f268eed72512b60ab9ba184b2079f9a460f7d8c45c6b14e3514fbcf85eb2157ea38be7f182bd5d6b739f4d3daf45572940313704cae0afcb7516f6488d8ae3c1c88b242caa2ec272446092e4bd5a1a3d5347afa895b9b1f889f250e29bff9fedfcb59daa59f725f7cf853a1d42a78846dc8f37f63a620e59b81c3755567f3d5941fd89c2b06376d05992ccfa9564032d0ef6b7fd4ebdccb26524fa681929ae458342fb97bfbb3e417b4d55e0ad1b2a8363b9eed6cbf5e3311b6fb6934e1badadfea36e72f7f4293da0ac73a726f87a7e74ea0fcc7fb25aef1a1139f604af0c7954b96ec29f085e37a19339104f597bb9717ca0c493f6e7282c1971ae061c26e17cb76f60692fb91d19b0fbff6c9276718f317ad2c29f8c270b5235371b0a2890a3d9f7e2291b3b2b339f0d627e5557322d9849855defe6a018f50021adbe907d1735c2b6cf372ff72bc28e014c4540ba9cd2a4feb74db9ab17d509a53854d3aad78744ece974433f3a2eba38210c0eb0d6c7a9d2d0c01b49c48eb81215eb52f8607ae6fcd5bd9f1212c77ed2fa40c936e37e6f9236c25b49640931a15863dd80c16e49c5501ccc7eb84dae58541565f3d98cbc7b4617eebfd7e0fa3f60ab8458079d3d7f1646f872a63af47392d09e47351a68f75ac50af3ce31c3e515e574e881b16813fd4fd24d8d7aa4d6be245e8bce2eceac609840ad3570562ff04ef396297e2b2fbe452ddb08607d1ff1f41558fedd8651cc8da876ec886470a030cce08556495799b64fc9545d9fb30f8bc3e631deaea108974fb902844910ed8bde3372bd8f0227d5ee38c89212ffdbae1dc8805b3d21eac6c1f4b9598f23662a4e43237ba9ca016d48636520103a2f21f944a2b04b9147fe57947ee72708fa467ab24cceb92c803e3b9ed901bc57576d149339977fa1ed85791429191ffc6dee0291b2079b19b0f934afa9f6edeefb729120c86106ef8f1215567109203a57f40362a9673706727c1fbe4511fe3ce6f8e250e74f8377d114a0b08eed804ae2d039d034ceed296ad1a564868b3c6949190283ef39aea6c1ba02377287d2bdf06c69e1deb9b68e679ee9bbfa9b50f34b2ac267500854e7259176393abef3cb3bafa2040c5d507e55f5cb5923603f9b692abf41da9522b919e4a559ea9e53a4620bf528afa0913da966cee14c3b94986a69355fb0238223091efe1a524a30290bf28f8a8fffcb9651a3d3eba5a558ebb5dc9bcd749e5e7c699d9453b59a672b3457c29d2e9a9274ac83199b238c49955e4188a85a8654070c76de5483e9336a15f7ea2bc8fc5e3ee91d7ca4d6b72a5c31aea8af7456f642576aa45c74b3ac2633df2d78a81d5de063c2414f752b41514656a4da2a433a07c68db5e43cfd24042839f152cbce3c59257026c387fdc08a8bac071d4ea46113ebc61b096db82c94cd1699c3e238ff0ec39e38ba8510d026d36650337e9b350c96565eb1ace4dac19ecf82d9f48d876b3e2e142c743f2296abc9e6d72e7554bb4350e9898af7454580ee0330f332a91008ec3222c48f6501c8b097b3477e5cf1d5fa140461a26b94d76dff5edddb43306826ea067adf6a221d115b7e5806518823fa2ac0741a25f92c72cd2123bdf5e832a956e8a1555d76a7084df47bcd4bab1bfc4c2c1f7c9d37213c850b55e9987bdcfabf96e6a6d91f1823c07a86f62e3905ab02360e65da80768fe1cc2b2e20f7bfafde098c84eddb583d13c038f3bea5debb56c0269c344ba7b118f198e37fca36022c9ef5f9548b713cdd2afa4b7029de9e845fdc97fa2e689e4db914e9be121d2065c5004ba718076e476224e9287e10d8e4a9c3a55b281ae6c8f9aaa591a788b60493c39b11b1ca81206a1977f5587feede930a047a1566d5aa2ba60b9ebf8ce8c56004b7509e6e8361f26aa1e97ada1b23a4aaa74d656e32a2767d0dfcb490bfb60e9fc295a6bf99c54f6722c268d1ee6024c57e9a95c1bf2557dbb884a77def435e20a3b59f13ebb4a7b646770fdcd8033176f4f9bf72ac20fda50d0af511dadd8857a4050790569c352ee80c918adb1501e116cfe501a7ae506a529c7fece986a7db5751806d025d666a799a9a9543f39393f3b022231ada326acb685b38f8568a4c7031929d30596377ecea8c410456a07829636a736b689627488a59374b336b06f6e43bdd014dc2100b2c158cb17cda88bc61eaf724d6ff8f82c98c30622859d51506918ecfb0f34cd4ad68353e9a4190e7af39ebbbd3ec3845d12ad8a6b25690ca8f05c16df2f8d0072f7a75a7f22328214c2db50847443b69a0ad1912c5a8c58ade10cbce761101b21a831aff6152f36a9434763263c9dcee8e0086e61ad463f805465fb89653cd2063c8085778de4575f9367d271cb7da6f568ffc1f0ac7c0ec06c2701a6f786bf20ed0ef25ef4f3ac338ec659fb56a10721864c874e19fd14b48ecf65d260666bbdac07a07aa0ac201407e032a2371245061dd33ec3c94e8e16a672a611f460fa6767457751465f6e9a752cf123bbf4d1068c776f0ab3d5751388b9e33d5ff9c45818ff4498131c0d1876abbcedd68e03102dbb56abb096f6687ba180af50ff33e28a84797224ef60950ae52a7b159d6bc9ee36a51dd803ae5732076b8d6de37a87fafb95cf68eee9ae8f7a40f2707d28e293c9aeb7cf27ecf49538c0c7a7c2d53e7c1860dcc994e20b2f90794b810b6935993491f9334ee151c5ec5969c7d41d2470def558914d8de0d6c2c09e44c6f5befe0b0cdc77d85a60457b9df298769c3ea309b1fb3b57f0e4175051280ec7658b6af8095347f01c069e8863aef2c9ce2dafa5328a9a70e7bd11a9c2ba501beeb5358afcd55daae77906459c7c1e9b79b504ea5372db399e2a0ed035b6eb4530aab885f250d7c0a0be147b96b576a9749b1f3a29bf28c5417364a334c94404228c56e698af15c991261e47d192537e28adb982fa8fe5f0d2f98aad4e24d6fdb6b9951909e217ebf279beddeac0b3946c138dff7c10255b9ae5fe68bdf5efe16b1f1b6fafcb7fd85d2c6b608e1c147130ea3b5ee17b5f5aed0aa3078530bf9fef6e02823ae6791ae54c241b8b88804f5640b8ed1d351242c8d5f080aa982c4c312fd1fb491bc29ef57e3ceda1ef2b4438ec66598a2e0efaed1c3b"}, @ETHTOOL_A_BITSET_VALUE={0x15, 0x4, "a70f34360b889304d2f1d338b23829e90e"}, @ETHTOOL_A_BITSET_VALUE={0x82, 0x4, "99604e02af9f4cc0b2ae361d06dfd0daf13b230c3327f722222b35ba0189bab5097be0d9b768fac591e1b4c5db00efe9f90b510f772c3caa661db8abe3e74383f42e856e76ed577ecbfbe7a68943bc3d79cf43c975952fafc2ce94f761395b36de990650ea08a498844580f845c4de7406786c31be4384d1651efe0c6b4f"}, @ETHTOOL_A_BITSET_MASK={0xb4, 0x5, "01a6b5859af98bfd0930e59b6e239ee2a61deeb339841f5f07c3e88df1d3d8274d64ab18815ea6910a921256c369ac24b7d62ff28279f27bf55fd5dab0ef314e97a126ec1844775e0bf639c099fbdc5c0d177ba7d42c2b66cab209ab4c85f87ddf126c5427ccb614105a55fbef8254fb5ca8d40a8d8dbf7010ffa06b9f33626b1fb9bea25f82424d13226c64d05f4da76c767369e4238d2c76982d5ebac7fee3ab77edece021364197796214154ff67e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x119c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x1, 0x88000) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r2, 0x0) 14:12:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@setneightbl={0x1c, 0x43, 0x0, 0x70bd29, 0x25dfdbfd, {0x1c}, [@NDTA_THRESH3={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc6a19904846ce677}, 0x4800) 14:12:13 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x3, 0x11, r1, 0x0) 14:12:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@setneightbl={0x1c, 0x43, 0x0, 0x70bd29, 0x25dfdbfd, {0x1c}, [@NDTA_THRESH3={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc6a19904846ce677}, 0x4800) 14:12:13 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000000c0)=0xe40, 0x4) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6_vti0\x00', r1, 0x4, 0xbd, 0x3f, 0x8001, 0x63, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x1, 0x20, 0x3}}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0x2, 0x0) r4 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000180)={r4}) 14:12:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@setneightbl={0x1c, 0x43, 0x0, 0x70bd29, 0x25dfdbfd, {0x1c}, [@NDTA_THRESH3={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc6a19904846ce677}, 0x4800) 14:12:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0xf0ffffff7f0000}, 0x300}, 0x0) 14:12:13 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000000c0)=0xe40, 0x4) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6_vti0\x00', r1, 0x4, 0xbd, 0x3f, 0x8001, 0x63, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x1, 0x20, 0x3}}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0x2, 0x0) r4 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000180)={r4}) 14:12:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@setneightbl={0x1c, 0x43, 0x1, 0x0, 0x25dfdbfd, {0x1c}, [@NDTA_THRESH3={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc6a19904846ce677}, 0x4800) 14:12:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@setneightbl={0x1c, 0x43, 0x1, 0x0, 0x0, {0x1c}, [@NDTA_THRESH3={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc6a19904846ce677}, 0x4800) 14:12:13 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000000c0)=0xe40, 0x4) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6_vti0\x00', r1, 0x4, 0xbd, 0x3f, 0x8001, 0x63, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x1, 0x20, 0x3}}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0x2, 0x0) r4 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000180)={r4}) 14:12:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@setneightbl={0x1c, 0x43, 0x1, 0x0, 0x0, {}, [@NDTA_THRESH3={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc6a19904846ce677}, 0x4800) 14:12:13 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000000c0)=0xe40, 0x4) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@setneightbl={0x14, 0x43, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xc6a19904846ce677}, 0x4800) 14:12:13 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000000c0)=0xe40, 0x4) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@setneightbl={0x14, 0x43, 0x1}, 0x14}}, 0x4800) 14:12:13 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@setneightbl={0x14, 0x43, 0x1}, 0x14}}, 0x0) 14:12:13 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:13 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000000c0)=0xe40, 0x4) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:13 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:13 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000000c0)=0xe40, 0x4) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0xb5f91e487f59d6b2, 0x81, 0x6, 0x1f, 0x10, @empty, @mcast2, 0x10, 0x10, 0xffff, 0x7}}) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x4, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0x0, 0x4b, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x10, 0xc009, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x4, 0x86, 0x7f, 0xbe, 0x1, @mcast1, @private0, 0x40, 0x20, 0x3c, 0x7fff}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x3c, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x0, 0x4, 0xc8, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x40, 0x6, 0x800}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x1, 0x7, 0x40, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x40, 0x81, 0x3e5}}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r13, 0x1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0x10c, 0x0, 0x100, 0x70bd25, 0xc0000000, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00'}) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000eb999a2a694af4d0381354cda4e423ba1cd491d6aa75f4722649f868857fa25bb42a14fd0a76daf247f8391dff9a5fe73d5593118760f35f35fd075d6faf7317b1accc396cfd65ec5d477d6b242475e209c8190cc183def1bb120ad536654d872d0f978d9caaf232", @ANYRES16=r16, @ANYBLOB="0100000000000000000014000000"], 0x14}}, 0x0) 14:12:13 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:13 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000000c0)=0xe40, 0x4) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:13 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:13 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000000c0)=0xe40, 0x4) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x1008}, 0x300}, 0x0) 14:12:13 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:13 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000000c0)=0xe40, 0x4) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:13 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:13 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000000c0)=0xe40, 0x4) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:13 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:13 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:13 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:13 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:14 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 14:12:14 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x100000000000000}, 0x300}, 0x0) 14:12:14 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 14:12:14 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:14 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:14 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 14:12:14 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:14 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:14 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:14 executing program 1: r0 = syz_open_dev$vcsu(0x0, 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:14 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:14 executing program 1: r0 = syz_open_dev$vcsu(0x0, 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:14 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:14 executing program 1: r0 = syz_open_dev$vcsu(0x0, 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:14 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 14:12:14 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:14 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 14:12:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0xb5f91e487f59d6b2, 0x81, 0x6, 0x1f, 0x10, @empty, @mcast2, 0x10, 0x10, 0xffff, 0x7}}) (async, rerun: 64) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x4, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x80) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0x0, 0x4b, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x10, 0xc009, 0x6}}) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x4, 0x86, 0x7f, 0xbe, 0x1, @mcast1, @private0, 0x40, 0x20, 0x3c, 0x7fff}}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x3c, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x0, 0x4, 0xc8, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x40, 0x6, 0x800}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x1, 0x7, 0x40, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x40, 0x81, 0x3e5}}) (async, rerun: 32) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r13, 0x1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0x10c, 0x0, 0x100, 0x70bd25, 0xc0000000, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00'}) (async) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000eb999a2a694af4d0381354cda4e423ba1cd491d6aa75f4722649f868857fa25bb42a14fd0a76daf247f8391dff9a5fe73d5593118760f35f35fd075d6faf7317b1accc396cfd65ec5d477d6b242475e209c8190cc183def1bb120ad536654d872d0f978d9caaf232", @ANYRES16=r16, @ANYBLOB="0100000000000000000014000000"], 0x14}}, 0x0) 14:12:14 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:14 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 14:12:14 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:14 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0xb5f91e487f59d6b2, 0x81, 0x6, 0x1f, 0x10, @empty, @mcast2, 0x10, 0x10, 0xffff, 0x7}}) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x4, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0x0, 0x4b, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x10, 0xc009, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x4, 0x86, 0x7f, 0xbe, 0x1, @mcast1, @private0, 0x40, 0x20, 0x3c, 0x7fff}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x4, 0x86, 0x7f, 0xbe, 0x1, @mcast1, @private0, 0x40, 0x20, 0x3c, 0x7fff}}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x3c, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x3c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x3c, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x0, 0x4, 0xc8, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x40, 0x6, 0x800}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x1, 0x7, 0x40, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x40, 0x81, 0x3e5}}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r13, 0x1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0x20}}, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r13, 0x1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0x10c, 0x0, 0x100, 0x70bd25, 0xc0000000, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00'}) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000eb999a2a694af4d0381354cda4e423ba1cd491d6aa75f4722649f868857fa25bb42a14fd0a76daf247f8391dff9a5fe73d5593118760f35f35fd075d6faf7317b1accc396cfd65ec5d477d6b242475e209c8190cc183def1bb120ad536654d872d0f978d9caaf232", @ANYRES16=r16, @ANYBLOB="0100000000000000000014000000"], 0x14}}, 0x0) 14:12:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x1008}, 0x300}, 0x0) 14:12:14 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:14 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:14 executing program 3: sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x1008}, 0x300}, 0x0) 14:12:14 executing program 4: r0 = syz_open_dev$vcsu(0x0, 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:14 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:14 executing program 3: sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x1008}, 0x300}, 0x0) 14:12:14 executing program 4: r0 = syz_open_dev$vcsu(0x0, 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:14 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:14 executing program 3: sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x1008}, 0x300}, 0x0) 14:12:14 executing program 4: r0 = syz_open_dev$vcsu(0x0, 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:15 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x200000000000000}, 0x300}, 0x0) 14:12:15 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:15 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x1008}, 0x300}, 0x0) 14:12:15 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:15 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x1008}, 0x300}, 0x0) 14:12:15 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x1008}, 0x300}, 0x0) 14:12:15 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:15 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, 0x0, 0x0) 14:12:15 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 14:12:15 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, 0x0, 0x0) 14:12:15 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 14:12:15 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, 0x0, 0x0) 14:12:15 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:15 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 14:12:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x300}, 0x0) 14:12:15 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:15 executing program 0: pselect6(0x40, &(0x7f0000000000)={0x3000000000000, 0xfffffffffffffffa, 0x5, 0x5, 0x41b4, 0x1, 0x1, 0xc00000000000000}, &(0x7f0000000080)={0x7fffffffffffffff, 0x0, 0x800, 0x7931, 0x5, 0x20, 0x5, 0x4052}, &(0x7f0000000100)={0x1ff, 0xabf1, 0x5, 0xdb1, 0x8, 0x4, 0x8000000000000001, 0x2}, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x7]}, 0x8}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0x8, 0x6, 0xffffffffffffffff, 0x100000001}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x0, {0x14}}, 0x14}}, 0x0) 14:12:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x300}, 0x0) 14:12:15 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:15 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:15 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x300}, 0x0) 14:12:15 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:15 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:15 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:15 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:15 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:15 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:15 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x300000000000000}, 0x300}, 0x0) 14:12:16 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:16 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:16 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:16 executing program 0: pselect6(0x40, &(0x7f0000000000)={0x3000000000000, 0xfffffffffffffffa, 0x5, 0x5, 0x41b4, 0x1, 0x1, 0xc00000000000000}, &(0x7f0000000080)={0x7fffffffffffffff, 0x0, 0x800, 0x7931, 0x5, 0x20, 0x5, 0x4052}, &(0x7f0000000100)={0x1ff, 0xabf1, 0x5, 0xdb1, 0x8, 0x4, 0x8000000000000001, 0x2}, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x7]}, 0x8}) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0x8, 0x6, 0xffffffffffffffff, 0x100000001}, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x0, {0x14}}, 0x14}}, 0x0) 14:12:16 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:16 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:16 executing program 0: pselect6(0x40, &(0x7f0000000000)={0x3000000000000, 0xfffffffffffffffa, 0x5, 0x5, 0x41b4, 0x1, 0x1, 0xc00000000000000}, &(0x7f0000000080)={0x7fffffffffffffff, 0x0, 0x800, 0x7931, 0x5, 0x20, 0x5, 0x4052}, &(0x7f0000000100)={0x1ff, 0xabf1, 0x5, 0xdb1, 0x8, 0x4, 0x8000000000000001, 0x2}, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x7]}, 0x8}) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) pselect6(0x40, &(0x7f0000001000)={0x8, 0x6, 0xffffffffffffffff, 0x100000001}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x0, {0x14}}, 0x14}}, 0x0) 14:12:16 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 14:12:16 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:16 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0x9, 0x0, 0x0, 0x8000000000000001, 0x7fffffff}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x0, {0x14}}, 0x14}}, 0x0) 14:12:16 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 14:12:16 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:16 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2, 0x6, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8000, 0x700, 0x2, 0x800}}) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:16 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 14:12:16 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:16 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 14:12:16 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 14:12:16 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x2300000000000000) 14:12:16 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 14:12:16 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) 14:12:16 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 14:12:16 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 14:12:16 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) 14:12:16 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 14:12:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0x9, 0x0, 0x0, 0x8000000000000001, 0x7fffffff}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x0, {0x14}}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) pselect6(0x40, &(0x7f0000001000)={0x9, 0x0, 0x0, 0x8000000000000001, 0x7fffffff}, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x0, {0x14}}, 0x14}}, 0x0) (async) 14:12:16 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:16 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) 14:12:16 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:16 executing program 3: r0 = syz_open_dev$vcsu(0x0, 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:16 executing program 1: r0 = syz_open_dev$vcsu(0x0, 0x0, 0x2) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x400000000000000}, 0x300}, 0x0) 14:12:17 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) 14:12:17 executing program 3: r0 = syz_open_dev$vcsu(0x0, 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:17 executing program 1: r0 = syz_open_dev$vcsu(0x0, 0x0, 0x2) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0x9, 0x0, 0x0, 0x8000000000000001, 0x7fffffff}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x0, {0x14}}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) pselect6(0x40, &(0x7f0000001000)={0x9, 0x0, 0x0, 0x8000000000000001, 0x7fffffff}, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x0, {0x14}}, 0x14}}, 0x0) (async) 14:12:17 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) 14:12:17 executing program 3: r0 = syz_open_dev$vcsu(0x0, 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:17 executing program 1: r0 = syz_open_dev$vcsu(0x0, 0x0, 0x2) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:17 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) 14:12:17 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:17 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:17 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, 0xffffffffffffffff, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) 14:12:17 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, 0xffffffffffffffff, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) 14:12:17 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:17 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:17 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:17 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, 0xffffffffffffffff, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) 14:12:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x80800) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001040)=ANY=[@ANYBLOB="14000000", @ANYBLOB="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", @ANYBLOB="0001000000000000e45966130000"], 0x14}}, 0x20004890) 14:12:17 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) 14:12:17 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:17 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:17 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:17 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:17 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:17 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, 0xffffffffffffffff, 0x0) 14:12:17 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:17 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, 0xffffffffffffffff, 0x0) 14:12:17 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:17 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 14:12:17 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, 0xffffffffffffffff, 0x0) 14:12:17 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 14:12:17 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 14:12:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x600000000000000}, 0x300}, 0x0) 14:12:18 executing program 4: r0 = syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) 14:12:18 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 14:12:18 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 14:12:18 executing program 4: r0 = syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) 14:12:18 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 14:12:18 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 14:12:18 executing program 4: r0 = syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) 14:12:18 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) 14:12:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x80800) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001040)=ANY=[@ANYBLOB="14000000", @ANYBLOB="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", @ANYBLOB="0001000000000000e45966130000"], 0x14}}, 0x20004890) 14:12:18 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:18 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) 14:12:18 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) 14:12:18 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3008, 0x1, 0x11, r0, 0x0) 14:12:18 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x23000000) 14:12:18 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) 14:12:18 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x20000000) 14:12:18 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) 14:12:18 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r1, 0x2300) 14:12:18 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1b2f11ffff, 0x11, r1, 0x0) 14:12:18 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, 0xffffffffffffffff, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) 14:12:18 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x8, 0x11, r1, 0x0) 14:12:18 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, r1, 0x0) 14:12:18 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, 0xffffffffffffffff, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) 14:12:18 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, r1, 0x0) 14:12:18 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, 0xffffffffffffffff, 0x20ff6000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) 14:12:18 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) (fail_nth: 1) 14:12:18 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, r1, 0x0) 14:12:18 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) 14:12:18 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, 0xffffffffffffffff, 0x0) 14:12:18 executing program 4: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, 0xffffffffffffffff, 0x0) 14:12:18 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, 0xffffffffffffffff, 0x0) [ 3281.966510][T23553] FAULT_INJECTION: forcing a failure. [ 3281.966510][T23553] name failslab, interval 1, probability 0, space 0, times 0 [ 3281.981040][T23553] CPU: 1 PID: 23553 Comm: syz-executor.3 Not tainted 6.1.68-syzkaller-00050-g09ca5740fbbe #0 [ 3281.991036][T23553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3282.000915][T23553] Call Trace: [ 3282.004039][T23553] [ 3282.006846][T23553] dump_stack_lvl+0x151/0x1b7 [ 3282.011331][T23553] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3282.016625][T23553] dump_stack+0x15/0x1b [ 3282.020615][T23553] should_fail_ex+0x3d0/0x520 [ 3282.028868][T23553] ? vm_area_dup+0x27/0x290 [ 3282.033197][T23553] __should_failslab+0xaf/0xf0 [ 3282.037800][T23553] should_failslab+0x9/0x20 [ 3282.042135][T23553] kmem_cache_alloc+0x3b/0x2c0 [ 3282.046736][T23553] vm_area_dup+0x27/0x290 [ 3282.050903][T23553] ? __split_vma+0x1a1/0x880 [ 3282.055331][T23553] __split_vma+0x1ba/0x880 [ 3282.059583][T23553] do_mas_align_munmap+0x85b/0x1400 [ 3282.064703][T23553] ? kernel_text_address+0xa9/0xe0 [ 3282.069660][T23553] ? do_mas_munmap+0x2b0/0x2b0 [ 3282.074256][T23553] ? mas_find+0x4e4/0x520 [ 3282.078415][T23553] do_mas_munmap+0x23e/0x2b0 [ 3282.082851][T23553] mmap_region+0x75c/0x2390 [ 3282.087184][T23553] ? file_mmap_ok+0x150/0x150 [ 3282.091693][T23553] ? cap_mmap_addr+0x169/0x2e0 [ 3282.096293][T23553] ? __kasan_check_read+0x11/0x20 [ 3282.101155][T23553] ? shmem_get_unmapped_area+0x2e3/0x710 [ 3282.106621][T23553] ? arch_get_unmapped_area+0x780/0x780 [ 3282.112006][T23553] ? file_mmap_ok+0x104/0x150 [ 3282.116517][T23553] do_mmap+0x853/0xe30 [ 3282.120427][T23553] ? mlock_future_check+0x110/0x110 [ 3282.125463][T23553] vm_mmap_pgoff+0x208/0x430 [ 3282.129885][T23553] ? account_locked_vm+0x250/0x250 [ 3282.134831][T23553] ? __fget_files+0x2cb/0x330 [ 3282.139344][T23553] ksys_mmap_pgoff+0x15d/0x1e0 [ 3282.143942][T23553] __x64_sys_mmap+0x103/0x120 [ 3282.148456][T23553] do_syscall_64+0x3d/0xb0 [ 3282.152713][T23553] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3282.158437][T23553] RIP: 0033:0x7fda5a67dda9 [ 3282.162776][T23553] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3282.182396][T23553] RSP: 002b:00007fda5b4990c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3282.190639][T23553] RAX: ffffffffffffffda RBX: 00007fda5a7abf80 RCX: 00007fda5a67dda9 [ 3282.198450][T23553] RDX: 0000000000000002 RSI: 0000000000009000 RDI: 0000000020ff6000 [ 3282.206265][T23553] RBP: 00007fda5b499120 R08: 0000000000000003 R09: 0000000000000000 [ 3282.214079][T23553] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 3282.221887][T23553] R13: 000000000000000b R14: 00007fda5a7abf80 R15: 00007ffe0577dae8 [ 3282.229726][T23553] 14:12:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x604000000000000}, 0x300}, 0x0) 14:12:18 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, 0xffffffffffffffff, 0x0) 14:12:18 executing program 4: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, 0xffffffffffffffff, 0x0) 14:12:18 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) (fail_nth: 2) 14:12:18 executing program 4: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, 0xffffffffffffffff, 0x0) 14:12:19 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, r1, 0x0) 14:12:19 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (fail_nth: 1) 14:12:19 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, r0, 0x0) 14:12:19 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, r0, 0x0) [ 3282.720804][T23576] FAULT_INJECTION: forcing a failure. [ 3282.720804][T23576] name failslab, interval 1, probability 0, space 0, times 0 [ 3282.737760][T23576] CPU: 1 PID: 23576 Comm: syz-executor.3 Not tainted 6.1.68-syzkaller-00050-g09ca5740fbbe #0 [ 3282.745560][T23581] FAULT_INJECTION: forcing a failure. [ 3282.745560][T23581] name failslab, interval 1, probability 0, space 0, times 0 [ 3282.747755][T23576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3282.747774][T23576] Call Trace: [ 3282.747781][T23576] [ 3282.747788][T23576] dump_stack_lvl+0x151/0x1b7 [ 3282.747822][T23576] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3282.785773][T23576] dump_stack+0x15/0x1b [ 3282.789759][T23576] should_fail_ex+0x3d0/0x520 [ 3282.794275][T23576] ? vm_area_dup+0x65/0x290 [ 3282.798612][T23576] __should_failslab+0xaf/0xf0 [ 3282.803214][T23576] should_failslab+0x9/0x20 [ 3282.807553][T23576] kmem_cache_alloc+0x3b/0x2c0 [ 3282.812153][T23576] vm_area_dup+0x65/0x290 [ 3282.816317][T23576] __split_vma+0x1ba/0x880 [ 3282.820578][T23576] do_mas_align_munmap+0x85b/0x1400 [ 3282.827179][T23576] ? kernel_text_address+0xa9/0xe0 [ 3282.832120][T23576] ? do_mas_munmap+0x2b0/0x2b0 [ 3282.836720][T23576] ? mas_find+0x4e4/0x520 [ 3282.840884][T23576] do_mas_munmap+0x23e/0x2b0 [ 3282.845311][T23576] mmap_region+0x75c/0x2390 [ 3282.849648][T23576] ? file_mmap_ok+0x150/0x150 [ 3282.854167][T23576] ? cap_mmap_addr+0x169/0x2e0 [ 3282.858757][T23576] ? __kasan_check_read+0x11/0x20 [ 3282.863620][T23576] ? shmem_get_unmapped_area+0x2e3/0x710 [ 3282.869102][T23576] ? arch_get_unmapped_area+0x780/0x780 [ 3282.874473][T23576] ? file_mmap_ok+0x104/0x150 [ 3282.878983][T23576] do_mmap+0x853/0xe30 [ 3282.882890][T23576] ? mlock_future_check+0x110/0x110 [ 3282.887925][T23576] vm_mmap_pgoff+0x208/0x430 [ 3282.892348][T23576] ? account_locked_vm+0x250/0x250 [ 3282.897302][T23576] ? __fget_files+0x2cb/0x330 [ 3282.901809][T23576] ksys_mmap_pgoff+0x15d/0x1e0 [ 3282.906406][T23576] __x64_sys_mmap+0x103/0x120 [ 3282.910921][T23576] do_syscall_64+0x3d/0xb0 [ 3282.915174][T23576] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3282.920900][T23576] RIP: 0033:0x7fda5a67dda9 [ 3282.925153][T23576] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3282.944601][T23576] RSP: 002b:00007fda5b4990c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3282.952928][T23576] RAX: ffffffffffffffda RBX: 00007fda5a7abf80 RCX: 00007fda5a67dda9 [ 3282.960736][T23576] RDX: 0000000000000002 RSI: 0000000000009000 RDI: 0000000020ff6000 14:12:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x80800) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001040)=ANY=[@ANYBLOB="14000000", @ANYBLOB="1c441ad3b1a1c7e2536e36d5d179bb61a4ecda98534636064c30bc57da1cf270f75ba5a8f113bbd9175ff2eda80e28c1ff2330311c7d3fa578d32248e6a200a6991a3a25a427b723a3d5a6bf9ab4d4483b886a78bf0d5a4e3ad383d8185e24a5db036c5bdafd425ea4278ca67ec7538d5fee54ddaac1322d73f7adac94fe3cb3a4bee3f7da0f5d0b6b18b6133f3925f1362f2bb3fae5e1556445fef29dea99d453b7f234b1eca484840deff29a05aec327cb667d2b79f5d7275a42b3a003f0a78936c82b889594565562ecd61ee70625e1a838adc25546e6466c7fa02b24962d78646650d8e3175bcd2b0b66302485904356e0f40ae9ea6d7262cb48012a27c3856f05ede094b48641a0975bd9718a6686901f2bcd32f3ed7a71075d8921d2f506dafe1d0664a8e32ff7ba9fdc00fb31fd6ee3e0b6494b3b63de3088582b48e51d273fe45f1f48c660474af8032aa145250ee49e98f36a9df98447ea7df4fb527360c3ff03f9201e0c2bc141830bea5c260e12774e9a08e0ceb3dddfbc35f240584483af0db8ac68a5c9ac743ab87f342443829439653d05a6eedebeef248dd89e6d4e6402ea18894a6a75ff73dcc31c3e6e49af74b8d61757598055b841d94cfc61e44994e369ad03125db903b4f9a9eb5a97f87e88e1a1424fa3f22d812733d240eb50ae76dc400305b8cef068b28e29301ba13326d83a237630c1e0190b3a4df69e670cccb52412b8da0ceeef7d52d2d5c563d3a5ea862657982dec9c819eb09ff4d8ec48a972c9d0d3504ea75cc5c9d5795a5444af1ee502d27e50060aff2aa5bbfdf26f17772d13effa88492f24fed85e174db837115790f1b415b6a7bd893fe2963f5fd6bd0b2f5a18643855a03e4ef8174639ff6d4ec8829b5d767ce1b8cbb7048b0a731f3fc0a186eee5f7f16389769f2d4d5e243cc81193173b5e194f5f6827bcf089e1da4dad7972c46dc86008e60e715d38525dcd428e5e97819e1faac924adb6177b3ee300fe1d0bcf393b503f8e0bc610dca4b1bff2b740679d68cf527107db944cbaf963e22c52735d63fdf3e6358fcb408502f755b9893d05451c65cd8dd7ab5c471368cac68fdd3305b373cae102a3dc7e546c7b0fdf9607889a014ef968fc40e8132db615f3c26347e94db62d332eefde4870fe75e5d5d5293025513e6b9f7c49f16903a2d5974e550b9ac6e7dcdd8ad9f95bf125b00db49304c63eac023e79b1eeeccb259f1d2e4da96bafc9334d502f138de339372e5b7a3c6bff7cef1d2e6409685f9b59a779509cab6e4ed645d7fe7049fab136ca1518a36dd5be7613be6b86c015bdb881842734fe011a268d826622382a6d6d16e0282408ea07917b457e1e0fc69a48f4a7ad312218bfb596e52f1cc3bd330f4b287ebe004d46b72fb6a65025faab37748ce0ea638cd745e03a3a99b85206b92b12cbb161f5d14d1915aafa026a317da67b748fccd98664ee02b6c868200ba0dbd994eafd08ad4aafa7efdc0d6f30098981621f937fd6db093f908c065b383c2694a3333afb2c0a7332f5961760672774ff0645d1597716a6c3f27ab2491dad0fe444f372a7929c00ef43b4054ae0a202df8a596899e4978865d04a1cd868a73ecece418157f772a616210363dc8b96fcf831f397bf442b0d02313787b866a558d21f0b9a9dde664e73eaee6bd143e15ac9ed77bbbb8df6876b4f5d3bd6cb65750bc40aca3d60f0e499b1c03a9c63c30e552f213c4f2307feca0e01b96d3c162aac726536ae2233d4d6a5d0a2b1a22b00afb1f55d2d9aa4db6b7fb8e43c360a50c3ec4911207c6026bb88e7122a1673818c1ab2bfd3520aa076e3ed896002b21cc5263db4798f9ddf2de6b6c6852cdbda172ad47808cebe275458afcfc5af97a6f250b4919b5a6a27c438f36e32aeac9a8a91971a708bf74af834ececd1eaa42dba1c6b135f302373eed65b4479d9fae11598b8bd54a936797f44af30152977aa8a7a8ca76201e1d87178fe0131cb2a0b85b81bf7af8a2661845f9101d8c2606c25285645d52be4a757f49b3a298efdf3aeddb9d1817abbf0286c45df90825196eeceb4b567bdcc6f395a3b296175e993c2b42fb99371ad4114ac3fa374d3911e88929a20b83e403663d3766055c7e4907a481ed38485670ad347efca54e86d4019521fca1ca4ae6347f140cda1f5b78e78f8ea4a2c470ae38cdec0127f982d54aab1239cc765ce4f1e95f3b323a9f65ac9f74956732e26820e4aaa74fa95780359d52a21bfc0fe75cea57ea97afc242487dcb44169e03ba5615df04575ebdabe653bf38debbea50df5f336571d4e9020a149e84499c31f2629b63e7c501ab4d475ff95c06b9f58dd695c521e601fb3f90caa0d0b7d3d0b2068fd7e5a396df2beafb9f21724b9fd58561b77f269003660726bf9b0bdecd1a79ad1a7e457d79de238a15060641e7baa33dd728fc03384302047374d9aff4532408376149109b4b762033686b10517c46217101b2e0bd0894f7c295964e34c43679a5b2fc6fa1fb6af85e2bbb1ead3daf4c1b2c10e3543372e910dda58122c1ab2a52d1698066ac25282c228ab1d2ca4944c185c7643a68283cbed72c0ce64985e1f4e61ef3ad3a3cc2f2df778a703fd28dfec5b16259527b44e3357bc649b69f48689bbdf844ce811d0eed5bdca07f72d49701b5ce96d66d918fbc7e0f55e1bf1e37c975ad06a5647dffe62d436a34d0ce07cc4a92bf4cbfe4a789e8f2ac7ad36182c17cef8c6a54ac13ca866e764cf595b6cb108e5077c5046d362a21c04f68c430748dd0e2df07cdd7e59e0e05fbf7df51620bd52b8b37af05fa40a9a97faeee20d88b938dd0fabadee994f7cd7b6aa3f85a8e0bb143a6f7dfbe610d7679c23f419e9de8f77f6b1a6c1ff84488ba43802d585bdc3eece93695764366ddafc473aa143435fcb3105e247759725826574eecf8e8c819a2c77823c559a595e4051d4f08d3007612f141eeca6b10005c76cd47fa328d4ca4eecea02b17ce0b1d74517aa41448465af7ad31950fc6bc8e35b34532ab09713c5e0fb1b1a1dc8ad94d5ee5cf0b38a3e1818fcb4c32cae457cb0e596a040512a344d90357291fbb9b297b7547659212e4ea1296b385e8d9f9552b4c1a613f21d4d82ff02a689a28cc62d4aa1e19ce2a46db844d4be20472afae9c39b25976e2ecf3a6522171c00068975bb72663a72272eb310b1ca436378005740016ea76d31e9bab8b86bd75a9c3fb42999bf16d27ac3f36195209f0e2fbeb89be682e914efe961ab567eeb55ef2576dfe72d5d5ba6266fe3cabb82b1170dd9baca6176c790ec793c2fe175dd58c2e9eb0360974039fc30ae08ed5bb11dc15761f01e980091b1ab3e77508afe446d62c704469e488a79d4cfa6b49b50baa698f7d8b97687bb934087ae726228857a89884aec311a5a6647a224c637496c42e0ee4ad2335a0cc1e4066f74929147a39cff4686da14f4f6637a87ae1995f8e19184136b9bef49e39cd581289dfaf7941bdb6fa12b60db2e1e70d4bf709099ba109d65feca0a497d85b30bb4b47f631bdd665af6f502c475af38c8f74ec04e1369f1801b922f3e26782cae40f40a10ae198358cf676d127caaf6611e533c2af59b20daa2a51e4fcb0ac6c4373ca404bc02bfe3c49017056bc7e004375f4b156d1b8cffa580160e2017cf88d4561aac06f0e742849953d73b9967d67f5e4c9403026e93e31cab7aa87a2c9419c5c34e41b5714bcead0ff643586c3dfc9915a27c6f384cc10a8d161ee32b33dc21764c02e0393a1c1942b9c17688fd4598e58dfa695817d66ecc47d2e883f8be1f9689be16d17b7bda958921e0d0ac20759759b4781ca36e5aa462e0e1662c048eca6c3ef93bc557ef019fc3b7b6257d9465dd52c86f061f393e26bb2a398af1881e246fa86c8d1988092261793a763863f9fb140074079b471f361206e5aa59f20772e5cabe68d93cc17ee04fe4640dce94a06263db2a6cc284bb957bac9deac1e00257403d017784498b070fde85e57f669fee7f9de57b32bfe73fd1e9f7213865d48a298ef33a18a744c231c899cb37ce1b0347f155eaf1cb3c91f452d3add9fa8c482c9c2daab6976f6e0a0f4c3428f48106dc9cf335e39df858eeafeb2952893b195c5765a91db0b48601ade7b68d398426bcab9bb0e4a92f32fda5697223f0a877e56cb9ae17a7c87880f17154703d57e11f07ef137b6b47345f5721371eba04bb7c7c6242b6e51e36b0881bc75449700535d2f43cdfab94df4a662887a51ae066db135c373a93a46d5e4f00c23bf460055ef33fc17395cb0768e9ae08c9aa9c981447fae1af3c169a8c8d94c3efebe9046add2904c885a41ab5d00d0107c628bc3dd27c55cc9db3d905506c0d7b5a9a12f5a53bcc82cdc611bb1b923964e3827c55da93da7df734977899e046e186793d7ca9a9856a56cebdeee0098ed6477d34879fc0bd580447e688557126e903f02869073ed2c805627934cf4789d92db184c5c060844de809c038f3e74a7467f657a55bfde5c02cd0cb5589813dd03940740dff2f3504bbe5c99ad425c7bfb7f3aae67950d65a925043a4150b3617be7e0c526bd59d2372ae9fa19d54bb4dc13674f4c93e6ccfcd030162e3643d3ea14b513f70ee0d7f986c0a6748abc16d331449bff2eaca0482658cf1570e2058c4b277d6da6e1956fcb7abd7140a24a0235f14b4b7b55586121df800b892228e5c29e33f3035190567495cd1da4da267e519f02b44f2b593f359dd139042f42ca0ca437f83bec4d5a42f404b3254f53360f783f05c76dbfab3093a7d23f3d34e546c44fce482e646e8361da252edd82277a9e10fb20b83411499c293253f3206ec5b30656a7fc21c540d7257b9b4c7f0781b3121aa3b93433528daaa301520b048f220e59996158d04ee0294ee55b80cec3d876563ea2100404dda1b6d81fec24c0020461323066dc9005a53f149332b99c45ba846a0b83a1cca9d4f8dc6a74488da92cc59735b1c835304ae499af276c2c708fcdb21d2b7aecb6ab0d1bbcfb115aaf9b678a10172ccfae67e63ab7f5eafa6d27ec6eeea859d311702f94c29dea4dfdb9116fa6c3aa448cd801c80e76bfe625fb5346c14c59a4794c2fa62f3bc474cf404877c2d493861b82d13537de98ca52936be44325aa0ab9729fa3a1ea0d0f80ccaeb3d2517104d96c811e6e2bf3858d72225e84a6ceb03ebeeb054f49e4a33e7b48c07d821f5ed9f130033bb8da1fe50d6a0370190e266c88eeaf318aa72f5700bb585b98b78cca0738a76f7a72a866ec98f1f006c5bc2dce29e7d2c008a20c526262043254827d52f8c936b02b374692785e6ec0cd04334299a7a2260dd1d8a1b09caeea143dc029136d73a0e3be080eec93f3387ed4fa98e30876b2cb636d4082c10258e9d77653fd6997a87a5bf9073074efb93c2109ffb899ac33ddcbcf93e5464115c343dd3b457b499ea1419d3a4cf83ca3a3da6abb0e559bf88b750a1cfa442ecad32a5afdc6ebbcf27d0910be7ee5280afaec552103b34ab429c047c03a5d89b2e114c83ac341edb41ffe4acc48040c33734094e4f5b33743fe81b9807573feeb2b548d4c63c52bbdab73b5e2ba6429bcb7bd3003055f55f5b57e47ed394650da5c023b1fbe3e02678a2f6e5cd81917f6c94b249c3675ec44b136e82534c7665e9a379642fcf769fa3aa6b307732aa6257bf0abbfb6fbe9a575de3dad4a647034019439beede626a9b7c0e3f35579c0e23ca1e8632a6578883015cc61a85dfcc3776efe498", @ANYBLOB="0001000000000000e45966130000"], 0x14}}, 0x20004890) 14:12:19 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, r0, 0x0) 14:12:19 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, r0, 0x0) [ 3282.968548][T23576] RBP: 00007fda5b499120 R08: 0000000000000003 R09: 0000000000000000 [ 3282.976362][T23576] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 3282.984179][T23576] R13: 000000000000000b R14: 00007fda5a7abf80 R15: 00007ffe0577dae8 [ 3282.992016][T23576] [ 3282.994849][T23581] CPU: 0 PID: 23581 Comm: syz-executor.4 Not tainted 6.1.68-syzkaller-00050-g09ca5740fbbe #0 [ 3283.004835][T23581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3283.014730][T23581] Call Trace: [ 3283.017854][T23581] 14:12:19 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, r0, 0x0) 14:12:19 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, r0, 0x0) 14:12:19 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, r1, 0x0) 14:12:19 executing program 1: r0 = syz_open_dev$vcsu(0x0, 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, r1, 0x0) 14:12:19 executing program 1: r0 = syz_open_dev$vcsu(0x0, 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, r1, 0x0) 14:12:19 executing program 1: r0 = syz_open_dev$vcsu(0x0, 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, r1, 0x0) [ 3283.020634][T23581] dump_stack_lvl+0x151/0x1b7 [ 3283.025142][T23581] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3283.030443][T23581] dump_stack+0x15/0x1b [ 3283.034433][T23581] should_fail_ex+0x3d0/0x520 [ 3283.038944][T23581] ? vm_area_dup+0x27/0x290 [ 3283.043284][T23581] __should_failslab+0xaf/0xf0 [ 3283.047884][T23581] should_failslab+0x9/0x20 [ 3283.052222][T23581] kmem_cache_alloc+0x3b/0x2c0 [ 3283.056823][T23581] vm_area_dup+0x27/0x290 [ 3283.060988][T23581] ? __split_vma+0x1a1/0x880 [ 3283.065428][T23581] __split_vma+0x1ba/0x880 14:12:19 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, r1, 0x0) 14:12:19 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, r1, 0x0) 14:12:19 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, r1, 0x0) 14:12:19 executing program 1: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, r0, 0x0) 14:12:19 executing program 1: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, r0, 0x0) 14:12:19 executing program 1: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, r0, 0x0) [ 3283.069671][T23581] do_mas_align_munmap+0x3bf/0x1400 [ 3283.074706][T23581] ? kernel_text_address+0xa9/0xe0 [ 3283.079649][T23581] ? __kernel_text_address+0xd/0x40 [ 3283.084690][T23581] ? avc_has_perm_noaudit+0x348/0x430 [ 3283.089892][T23581] ? do_mas_munmap+0x2b0/0x2b0 [ 3283.094495][T23581] ? mas_find+0x4e4/0x520 [ 3283.098660][T23581] do_mas_munmap+0x23e/0x2b0 [ 3283.103085][T23581] mmap_region+0x75c/0x2390 [ 3283.107430][T23581] ? file_mmap_ok+0x150/0x150 [ 3283.111936][T23581] ? cap_mmap_addr+0x169/0x2e0 [ 3283.116535][T23581] ? __kasan_check_read+0x11/0x20 14:12:19 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, r1, 0x0) 14:12:19 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, r1, 0x0) 14:12:19 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, r1, 0x0) 14:12:19 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, r1, 0x0) 14:12:19 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, r1, 0x0) 14:12:19 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, r1, 0x0) [ 3283.121396][T23581] ? shmem_get_unmapped_area+0x2e3/0x710 [ 3283.126872][T23581] ? arch_get_unmapped_area+0x780/0x780 [ 3283.132248][T23581] ? file_mmap_ok+0x104/0x150 [ 3283.136757][T23581] do_mmap+0x853/0xe30 [ 3283.140666][T23581] ? mlock_future_check+0x110/0x110 [ 3283.145700][T23581] vm_mmap_pgoff+0x208/0x430 [ 3283.150126][T23581] ? account_locked_vm+0x250/0x250 [ 3283.155070][T23581] ? __fget_files+0x2cb/0x330 [ 3283.159591][T23581] ksys_mmap_pgoff+0x15d/0x1e0 [ 3283.164618][T23581] __x64_sys_mmap+0x103/0x120 14:12:19 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, 0xffffffffffffffff, 0x0) 14:12:19 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, 0xffffffffffffffff, 0x0) [ 3283.169136][T23581] do_syscall_64+0x3d/0xb0 [ 3283.173383][T23581] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3283.179111][T23581] RIP: 0033:0x7f946707dda9 [ 3283.183366][T23581] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3283.202806][T23581] RSP: 002b:00007f9467d500c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3283.211054][T23581] RAX: ffffffffffffffda RBX: 00007f94671abf80 RCX: 00007f946707dda9 [ 3283.218857][T23581] RDX: 0000000000000001 RSI: 00000000001fffff RDI: 0000000020ffa000 [ 3283.226673][T23581] RBP: 00007f9467d50120 R08: 0000000000000003 R09: 0000000000000000 [ 3283.234482][T23581] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 3283.242290][T23581] R13: 000000000000000b R14: 00007f94671abf80 R15: 00007ffd7f48dbe8 [ 3283.250108][T23581] 14:12:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x810000000000000}, 0x300}, 0x0) 14:12:19 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) (fail_nth: 3) 14:12:19 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, 0xffffffffffffffff, 0x0) 14:12:19 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (fail_nth: 2) [ 3283.558364][T23638] FAULT_INJECTION: forcing a failure. [ 3283.558364][T23638] name failslab, interval 1, probability 0, space 0, times 0 [ 3283.558367][T23639] FAULT_INJECTION: forcing a failure. [ 3283.558367][T23639] name failslab, interval 1, probability 0, space 0, times 0 [ 3283.558392][T23639] CPU: 0 PID: 23639 Comm: syz-executor.3 Not tainted 6.1.68-syzkaller-00050-g09ca5740fbbe #0 [ 3283.593178][T23639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3283.603058][T23639] Call Trace: [ 3283.606182][T23639] [ 3283.608960][T23639] dump_stack_lvl+0x151/0x1b7 [ 3283.613475][T23639] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3283.618771][T23639] ? __kernel_text_address+0xd/0x40 [ 3283.623808][T23639] dump_stack+0x15/0x1b [ 3283.627800][T23639] should_fail_ex+0x3d0/0x520 [ 3283.632398][T23639] ? mas_alloc_nodes+0x267/0x7d0 [ 3283.637168][T23639] __should_failslab+0xaf/0xf0 [ 3283.641770][T23639] should_failslab+0x9/0x20 [ 3283.646110][T23639] kmem_cache_alloc+0x3b/0x2c0 [ 3283.650709][T23639] mas_alloc_nodes+0x267/0x7d0 [ 3283.655311][T23639] mas_preallocate+0xef2/0x1bd0 [ 3283.660002][T23639] ? mas_destroy+0x3280/0x3280 [ 3283.664594][T23639] ? rwsem_write_trylock+0x15b/0x290 [ 3283.669722][T23639] __vma_adjust+0x785/0x2070 [ 3283.674146][T23639] ? vma_start_write+0x160/0x160 [ 3283.678916][T23639] ? rwsem_write_trylock+0x15b/0x290 [ 3283.684039][T23639] __split_vma+0x619/0x880 [ 3283.688291][T23639] do_mas_align_munmap+0x85b/0x1400 [ 3283.693324][T23639] ? kernel_text_address+0xa9/0xe0 [ 3283.698275][T23639] ? do_mas_munmap+0x2b0/0x2b0 [ 3283.702874][T23639] ? mas_find+0x4e4/0x520 [ 3283.707036][T23639] do_mas_munmap+0x23e/0x2b0 [ 3283.711463][T23639] mmap_region+0x75c/0x2390 [ 3283.715812][T23639] ? file_mmap_ok+0x150/0x150 [ 3283.720318][T23639] ? cap_mmap_addr+0x169/0x2e0 [ 3283.724927][T23639] ? __kasan_check_read+0x11/0x20 [ 3283.729775][T23639] ? shmem_get_unmapped_area+0x2e3/0x710 [ 3283.735242][T23639] ? arch_get_unmapped_area+0x780/0x780 [ 3283.740627][T23639] ? file_mmap_ok+0x104/0x150 [ 3283.745198][T23639] do_mmap+0x853/0xe30 [ 3283.749046][T23639] ? mlock_future_check+0x110/0x110 [ 3283.754080][T23639] vm_mmap_pgoff+0x208/0x430 [ 3283.758506][T23639] ? account_locked_vm+0x250/0x250 [ 3283.763450][T23639] ? __fget_files+0x2cb/0x330 [ 3283.767968][T23639] ksys_mmap_pgoff+0x15d/0x1e0 [ 3283.772563][T23639] __x64_sys_mmap+0x103/0x120 [ 3283.777077][T23639] do_syscall_64+0x3d/0xb0 [ 3283.781326][T23639] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3283.787056][T23639] RIP: 0033:0x7fda5a67dda9 [ 3283.791309][T23639] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3283.810753][T23639] RSP: 002b:00007fda5b4990c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3283.818995][T23639] RAX: ffffffffffffffda RBX: 00007fda5a7abf80 RCX: 00007fda5a67dda9 [ 3283.826804][T23639] RDX: 0000000000000002 RSI: 0000000000009000 RDI: 0000000020ff6000 [ 3283.834617][T23639] RBP: 00007fda5b499120 R08: 0000000000000003 R09: 0000000000000000 [ 3283.842428][T23639] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 3283.850239][T23639] R13: 000000000000000b R14: 00007fda5a7abf80 R15: 00007ffe0577dae8 [ 3283.858057][T23639] [ 3283.863339][T23638] CPU: 0 PID: 23638 Comm: syz-executor.4 Not tainted 6.1.68-syzkaller-00050-g09ca5740fbbe #0 [ 3283.873313][T23638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3283.883202][T23638] Call Trace: [ 3283.886326][T23638] [ 3283.889102][T23638] dump_stack_lvl+0x151/0x1b7 [ 3283.893617][T23638] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3283.898913][T23638] dump_stack+0x15/0x1b [ 3283.902902][T23638] should_fail_ex+0x3d0/0x520 [ 3283.907420][T23638] ? vm_area_dup+0x65/0x290 [ 3283.911755][T23638] __should_failslab+0xaf/0xf0 [ 3283.916357][T23638] should_failslab+0x9/0x20 [ 3283.920783][T23638] kmem_cache_alloc+0x3b/0x2c0 [ 3283.925387][T23638] vm_area_dup+0x65/0x290 [ 3283.929548][T23638] __split_vma+0x1ba/0x880 [ 3283.933801][T23638] do_mas_align_munmap+0x3bf/0x1400 [ 3283.938837][T23638] ? kernel_text_address+0xa9/0xe0 [ 3283.943782][T23638] ? __kernel_text_address+0xd/0x40 [ 3283.948819][T23638] ? avc_has_perm_noaudit+0x348/0x430 [ 3283.954023][T23638] ? do_mas_munmap+0x2b0/0x2b0 [ 3283.958626][T23638] ? mas_find+0x4e4/0x520 [ 3283.962793][T23638] do_mas_munmap+0x23e/0x2b0 [ 3283.967306][T23638] mmap_region+0x75c/0x2390 [ 3283.971646][T23638] ? file_mmap_ok+0x150/0x150 [ 3283.976156][T23638] ? cap_mmap_addr+0x169/0x2e0 [ 3283.980754][T23638] ? __kasan_check_read+0x11/0x20 [ 3283.985617][T23638] ? shmem_get_unmapped_area+0x2e3/0x710 [ 3283.991084][T23638] ? arch_get_unmapped_area+0x780/0x780 [ 3283.996467][T23638] ? file_mmap_ok+0x104/0x150 [ 3284.000977][T23638] do_mmap+0x853/0xe30 [ 3284.004886][T23638] ? mlock_future_check+0x110/0x110 [ 3284.009923][T23638] vm_mmap_pgoff+0x208/0x430 [ 3284.014346][T23638] ? account_locked_vm+0x250/0x250 [ 3284.019291][T23638] ? __fget_files+0x2cb/0x330 [ 3284.023808][T23638] ksys_mmap_pgoff+0x15d/0x1e0 [ 3284.028411][T23638] __x64_sys_mmap+0x103/0x120 [ 3284.032918][T23638] do_syscall_64+0x3d/0xb0 [ 3284.037173][T23638] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3284.042901][T23638] RIP: 0033:0x7f946707dda9 [ 3284.047156][T23638] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3284.066592][T23638] RSP: 002b:00007f9467d500c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3284.074838][T23638] RAX: ffffffffffffffda RBX: 00007f94671abf80 RCX: 00007f946707dda9 [ 3284.082648][T23638] RDX: 0000000000000001 RSI: 00000000001fffff RDI: 0000000020ffa000 [ 3284.090460][T23638] RBP: 00007f9467d50120 R08: 0000000000000003 R09: 0000000000000000 [ 3284.098272][T23638] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 14:12:20 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, r1, 0x0) 14:12:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000080)=0x8, 0x8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x0, 0x0, {0x14}}, 0x14}}, 0x0) 14:12:20 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) (fail_nth: 4) 14:12:20 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, r0, 0x0) 14:12:20 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, r1, 0x0) (fail_nth: 1) 14:12:20 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (fail_nth: 3) [ 3284.106082][T23638] R13: 000000000000000b R14: 00007f94671abf80 R15: 00007ffd7f48dbe8 [ 3284.113943][T23638] [ 3284.144175][T23656] FAULT_INJECTION: forcing a failure. [ 3284.144175][T23656] name failslab, interval 1, probability 0, space 0, times 0 [ 3284.145602][T23658] FAULT_INJECTION: forcing a failure. [ 3284.145602][T23658] name failslab, interval 1, probability 0, space 0, times 0 [ 3284.156912][T23654] FAULT_INJECTION: forcing a failure. [ 3284.156912][T23654] name failslab, interval 1, probability 0, space 0, times 0 [ 3284.169225][T23658] CPU: 0 PID: 23658 Comm: syz-executor.1 Not tainted 6.1.68-syzkaller-00050-g09ca5740fbbe #0 [ 3284.191588][T23658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3284.201483][T23658] Call Trace: [ 3284.204602][T23658] [ 3284.207379][T23658] dump_stack_lvl+0x151/0x1b7 [ 3284.211893][T23658] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3284.217275][T23658] dump_stack+0x15/0x1b [ 3284.221278][T23658] should_fail_ex+0x3d0/0x520 [ 3284.225780][T23658] ? vm_area_dup+0x27/0x290 [ 3284.230118][T23658] __should_failslab+0xaf/0xf0 [ 3284.234723][T23658] should_failslab+0x9/0x20 [ 3284.239061][T23658] kmem_cache_alloc+0x3b/0x2c0 [ 3284.243677][T23658] vm_area_dup+0x27/0x290 [ 3284.247824][T23658] ? __split_vma+0x1a1/0x880 [ 3284.252253][T23658] __split_vma+0x1ba/0x880 [ 3284.256508][T23658] do_mas_align_munmap+0x85b/0x1400 [ 3284.261538][T23658] ? kernel_text_address+0xa9/0xe0 [ 3284.266488][T23658] ? do_mas_munmap+0x2b0/0x2b0 [ 3284.271089][T23658] ? mas_find+0x4e4/0x520 [ 3284.275252][T23658] do_mas_munmap+0x23e/0x2b0 [ 3284.279680][T23658] mmap_region+0x75c/0x2390 [ 3284.284031][T23658] ? file_mmap_ok+0x150/0x150 [ 3284.288531][T23658] ? cap_mmap_addr+0x169/0x2e0 [ 3284.293217][T23658] ? __kasan_check_read+0x11/0x20 [ 3284.298078][T23658] ? shmem_get_unmapped_area+0x2e3/0x710 [ 3284.303545][T23658] ? arch_get_unmapped_area+0x780/0x780 [ 3284.308928][T23658] ? file_mmap_ok+0x104/0x150 [ 3284.313440][T23658] do_mmap+0x853/0xe30 [ 3284.317353][T23658] ? mlock_future_check+0x110/0x110 [ 3284.322380][T23658] vm_mmap_pgoff+0x208/0x430 [ 3284.326806][T23658] ? account_locked_vm+0x250/0x250 [ 3284.331762][T23658] ? __fget_files+0x2cb/0x330 [ 3284.336269][T23658] ksys_mmap_pgoff+0x15d/0x1e0 [ 3284.340867][T23658] __x64_sys_mmap+0x103/0x120 [ 3284.345378][T23658] do_syscall_64+0x3d/0xb0 [ 3284.349637][T23658] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3284.355358][T23658] RIP: 0033:0x7fe29ea7dda9 [ 3284.359612][T23658] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3284.379055][T23658] RSP: 002b:00007fe29f83a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3284.387304][T23658] RAX: ffffffffffffffda RBX: 00007fe29ebabf80 RCX: 00007fe29ea7dda9 [ 3284.395119][T23658] RDX: 0000000000000002 RSI: 00000000001f0002 RDI: 0000000020ff6000 [ 3284.402922][T23658] RBP: 00007fe29f83a120 R08: 0000000000000004 R09: 0000000000000000 14:12:20 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, r1, 0x0) (fail_nth: 2) [ 3284.410732][T23658] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 3284.418546][T23658] R13: 000000000000000b R14: 00007fe29ebabf80 R15: 00007ffca0c4c9f8 [ 3284.426360][T23658] [ 3284.429226][T23654] CPU: 1 PID: 23654 Comm: syz-executor.3 Not tainted 6.1.68-syzkaller-00050-g09ca5740fbbe #0 [ 3284.439205][T23654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3284.449102][T23654] Call Trace: [ 3284.452225][T23654] [ 3284.455001][T23654] dump_stack_lvl+0x151/0x1b7 [ 3284.459516][T23654] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3284.464822][T23654] dump_stack+0x15/0x1b [ 3284.468796][T23654] should_fail_ex+0x3d0/0x520 [ 3284.473313][T23654] __should_failslab+0xaf/0xf0 [ 3284.477911][T23654] should_failslab+0x9/0x20 [ 3284.482253][T23654] kmem_cache_alloc_bulk+0x2e/0x3d0 [ 3284.487284][T23654] mas_alloc_nodes+0x3ce/0x7d0 [ 3284.491889][T23654] mas_preallocate+0xef2/0x1bd0 [ 3284.496573][T23654] ? mas_destroy+0x3280/0x3280 [ 3284.501169][T23654] ? rwsem_write_trylock+0x15b/0x290 [ 3284.506294][T23654] __vma_adjust+0x785/0x2070 [ 3284.510721][T23654] ? vma_start_write+0x160/0x160 [ 3284.515492][T23654] ? rwsem_write_trylock+0x15b/0x290 [ 3284.520616][T23654] __split_vma+0x619/0x880 [ 3284.524866][T23654] do_mas_align_munmap+0x85b/0x1400 [ 3284.529900][T23654] ? kernel_text_address+0xa9/0xe0 [ 3284.534850][T23654] ? do_mas_munmap+0x2b0/0x2b0 [ 3284.539450][T23654] ? mas_find+0x4e4/0x520 [ 3284.543618][T23654] do_mas_munmap+0x23e/0x2b0 [ 3284.548043][T23654] mmap_region+0x75c/0x2390 [ 3284.552383][T23654] ? file_mmap_ok+0x150/0x150 [ 3284.556891][T23654] ? cap_mmap_addr+0x169/0x2e0 [ 3284.561489][T23654] ? __kasan_check_read+0x11/0x20 [ 3284.566350][T23654] ? shmem_get_unmapped_area+0x2e3/0x710 [ 3284.571819][T23654] ? arch_get_unmapped_area+0x780/0x780 [ 3284.577204][T23654] ? file_mmap_ok+0x104/0x150 [ 3284.581715][T23654] do_mmap+0x853/0xe30 [ 3284.585621][T23654] ? mlock_future_check+0x110/0x110 [ 3284.590659][T23654] vm_mmap_pgoff+0x208/0x430 [ 3284.595086][T23654] ? account_locked_vm+0x250/0x250 [ 3284.598617][T23663] FAULT_INJECTION: forcing a failure. [ 3284.598617][T23663] name failslab, interval 1, probability 0, space 0, times 0 [ 3284.600030][T23654] ? __fget_files+0x2cb/0x330 [ 3284.616960][T23654] ksys_mmap_pgoff+0x15d/0x1e0 [ 3284.621554][T23654] __x64_sys_mmap+0x103/0x120 [ 3284.626068][T23654] do_syscall_64+0x3d/0xb0 [ 3284.630323][T23654] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3284.636052][T23654] RIP: 0033:0x7fda5a67dda9 [ 3284.640301][T23654] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3284.659738][T23654] RSP: 002b:00007fda5b4990c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3284.667981][T23654] RAX: ffffffffffffffda RBX: 00007fda5a7abf80 RCX: 00007fda5a67dda9 [ 3284.675796][T23654] RDX: 0000000000000002 RSI: 0000000000009000 RDI: 0000000020ff6000 [ 3284.683616][T23654] RBP: 00007fda5b499120 R08: 0000000000000003 R09: 0000000000000000 [ 3284.691419][T23654] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 3284.699229][T23654] R13: 000000000000000b R14: 00007fda5a7abf80 R15: 00007ffe0577dae8 [ 3284.707044][T23654] [ 3284.710078][T23663] CPU: 1 PID: 23663 Comm: syz-executor.1 Not tainted 6.1.68-syzkaller-00050-g09ca5740fbbe #0 [ 3284.720040][T23663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3284.729933][T23663] Call Trace: [ 3284.733055][T23663] [ 3284.735834][T23663] dump_stack_lvl+0x151/0x1b7 [ 3284.740347][T23663] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3284.745649][T23663] dump_stack+0x15/0x1b [ 3284.749635][T23663] should_fail_ex+0x3d0/0x520 [ 3284.754146][T23663] ? vm_area_dup+0x65/0x290 [ 3284.758498][T23663] __should_failslab+0xaf/0xf0 [ 3284.763094][T23663] should_failslab+0x9/0x20 [ 3284.767424][T23663] kmem_cache_alloc+0x3b/0x2c0 [ 3284.772024][T23663] vm_area_dup+0x65/0x290 [ 3284.776190][T23663] __split_vma+0x1ba/0x880 [ 3284.780447][T23663] do_mas_align_munmap+0x3bf/0x1400 [ 3284.785477][T23663] ? kernel_text_address+0xa9/0xe0 [ 3284.790425][T23663] ? __kernel_text_address+0xd/0x40 [ 3284.795461][T23663] ? avc_has_perm_noaudit+0x348/0x430 [ 3284.800670][T23663] ? do_mas_munmap+0x2b0/0x2b0 [ 3284.805269][T23663] ? mas_find+0x4e4/0x520 [ 3284.809434][T23663] do_mas_munmap+0x23e/0x2b0 [ 3284.813863][T23663] mmap_region+0x75c/0x2390 [ 3284.818203][T23663] ? file_mmap_ok+0x150/0x150 [ 3284.822712][T23663] ? cap_mmap_addr+0x169/0x2e0 [ 3284.827313][T23663] ? __kasan_check_read+0x11/0x20 [ 3284.832173][T23663] ? shmem_get_unmapped_area+0x2e3/0x710 [ 3284.837640][T23663] ? arch_get_unmapped_area+0x780/0x780 [ 3284.843024][T23663] ? file_mmap_ok+0x104/0x150 [ 3284.847536][T23663] do_mmap+0x853/0xe30 [ 3284.851441][T23663] ? mlock_future_check+0x110/0x110 [ 3284.856476][T23663] vm_mmap_pgoff+0x208/0x430 [ 3284.860902][T23663] ? account_locked_vm+0x250/0x250 [ 3284.865847][T23663] ? __fget_files+0x2cb/0x330 [ 3284.870363][T23663] ksys_mmap_pgoff+0x15d/0x1e0 [ 3284.874970][T23663] __x64_sys_mmap+0x103/0x120 [ 3284.879474][T23663] do_syscall_64+0x3d/0xb0 [ 3284.883728][T23663] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3284.889457][T23663] RIP: 0033:0x7fe29ea7dda9 [ 3284.893708][T23663] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3284.913150][T23663] RSP: 002b:00007fe29f8190c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3284.921394][T23663] RAX: ffffffffffffffda RBX: 00007fe29ebac050 RCX: 00007fe29ea7dda9 [ 3284.929208][T23663] RDX: 0000000000000002 RSI: 00000000001f0002 RDI: 0000000020ff6000 [ 3284.937016][T23663] RBP: 00007fe29f819120 R08: 0000000000000003 R09: 0000000000000000 [ 3284.944830][T23663] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 3284.952643][T23663] R13: 000000000000006e R14: 00007fe29ebac050 R15: 00007ffca0c4c9f8 [ 3284.960455][T23663] [ 3284.963684][T23656] CPU: 1 PID: 23656 Comm: syz-executor.4 Not tainted 6.1.68-syzkaller-00050-g09ca5740fbbe #0 [ 3284.973650][T23656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3284.983540][T23656] Call Trace: [ 3284.986664][T23656] [ 3284.989440][T23656] dump_stack_lvl+0x151/0x1b7 [ 3284.993952][T23656] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3284.999264][T23656] ? __kernel_text_address+0xd/0x40 [ 3285.004292][T23656] dump_stack+0x15/0x1b [ 3285.008276][T23656] should_fail_ex+0x3d0/0x520 [ 3285.012799][T23656] ? mas_alloc_nodes+0x267/0x7d0 [ 3285.017565][T23656] __should_failslab+0xaf/0xf0 [ 3285.022162][T23656] should_failslab+0x9/0x20 [ 3285.026508][T23656] kmem_cache_alloc+0x3b/0x2c0 [ 3285.031109][T23656] mas_alloc_nodes+0x267/0x7d0 [ 3285.035700][T23656] mas_preallocate+0xef2/0x1bd0 [ 3285.040388][T23656] ? mas_destroy+0x3280/0x3280 [ 3285.044988][T23656] ? rwsem_write_trylock+0x15b/0x290 [ 3285.050111][T23656] __vma_adjust+0x785/0x2070 [ 3285.054537][T23656] ? vma_start_write+0x160/0x160 [ 3285.059327][T23656] ? rwsem_write_trylock+0x15b/0x290 [ 3285.064432][T23656] __split_vma+0x619/0x880 [ 3285.068684][T23656] do_mas_align_munmap+0x3bf/0x1400 [ 3285.073715][T23656] ? kernel_text_address+0xa9/0xe0 [ 3285.078667][T23656] ? __kernel_text_address+0xd/0x40 [ 3285.083699][T23656] ? avc_has_perm_noaudit+0x348/0x430 [ 3285.088907][T23656] ? do_mas_munmap+0x2b0/0x2b0 [ 3285.093507][T23656] ? mas_find+0x4e4/0x520 [ 3285.097674][T23656] do_mas_munmap+0x23e/0x2b0 [ 3285.102098][T23656] mmap_region+0x75c/0x2390 [ 3285.106439][T23656] ? file_mmap_ok+0x150/0x150 [ 3285.110948][T23656] ? cap_mmap_addr+0x169/0x2e0 [ 3285.115548][T23656] ? __kasan_check_read+0x11/0x20 [ 3285.120411][T23656] ? shmem_get_unmapped_area+0x2e3/0x710 [ 3285.125879][T23656] ? arch_get_unmapped_area+0x780/0x780 [ 3285.131271][T23656] ? file_mmap_ok+0x104/0x150 [ 3285.135775][T23656] do_mmap+0x853/0xe30 [ 3285.139682][T23656] ? mlock_future_check+0x110/0x110 [ 3285.144727][T23656] vm_mmap_pgoff+0x208/0x430 [ 3285.149142][T23656] ? account_locked_vm+0x250/0x250 [ 3285.154087][T23656] ? __fget_files+0x2cb/0x330 [ 3285.158690][T23656] ksys_mmap_pgoff+0x15d/0x1e0 [ 3285.163285][T23656] __x64_sys_mmap+0x103/0x120 [ 3285.167799][T23656] do_syscall_64+0x3d/0xb0 [ 3285.172050][T23656] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3285.177778][T23656] RIP: 0033:0x7f946707dda9 [ 3285.182036][T23656] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3285.201473][T23656] RSP: 002b:00007f9467d500c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 14:12:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10, 0x80000) (async) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000080)=0x8, 0x8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x0, 0x0, {0x14}}, 0x14}}, 0x0) 14:12:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0xd00000000000000}, 0x300}, 0x0) 14:12:21 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2, 0x11, r0, 0x0) (fail_nth: 5) 14:12:21 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) 14:12:21 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, r1, 0x0) (fail_nth: 3) [ 3285.209718][T23656] RAX: ffffffffffffffda RBX: 00007f94671abf80 RCX: 00007f946707dda9 [ 3285.217530][T23656] RDX: 0000000000000001 RSI: 00000000001fffff RDI: 0000000020ffa000 [ 3285.225339][T23656] RBP: 00007f9467d50120 R08: 0000000000000003 R09: 0000000000000000 [ 3285.233151][T23656] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 3285.240967][T23656] R13: 000000000000000b R14: 00007f94671abf80 R15: 00007ffd7f48dbe8 [ 3285.248779][T23656] 14:12:21 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) [ 3285.278217][T23673] FAULT_INJECTION: forcing a failure. [ 3285.278217][T23673] name failslab, interval 1, probability 0, space 0, times 0 [ 3285.283870][T23675] FAULT_INJECTION: forcing a failure. [ 3285.283870][T23675] name failslab, interval 1, probability 0, space 0, times 0 [ 3285.292476][T23673] CPU: 0 PID: 23673 Comm: syz-executor.3 Not tainted 6.1.68-syzkaller-00050-g09ca5740fbbe #0 [ 3285.313026][T23673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3285.322919][T23673] Call Trace: [ 3285.326040][T23673] [ 3285.328816][T23673] dump_stack_lvl+0x151/0x1b7 [ 3285.333332][T23673] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3285.338626][T23673] ? __kasan_check_read+0x11/0x20 [ 3285.343490][T23673] ? call_rcu+0xd98/0x1340 [ 3285.347740][T23673] dump_stack+0x15/0x1b [ 3285.351730][T23673] should_fail_ex+0x3d0/0x520 [ 3285.356245][T23673] ? mas_alloc_nodes+0x267/0x7d0 [ 3285.361017][T23673] __should_failslab+0xaf/0xf0 [ 3285.365618][T23673] should_failslab+0x9/0x20 [ 3285.369955][T23673] kmem_cache_alloc+0x3b/0x2c0 14:12:21 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x3, 0x11, r0, 0x0) [ 3285.374560][T23673] mas_alloc_nodes+0x267/0x7d0 [ 3285.379161][T23673] mas_preallocate+0xef2/0x1bd0 [ 3285.383846][T23673] ? mas_destroy+0x3280/0x3280 [ 3285.388448][T23673] ? rwsem_write_trylock+0x15b/0x290 [ 3285.393566][T23673] vma_expand+0x2f2/0xa10 [ 3285.397732][T23673] ? can_vma_merge_after+0x99/0x300 [ 3285.402769][T23673] mmap_region+0xde5/0x2390 [ 3285.407108][T23673] ? file_mmap_ok+0x150/0x150 [ 3285.411616][T23673] ? cap_mmap_addr+0x169/0x2e0 [ 3285.416218][T23673] ? __kasan_check_read+0x11/0x20 [ 3285.421077][T23673] ? shmem_get_unmapped_area+0x2e3/0x710 [ 3285.426549][T23673] ? arch_get_unmapped_area+0x780/0x780 [ 3285.431928][T23673] ? file_mmap_ok+0x104/0x150 [ 3285.436445][T23673] do_mmap+0x853/0xe30 [ 3285.440348][T23673] ? mlock_future_check+0x110/0x110 [ 3285.445383][T23673] vm_mmap_pgoff+0x208/0x430 [ 3285.449807][T23673] ? account_locked_vm+0x250/0x250 [ 3285.454751][T23673] ? __fget_files+0x2cb/0x330 [ 3285.459267][T23673] ksys_mmap_pgoff+0x15d/0x1e0 [ 3285.463866][T23673] __x64_sys_mmap+0x103/0x120 [ 3285.468378][T23673] do_syscall_64+0x3d/0xb0 [ 3285.472633][T23673] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3285.478360][T23673] RIP: 0033:0x7fda5a67dda9 [ 3285.482613][T23673] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3285.502057][T23673] RSP: 002b:00007fda5b4990c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3285.510297][T23673] RAX: ffffffffffffffda RBX: 00007fda5a7abf80 RCX: 00007fda5a67dda9 [ 3285.518111][T23673] RDX: 0000000000000002 RSI: 0000000000009000 RDI: 0000000020ff6000 [ 3285.525923][T23673] RBP: 00007fda5b499120 R08: 0000000000000003 R09: 0000000000000000 [ 3285.533731][T23673] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 3285.541544][T23673] R13: 000000000000000b R14: 00007fda5a7abf80 R15: 00007ffe0577dae8 [ 3285.549358][T23673] [ 3285.552223][T23675] CPU: 1 PID: 23675 Comm: syz-executor.1 Not tainted 6.1.68-syzkaller-00050-g09ca5740fbbe #0 [ 3285.553153][T23673] ------------[ cut here ]------------ [ 3285.562200][T23675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3285.562214][T23675] Call Trace: [ 3285.562220][T23675] [ 3285.562226][T23675] dump_stack_lvl+0x151/0x1b7 [ 3285.562258][T23675] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3285.562283][T23675] ? __kernel_text_address+0xd/0x40 [ 3285.562309][T23675] dump_stack+0x15/0x1b [ 3285.567572][T23673] kernel BUG at mm/mmap.c:2828! [ 3285.577389][T23675] should_fail_ex+0x3d0/0x520 [ 3285.577414][T23675] ? mas_alloc_nodes+0x267/0x7d0 [ 3285.577432][T23675] __should_failslab+0xaf/0xf0 [ 3285.577451][T23675] should_failslab+0x9/0x20 [ 3285.580962][T23673] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 3285.583290][T23675] kmem_cache_alloc+0x3b/0x2c0 [ 3285.587801][T23673] CPU: 0 PID: 23673 Comm: syz-executor.3 Not tainted 6.1.68-syzkaller-00050-g09ca5740fbbe #0 [ 3285.593101][T23675] mas_alloc_nodes+0x267/0x7d0 [ 3285.598131][T23673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3285.602125][T23675] mas_preallocate+0xef2/0x1bd0 [ 3285.606809][T23673] RIP: 0010:mmap_region+0x225e/0x2390 [ 3285.611332][T23675] ? mas_destroy+0x3280/0x3280 [ 3285.616095][T23673] Code: 03 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 1e fc ff ff 48 89 df e8 93 63 09 00 e9 11 fc ff ff e8 99 96 c2 ff 0f 0b e8 92 96 c2 ff <0f> 0b 65 8b 05 d9 36 4f 7e 41 89 c6 4c 89 f0 48 c1 e8 06 48 8d 3c [ 3285.620695][T23675] ? rwsem_write_trylock+0x15b/0x290 [ 3285.625034][T23673] RSP: 0018:ffffc900041afa40 EFLAGS: 00010246 [ 3285.630942][T23675] __vma_adjust+0x785/0x2070 [ 3285.635536][T23673] [ 3285.635542][T23673] RAX: ffffffff81b2da7e RBX: 0000000020ffefff RCX: 0000000000040000 [ 3285.645525][T23675] ? vma_start_write+0x160/0x160 [ 3285.650117][T23673] RDX: ffffc90002f62000 RSI: 000000000003ffff RDI: 0000000000040000 [ 3285.660012][T23675] ? rwsem_write_trylock+0x15b/0x290 [ 3285.664699][T23673] RBP: ffffc900041afc50 R08: ffffffff81b2c6c1 R09: ffffffff84ef2d43 [ 3285.669999][T23675] __split_vma+0x619/0x880 [ 3285.674595][T23673] R10: 0000000000000003 R11: ffff888135b31440 R12: ffffc900041afba8 [ 3285.694041][T23675] do_mas_align_munmap+0x85b/0x1400 [ 3285.699155][T23673] R13: dffffc0000000000 R14: 0000000020ff6000 R15: 0000000020fff000 [ 3285.705061][T23675] ? kernel_text_address+0xa9/0xe0 [ 3285.709485][T23673] FS: 00007fda5b4996c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 3285.711660][T23675] ? do_mas_munmap+0x2b0/0x2b0 [ 3285.719469][T23673] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3285.724248][T23675] ? mas_find+0x4e4/0x520 [ 3285.732050][T23673] CR2: 00007f8e0bb8bd58 CR3: 00000001365ec000 CR4: 00000000003506b0 [ 3285.737172][T23675] do_mas_munmap+0x23e/0x2b0 [ 3285.744983][T23673] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3285.749238][T23675] mmap_region+0x75c/0x2390 [ 3285.757045][T23673] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3285.762090][T23675] ? file_mmap_ok+0x150/0x150 [ 3285.769892][T23673] Call Trace: [ 3285.769899][T23673] [ 3285.774841][T23675] ? cap_mmap_addr+0x169/0x2e0 [ 3285.783610][T23673] ? __die_body+0x62/0xb0 [ 3285.788205][T23675] ? __kasan_check_read+0x11/0x20 [ 3285.794633][T23673] ? die+0x88/0xb0 [ 3285.798796][T23675] ? shmem_get_unmapped_area+0x2e3/0x710 [ 3285.806605][T23673] ? do_trap+0x103/0x330 [ 3285.811032][T23675] ? arch_get_unmapped_area+0x780/0x780 [ 3285.818843][T23673] ? mmap_region+0x225e/0x2390 [ 3285.823186][T23675] ? file_mmap_ok+0x104/0x150 [ 3285.830998][T23673] ? handle_invalid_op+0x95/0xc0 [ 3285.835509][T23675] do_mmap+0x853/0xe30 [ 3285.838636][T23673] ? mmap_region+0x225e/0x2390 [ 3285.841411][T23675] ? mlock_future_check+0x110/0x110 [ 3285.846010][T23673] ? exc_invalid_op+0x32/0x50 [ 3285.850184][T23675] vm_mmap_pgoff+0x208/0x430 [ 3285.855034][T23673] ? asm_exc_invalid_op+0x1b/0x20 [ 3285.858595][T23675] ? account_locked_vm+0x250/0x250 [ 3285.864064][T23673] ? mas_next_slot+0x413/0xb00 [ 3285.868298][T23675] ? __fget_files+0x2cb/0x330 [ 3285.873611][T23673] ? mmap_region+0xea1/0x2390 [ 3285.878212][T23675] ksys_mmap_pgoff+0x15d/0x1e0 [ 3285.882739][T23673] ? mmap_region+0x225e/0x2390 [ 3285.887500][T23675] __x64_sys_mmap+0x103/0x120 [ 3285.891404][T23673] ? mmap_region+0x225e/0x2390 [ 3285.896003][T23675] do_syscall_64+0x3d/0xb0 [ 3285.901042][T23673] ? file_mmap_ok+0x150/0x150 [ 3285.905550][T23675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3285.909978][T23673] ? cap_mmap_addr+0x169/0x2e0 [ 3285.914836][T23675] RIP: 0033:0x7fe29ea7dda9 [ 3285.919782][T23673] ? __kasan_check_read+0x11/0x20 14:12:22 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x4, 0x11, r0, 0x0) [ 3285.924385][T23675] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3285.928899][T23673] ? shmem_get_unmapped_area+0x2e3/0x710 [ 3285.933411][T23675] RSP: 002b:00007fe29f83a0c8 EFLAGS: 00000246 [ 3285.938011][T23673] ? arch_get_unmapped_area+0x780/0x780 [ 3285.942611][T23675] ORIG_RAX: 0000000000000009 [ 3285.942620][T23675] RAX: ffffffffffffffda RBX: 00007fe29ebabf80 RCX: 00007fe29ea7dda9 14:12:22 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x5, 0x11, r0, 0x0) 14:12:22 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x8, 0x11, r0, 0x0) 14:12:22 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0x9, 0x11, r0, 0x0) 14:12:22 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x1fffff, 0xd, 0x11, r0, 0x0) [ 3285.947127][T23673] ? file_mmap_ok+0x104/0x150 [ 3285.951723][T23675] RDX: 0000000000000002 RSI: 00000000001f0002 RDI: 0000000020ff6000 [ 3285.955975][T23673] do_mmap+0x853/0xe30 [ 3285.960492][T23675] RBP: 00007fe29f83a120 R08: 0000000000000004 R09: 0000000000000000 [ 3285.966224][T23673] ? mlock_future_check+0x110/0x110 [ 3285.970817][T23675] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 3285.975073][T23673] vm_mmap_pgoff+0x208/0x430 [ 3285.979930][T23675] R13: 000000000000000b R14: 00007fe29ebabf80 R15: 00007ffca0c4c9f8 [ 3285.999383][T23673] ? account_locked_vm+0x250/0x250 [ 3286.004846][T23675] [ 3286.010740][T23673] ? __fget_files+0x2cb/0x330 [ 3286.089905][T23673] ksys_mmap_pgoff+0x15d/0x1e0 [ 3286.094499][T23673] __x64_sys_mmap+0x103/0x120 [ 3286.099018][T23673] do_syscall_64+0x3d/0xb0 [ 3286.103283][T23673] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3286.108995][T23673] RIP: 0033:0x7fda5a67dda9 [ 3286.113247][T23673] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3286.132688][T23673] RSP: 002b:00007fda5b4990c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3286.140933][T23673] RAX: ffffffffffffffda RBX: 00007fda5a7abf80 RCX: 00007fda5a67dda9 [ 3286.148741][T23673] RDX: 0000000000000002 RSI: 0000000000009000 RDI: 0000000020ff6000 [ 3286.156558][T23673] RBP: 00007fda5b499120 R08: 0000000000000003 R09: 0000000000000000 [ 3286.164366][T23673] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 3286.172180][T23673] R13: 000000000000000b R14: 00007fda5a7abf80 R15: 00007ffe0577dae8 [ 3286.179991][T23673] 14:12:22 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1fffff, 0x2, 0x11, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x1f0002, 0x2, 0x11, r1, 0x0) (fail_nth: 4) 14:12:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0, 0xe00000000000000}, 0x300}, 0x0) [ 3286.182852][T23673] Modules linked in: [ 3286.187390][T23673] ---[ end trace 0000000000000000 ]--- [ 3286.195049][T23673] RIP: 0010:mmap_region+0x225e/0x2390 [ 3286.201892][T23695] FAULT_INJECTION: forcing a failure. [ 3286.201892][T23695] name failslab, interval 1, probability 0, space 0, times 0 14:12:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000001000)={0x9, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000080)=0x8, 0x8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x0, 0x0, {0x14}}, 0x14}}, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x0, 0x0, {0x14}}, 0x14}}, 0x0) [ 3286.210185][T23673] Code: 03 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 1e fc ff ff 48 89 df e8 93 63 09 00 e9 11 fc ff ff e8 99 96 c2 ff 0f 0b e8 92 96 c2 ff <0f> 0b 65 8b 05 d9 36 4f 7e 41 89 c6 4c 89 f0 48 c1 e8 06 48 8d 3c [ 3286.215021][T23695] CPU: 0 PID: 23695 Comm: syz-executor.1 Tainted: G D 6.1.68-syzkaller-00050-g09ca5740fbbe #0 [ 3286.236864][T23673] RSP: 0018:ffffc900041afa40 EFLAGS: 00010246 [ 3286.245184][T23695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 3286.245198][T23695] Call Trace: [ 3286.245204][T23695] [ 3286.245211][T23695] dump_stack_lvl+0x151/0x1b7 [ 3286.251140][T23673] [ 3286.260986][T23695] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3286.261017][T23695] dump_stack+0x15/0x1b [ 3286.264144][T23673] RAX: ffffffff81b2da7e RBX: 0000000020ffefff RCX: 0000000000040000 [ 3286.266880][T23695] should_fail_ex+0x3d0/0x520 [ 3286.266907][T23695] __should_failslab+0xaf/0xf0 [ 3286.271432][T23673] RDX: ffffc90002f62000 RSI: 000000000003ffff RDI: 0000000000040000 [ 3286.273565][T23695] should_failslab+0x9/0x20 [ 3286.279729][T23673] RBP: ffffc900041afc50 R08: ffffffff81b2c6c1 R09: ffffffff84ef2d43 [ 3286.282850][T23695] kmem_cache_alloc_bulk+0x2e/0x3d0 [ 3286.282874][T23695] mas_alloc_nodes+0x3ce/0x7d0 [ 3286.291333][T23673] R10: 0000000000000003 R11: ffff888135b31440 R12: ffffc900041afba8 [ 3286.295180][T23695] mas_preallocate+0xef2/0x1bd0 [ 3286.295204][T23695] ? mas_destroy+0x3280/0x3280 [ 3286.299999][T23673] R13: dffffc0000000000 R14: 0000000020ff6000 R15: 0000000020fff000 [ 3286.307585][T23695] ? rwsem_write_trylock+0x15b/0x290 [ 3286.307616][T23695] __vma_adjust+0x785/0x2070 [ 3286.312135][T23673] FS: 00007fda5b4996c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 3286.319741][T23695] ? vm_area_dup+0x65/0x290 [ 3286.319767][T23695] ? vma_start_write+0x160/0x160 [ 3286.324963][T23673] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3286.329373][T23695] ? rwsem_write_trylock+0x15b/0x290 [ 3286.329401][T23695] __split_vma+0x619/0x880 [ 3286.329419][T23695] do_mas_align_munmap+0x85b/0x1400 [ 3286.329434][T23695] ? kernel_text_address+0xa9/0xe0 [ 3286.337525][T23673] CR2: 0000000020003000 CR3: 00000001365ec000 CR4: 00000000003506a0 [ 3286.341879][T23695] ? do_mas_munmap+0x2b0/0x2b0 [ 3286.341903][T23695] ? mas_find+0x4e4/0x520 [ 3286.346696][T23673] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3286.354282][T23695] do_mas_munmap+0x23e/0x2b0 [ 3286.354304][T23695] mmap_region+0x75c/0x2390 [ 3286.359628][T23673] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3286.363835][T23695] ? file_mmap_ok+0x150/0x150 [ 3286.372779][T23673] Kernel panic - not syncing: Fatal exception [ 3286.376935][T23695] ? cap_mmap_addr+0x169/0x2e0 [ 3286.376958][T23695] ? __kasan_check_read+0x11/0x20 [ 3286.376982][T23695] ? shmem_get_unmapped_area+0x2e3/0x710 [ 3286.377002][T23695] ? arch_get_unmapped_area+0x780/0x780 [ 3286.377032][T23695] ? file_mmap_ok+0x104/0x150 [ 3286.377056][T23695] do_mmap+0x853/0xe30 [ 3286.377082][T23695] ? mlock_future_check+0x110/0x110 [ 3286.377109][T23695] vm_mmap_pgoff+0x208/0x430 [ 3286.377132][T23695] ? account_locked_vm+0x250/0x250 [ 3286.377153][T23695] ? __fget_files+0x2cb/0x330 [ 3286.377177][T23695] ksys_mmap_pgoff+0x15d/0x1e0 [ 3286.377202][T23695] __x64_sys_mmap+0x103/0x120 [ 3286.377225][T23695] do_syscall_64+0x3d/0xb0 [ 3286.377249][T23695] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3286.377274][T23695] RIP: 0033:0x7fe29ea7dda9 [ 3286.377289][T23695] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3286.377305][T23695] RSP: 002b:00007fe29f83a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3286.377325][T23695] RAX: ffffffffffffffda RBX: 00007fe29ebabf80 RCX: 00007fe29ea7dda9 [ 3286.377338][T23695] RDX: 0000000000000002 RSI: 00000000001f0002 RDI: 0000000020ff6000 [ 3286.377350][T23695] RBP: 00007fe29f83a120 R08: 0000000000000004 R09: 0000000000000000 [ 3286.377362][T23695] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 3286.377373][T23695] R13: 000000000000000b R14: 00007fe29ebabf80 R15: 00007ffca0c4c9f8 [ 3286.377389][T23695] [ 3286.377594][T23673] Kernel Offset: disabled [ 3286.605121][T23673] Rebooting in 86400 seconds..