Extracting prog: 1h29m49.60105791s Minimizing prog: 23m43.12799114s Simplifying prog options: 6m7.433445811s Extracting C: 2m9.901218533s Simplifying C: 0s extracting reproducer from 35 programs testing a last program of every proc single: executing 10 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-syz_socket_connect_nvme_tcp-eventfd2-syz_open_procfs$pagemap-eventfd2-openat$hwrng-openat$selinux_commit_pending_bools-syz_open_dev$usbfs-openat$selinux_status-io_submit-ioctl$KVM_SET_USER_MEMORY_REGION-syz_open_procfs$pagemap-ioctl$KVM_GET_SUPPORTED_CPUID-syz_genetlink_get_family_id$ethtool-ioctl$ifreq_SIOCGIFINDEX_wireguard-ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGET6RD-ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL-getsockopt$inet_pktinfo-ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL-ioctl$ifreq_SIOCGIFINDEX_team-ioctl$sock_ipv6_tunnel_SIOCGET6RD-ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL-ioctl$ifreq_SIOCGIFINDEX_batadv_mesh-getsockname$packet-getsockopt$inet_mreqn-sendmsg$ETHTOOL_MSG_LINKSTATE_GET-sendmsg$ETHTOOL_MSG_CHANNELS_GET-ioctl$TUNSETCARRIER detailed listing: executing program 0: io_setup(0x7fff, &(0x7f0000000000)=0x0) r1 = syz_socket_connect_nvme_tcp() r2 = eventfd2(0x7, 0x80800) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) r4 = eventfd2(0x4, 0x801) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x10002, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000380), 0x1000, 0x30000) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) io_submit(r0, 0x5, &(0x7f0000000600)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f0000000040)="b17877d77634c2beb765396102e771affe1b7d7108393eeb5c10174c5560b0451fe84c37df158561bf6f8b98ee9e4e89b34c0ac9acda42f92736096d7f5cd0e008a7e16d4e5eda52be7ee472bd8defd184e96b7e32d83b7357ab7ab1db408e3a3463a2ef62370d031b64a335148405e7ee19e7ac3bb623c92bca006868ba2fe3bfced54272949a5996bc19087f22c2adb61205e9f1e8341b3f6b11f6abb3ec1ef9739a798a08ec9f3c4008e239d1c96985c813e5211c68c910b6a945ea5b5bc69e3e8853", 0xc4, 0x1, 0x0, 0x0, r2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x6, r3, &(0x7f00000001c0)="e150eff5183ed97e4dc7b4326fe8abd5ae4993b35b748e43954235673b578f8ffde297c77f9805c7a9ebec83d0584421e248d09b6e884bac31b71899a485eacbc6caabb8af5092208423c236cef5509b7158", 0x52, 0xad, 0x0, 0x0, r4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x6, r5, &(0x7f00000002c0)="7d40bc5e69c126", 0x7, 0xea27, 0x0, 0x1, r6}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x8000, r7, &(0x7f00000003c0)="b9411b25d3c7454733d35b5868ccd6fd747607711fbd74870c8838b9944a1aac0fe1dc8acd26cf39d046469615de94239135a30df523a161b445f4946780eb993d30dcb88053fb2b867985d496956dd3fae927b417b65bbcb32bead89119", 0x5e, 0x7}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x1, r8, &(0x7f00000004c0)="034d29271214f9c8b1dbbd7b8537a84d33d28fc634ef568ec0f3be05a9703aa633b93cf17696d33d71a2d5fd002132bd849db78fb73056beddbf497668f368d64182f8e82a21158a650b486ecc69cc8663d16ca0aab51e503c700f9ea74a92d64123962aaa77c1b08ebc05234dfdd2778fdc3e39578fe2e719e441d34aa760a67f45a9c4f592baddb5f95571d39e28ab9776afdf14cb460517bbfb60879ee451041bb8f5f7e81080fb27aa14c34c911af265148331d7f5c2abea8e994986ef8c80703a5ac2d0bef7d2dac7a06339e2fc349fb6aea2dc612a4ac9033915ac2247c5450be3", 0xe4, 0x10, 0x0, 0x3}]) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000640)={0x101ff, 0x6, 0xb85d3d53025fa6fb, 0x1000, &(0x7f0000fff000/0x1000)=nil}) syz_open_procfs$pagemap(0x0, &(0x7f0000000680)) ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0xc008ae05, &(0x7f00000006c0)={0x4, 0x0, [{0x80000000, 0x6, 0x1, 0x9, 0x7, 0xe1a, 0x8}, {0x80000008, 0x2, 0x1, 0xc6b6, 0x46, 0x10000, 0x4}, {0x80000008, 0x6, 0x2, 0x7, 0x1, 0x6, 0x8}, {0x2, 0x4, 0x5, 0xffffff7f, 0x2, 0x2, 0x8}]}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000800)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0xd, 0xa50, 0x24, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x10, 0x80, 0x10, 0x93}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x2, 0x0, 0x2, @remote, @mcast1, 0x700, 0x0, 0x3ff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000ac0)={'syztnl0\x00', &(0x7f00000009c0)={'gretap0\x00', 0x0, 0x40, 0x80, 0x3, 0x1000, {{0x2b, 0x4, 0x1, 0x32, 0xac, 0x68, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0x10}, {[@lsrr={0x83, 0x7, 0x85, [@broadcast]}, @noop, @noop, @ssrr={0x89, 0x17, 0x51, [@loopback, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x3f}, @rand_addr=0x64010101]}, @ssrr={0x89, 0x1f, 0x36, [@multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x37}, @multicast2, @local, @private=0xa010100, @remote]}, @ssrr={0x89, 0x13, 0xda, [@loopback, @multicast2, @loopback, @local]}, @lsrr={0x83, 0x1b, 0xb6, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local, @remote, @broadcast]}, @timestamp_addr={0x44, 0x1c, 0x41, 0x1, 0x7, [{@local, 0xfff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x1}]}, @timestamp_prespec={0x44, 0xc, 0xf7, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x22}}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000bc0)={'gretap0\x00', &(0x7f0000000b00)={'syztnl1\x00', 0x0, 0x7800, 0x7, 0x1c, 0x8, {{0x1b, 0x4, 0x3, 0x3, 0x6c, 0x68, 0x0, 0x7, 0x2f, 0x0, @multicast1, @private=0xa010102, {[@cipso={0x86, 0x20, 0x0, [{0x1, 0x12, "5265cd5592c374389c5a699c8411560d"}, {0x2, 0x6, "11044aeb"}, {0x5, 0x2}]}, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x11, "4b49d717d8fbf2dc3f33836e589045"}, @cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x1, 0x9, "1a76dd7a5a1f52"}, {0x1, 0xb, "39a441dc948216b7af"}]}, @generic={0xd1, 0x7, "9e34051825"}]}}}}}) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000c00)={0x0, @initdev, @local}, &(0x7f0000000c40)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000d00)={'ip6gre0\x00', &(0x7f0000000c80)={'ip6tnl0\x00', 0x0, 0x29, 0xf8, 0x3e, 0x10001, 0x9, @private1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8000, 0x10, 0x2, 0xffffffff}}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000e00)={'gre0\x00', &(0x7f0000000d80)={'syztnl1\x00', 0x0, 0x80, 0x20, 0x9, 0x8, {{0xc, 0x4, 0x2, 0x1, 0x30, 0x68, 0x0, 0x9f, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x8d, 0x1, 0x1, [{@remote, 0x7ff}, {@rand_addr=0x64010101, 0x3}, {@remote, 0x37}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000ec0)={'syztnl1\x00', &(0x7f0000000e40)={'ip6tnl0\x00', 0x0, 0x29, 0x66, 0x2, 0x13, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x5, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000f00)={'batadv0\x00', 0x0}) getsockname$packet(r8, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000f80)=0x14) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000fc0)={@local, @empty, 0x0}, &(0x7f0000001000)=0xc) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f0000001280)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001040)={0x1cc, r9, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x44}, 0x48000) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000001540)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001500)={&(0x7f0000001300)={0x200, r9, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$TUNSETCARRIER(r8, 0x400454e2, &(0x7f0000001580)) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-write$uinput_user_dev-openat$tun-ioctl$TUNSETIFF-socketpair$nbd-ioctl$SIOCSIFHWADDR-mprotect-pread64-socket$nl_generic-syz_genetlink_get_family_id$tipc2-sendmsg$NFT_BATCH-sendmsg$TIPC_NL_LINK_SET-socket-ioctl$sock_inet_SIOCSIFDSTADDR-mprotect-sendto$inet detailed listing: executing program 0: socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x4001, 0xe, 0x5, 0xe4fa}, 0x2, [0x2, 0x9, 0x3, 0x7, 0x7, 0x8, 0x0, 0x5, 0x3, 0x3, 0x101, 0x400, 0x81, 0x7, 0x6, 0x3, 0xe, 0x875, 0x6, 0x6, 0x3, 0x6, 0xb, 0x7, 0x4, 0x7ff, 0xa0, 0x80000000, 0x0, 0xfffffffc, 0xea16, 0x7, 0x11fe, 0x2, 0x642, 0x7, 0x1, 0xbe, 0x31, 0x407c1912, 0x18000000, 0x6, 0xedb1, 0x7, 0x7, 0x1, 0xd7e, 0xffffff36, 0x3, 0x7fffffff, 0xa, 0xffffffff, 0x92, 0xb7, 0x2, 0x7fffffff, 0x9, 0x6, 0x6, 0x3, 0x10000, 0x6, 0x7, 0xf19], [0x27, 0x0, 0x6, 0x9, 0x7, 0x2e6bbd38, 0x1, 0x0, 0x4, 0x7, 0x2, 0x8, 0xf22, 0x7230, 0x9, 0x0, 0xa8b, 0x36, 0x101, 0xa, 0x400, 0x8000, 0x8, 0xffff, 0xe, 0x3, 0x1000, 0xfffffd23, 0x4e, 0x5, 0x10001, 0x1, 0x7, 0x8, 0x5, 0x6808, 0x5, 0x5, 0x58ffede2, 0xdef, 0x7, 0x5, 0x1, 0x3, 0x18, 0xa9, 0x60c2, 0x0, 0xd5, 0xee6, 0x1, 0x5, 0x80000000, 0x0, 0x1, 0xf, 0x2, 0x80003e, 0xc436, 0x0, 0x5, 0xdd, 0x4, 0x100], [0x5, 0x8, 0x5, 0x0, 0x9, 0x2, 0x7, 0x6, 0x4, 0x0, 0xffffffff, 0xff, 0xfffffffc, 0xfe, 0xa373, 0xf7, 0x9, 0x6, 0x1, 0x8, 0x9, 0x1000003, 0x2, 0x4, 0x4e, 0x8000, 0x46, 0x4, 0x7, 0x0, 0x64, 0x80000000, 0x5, 0xa48, 0x7, 0x200, 0x4, 0xfffffffd, 0x7fff, 0x3, 0x2, 0xb, 0x9, 0xffffffff, 0x0, 0x2, 0x2e, 0x1000, 0x3, 0xec35, 0x0, 0x2e81, 0xfffffffe, 0x5, 0x4, 0x9, 0x81, 0xee7, 0x6, 0x7, 0x5, 0x9, 0x3, 0x8], [0x1ff, 0x2, 0x5, 0x8, 0x6, 0x5, 0xe00000, 0x800, 0xc1, 0x6, 0x4, 0x1, 0x5, 0x9, 0x9b, 0x6, 0xfffff801, 0xfffffff6, 0x4, 0xfffff49d, 0x4, 0x0, 0x100, 0x9, 0x9, 0x2, 0x5db8, 0x0, 0x6, 0xe, 0x2, 0x6, 0x5, 0x9, 0x5, 0x2f4, 0x9, 0x4, 0xffff0000, 0x7, 0x1, 0xdc7a, 0xe8, 0x8, 0x42000, 0x9, 0x2, 0xb, 0x1, 0xa, 0x6, 0x0, 0x6, 0x6, 0x80000001, 0x2, 0x9, 0x34, 0x6, 0xfffffffe, 0x6, 0xae, 0x1, 0x9]}, 0x45c) (async, rerun: 32) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async, rerun: 64) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 64) pread64(r0, &(0x7f0000002200)=""/87, 0x57, 0xfffd) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065"], 0x94}}, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007"], 0x40}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) r4 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) sendto$inet(r4, &(0x7f0000000100), 0x5ee, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mlockall-syz_open_procfs-syz_open_procfs-memfd_create-sendmsg$IPCTNL_MSG_CT_GET_CTRZERO-mmap-mmap-read$FUSE detailed listing: executing program 0: mlockall(0x7) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = memfd_create(&(0x7f0000000240)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\x0e\b$\x16\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0', 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000180)={0xfffffffffffffffd, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0xcc, 0x3, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_NAT_SRC={0x28, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x12}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0xcc}}, 0x8010) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-dup-openat$tun-ioctl$TUNSETIFF-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff020020000000000000000000000001042022eb"], 0xfdef) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mlockall-syz_open_procfs-syz_open_procfs-memfd_create-sendmsg$IPCTNL_MSG_CT_GET_CTRZERO-mmap-mmap-read$FUSE detailed listing: executing program 0: mlockall(0x7) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = memfd_create(&(0x7f0000000240)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\x0e\b$\x16\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0', 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000180)={0xfffffffffffffffd, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0xcc, 0x3, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_NAT_SRC={0x28, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x12}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0xcc}}, 0x8010) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-write$uinput_user_dev-openat$tun-ioctl$TUNSETIFF-socketpair$nbd-ioctl$SIOCSIFHWADDR-mprotect-pread64-socket$nl_generic-syz_genetlink_get_family_id$tipc2-sendmsg$NFT_BATCH-sendmsg$TIPC_NL_LINK_SET-socket-ioctl$sock_inet_SIOCSIFDSTADDR-mprotect-sendto$inet detailed listing: executing program 0: socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x4001, 0xe, 0x5, 0xe4fa}, 0x2, [0x2, 0x9, 0x3, 0x7, 0x7, 0x8, 0x0, 0x5, 0x3, 0x3, 0x101, 0x400, 0x81, 0x7, 0x6, 0x3, 0xe, 0x875, 0x6, 0x6, 0x3, 0x6, 0xb, 0x7, 0x4, 0x7ff, 0xa0, 0x80000000, 0x0, 0xfffffffc, 0xea16, 0x7, 0x11fe, 0x2, 0x642, 0x7, 0x1, 0xbe, 0x31, 0x407c1912, 0x18000000, 0x6, 0xedb1, 0x7, 0x7, 0x1, 0xd7e, 0xffffff36, 0x3, 0x7fffffff, 0xa, 0xffffffff, 0x92, 0xb7, 0x2, 0x7fffffff, 0x9, 0x6, 0x6, 0x3, 0x10000, 0x6, 0x7, 0xf19], [0x27, 0x0, 0x6, 0x9, 0x7, 0x2e6bbd38, 0x1, 0x0, 0x4, 0x7, 0x2, 0x8, 0xf22, 0x7230, 0x9, 0x0, 0xa8b, 0x36, 0x101, 0xa, 0x400, 0x8000, 0x8, 0xffff, 0xe, 0x3, 0x1000, 0xfffffd23, 0x4e, 0x5, 0x10001, 0x1, 0x7, 0x8, 0x5, 0x6808, 0x5, 0x5, 0x58ffede2, 0xdef, 0x7, 0x5, 0x1, 0x3, 0x18, 0xa9, 0x60c2, 0x0, 0xd5, 0xee6, 0x1, 0x5, 0x80000000, 0x0, 0x1, 0xf, 0x2, 0x80003e, 0xc436, 0x0, 0x5, 0xdd, 0x4, 0x100], [0x5, 0x8, 0x5, 0x0, 0x9, 0x2, 0x7, 0x6, 0x4, 0x0, 0xffffffff, 0xff, 0xfffffffc, 0xfe, 0xa373, 0xf7, 0x9, 0x6, 0x1, 0x8, 0x9, 0x1000003, 0x2, 0x4, 0x4e, 0x8000, 0x46, 0x4, 0x7, 0x0, 0x64, 0x80000000, 0x5, 0xa48, 0x7, 0x200, 0x4, 0xfffffffd, 0x7fff, 0x3, 0x2, 0xb, 0x9, 0xffffffff, 0x0, 0x2, 0x2e, 0x1000, 0x3, 0xec35, 0x0, 0x2e81, 0xfffffffe, 0x5, 0x4, 0x9, 0x81, 0xee7, 0x6, 0x7, 0x5, 0x9, 0x3, 0x8], [0x1ff, 0x2, 0x5, 0x8, 0x6, 0x5, 0xe00000, 0x800, 0xc1, 0x6, 0x4, 0x1, 0x5, 0x9, 0x9b, 0x6, 0xfffff801, 0xfffffff6, 0x4, 0xfffff49d, 0x4, 0x0, 0x100, 0x9, 0x9, 0x2, 0x5db8, 0x0, 0x6, 0xe, 0x2, 0x6, 0x5, 0x9, 0x5, 0x2f4, 0x9, 0x4, 0xffff0000, 0x7, 0x1, 0xdc7a, 0xe8, 0x8, 0x42000, 0x9, 0x2, 0xb, 0x1, 0xa, 0x6, 0x0, 0x6, 0x6, 0x80000001, 0x2, 0x9, 0x34, 0x6, 0xfffffffe, 0x6, 0xae, 0x1, 0x9]}, 0x45c) (async, rerun: 32) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async, rerun: 64) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 64) pread64(r0, &(0x7f0000002200)=""/87, 0x57, 0xfffd) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065"], 0x94}}, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007"], 0x40}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) r4 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) sendto$inet(r4, &(0x7f0000000100), 0x5ee, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-syz_socket_connect_nvme_tcp-eventfd2-syz_open_procfs$pagemap-eventfd2-openat$hwrng-openat$selinux_commit_pending_bools-syz_open_dev$usbfs-openat$selinux_status-io_submit-ioctl$KVM_SET_USER_MEMORY_REGION-syz_open_procfs$pagemap-ioctl$KVM_GET_SUPPORTED_CPUID-syz_genetlink_get_family_id$ethtool-ioctl$ifreq_SIOCGIFINDEX_wireguard-ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGET6RD-ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL-getsockopt$inet_pktinfo-ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL-ioctl$ifreq_SIOCGIFINDEX_team-ioctl$sock_ipv6_tunnel_SIOCGET6RD-ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL-ioctl$ifreq_SIOCGIFINDEX_batadv_mesh-getsockname$packet-getsockopt$inet_mreqn-sendmsg$ETHTOOL_MSG_LINKSTATE_GET-sendmsg$ETHTOOL_MSG_CHANNELS_GET-ioctl$TUNSETCARRIER detailed listing: executing program 0: io_setup(0x7fff, &(0x7f0000000000)=0x0) r1 = syz_socket_connect_nvme_tcp() r2 = eventfd2(0x7, 0x80800) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) r4 = eventfd2(0x4, 0x801) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x10002, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000380), 0x1000, 0x30000) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) io_submit(r0, 0x5, &(0x7f0000000600)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f0000000040)="b17877d77634c2beb765396102e771affe1b7d7108393eeb5c10174c5560b0451fe84c37df158561bf6f8b98ee9e4e89b34c0ac9acda42f92736096d7f5cd0e008a7e16d4e5eda52be7ee472bd8defd184e96b7e32d83b7357ab7ab1db408e3a3463a2ef62370d031b64a335148405e7ee19e7ac3bb623c92bca006868ba2fe3bfced54272949a5996bc19087f22c2adb61205e9f1e8341b3f6b11f6abb3ec1ef9739a798a08ec9f3c4008e239d1c96985c813e5211c68c910b6a945ea5b5bc69e3e8853", 0xc4, 0x1, 0x0, 0x0, r2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x6, r3, &(0x7f00000001c0)="e150eff5183ed97e4dc7b4326fe8abd5ae4993b35b748e43954235673b578f8ffde297c77f9805c7a9ebec83d0584421e248d09b6e884bac31b71899a485eacbc6caabb8af5092208423c236cef5509b7158", 0x52, 0xad, 0x0, 0x0, r4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x6, r5, &(0x7f00000002c0)="7d40bc5e69c126", 0x7, 0xea27, 0x0, 0x1, r6}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x8000, r7, &(0x7f00000003c0)="b9411b25d3c7454733d35b5868ccd6fd747607711fbd74870c8838b9944a1aac0fe1dc8acd26cf39d046469615de94239135a30df523a161b445f4946780eb993d30dcb88053fb2b867985d496956dd3fae927b417b65bbcb32bead89119", 0x5e, 0x7}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x1, r8, &(0x7f00000004c0)="034d29271214f9c8b1dbbd7b8537a84d33d28fc634ef568ec0f3be05a9703aa633b93cf17696d33d71a2d5fd002132bd849db78fb73056beddbf497668f368d64182f8e82a21158a650b486ecc69cc8663d16ca0aab51e503c700f9ea74a92d64123962aaa77c1b08ebc05234dfdd2778fdc3e39578fe2e719e441d34aa760a67f45a9c4f592baddb5f95571d39e28ab9776afdf14cb460517bbfb60879ee451041bb8f5f7e81080fb27aa14c34c911af265148331d7f5c2abea8e994986ef8c80703a5ac2d0bef7d2dac7a06339e2fc349fb6aea2dc612a4ac9033915ac2247c5450be3", 0xe4, 0x10, 0x0, 0x3}]) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000640)={0x101ff, 0x6, 0xb85d3d53025fa6fb, 0x1000, &(0x7f0000fff000/0x1000)=nil}) syz_open_procfs$pagemap(0x0, &(0x7f0000000680)) ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0xc008ae05, &(0x7f00000006c0)={0x4, 0x0, [{0x80000000, 0x6, 0x1, 0x9, 0x7, 0xe1a, 0x8}, {0x80000008, 0x2, 0x1, 0xc6b6, 0x46, 0x10000, 0x4}, {0x80000008, 0x6, 0x2, 0x7, 0x1, 0x6, 0x8}, {0x2, 0x4, 0x5, 0xffffff7f, 0x2, 0x2, 0x8}]}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000800)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0xd, 0xa50, 0x24, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x10, 0x80, 0x10, 0x93}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x2, 0x0, 0x2, @remote, @mcast1, 0x700, 0x0, 0x3ff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000ac0)={'syztnl0\x00', &(0x7f00000009c0)={'gretap0\x00', 0x0, 0x40, 0x80, 0x3, 0x1000, {{0x2b, 0x4, 0x1, 0x32, 0xac, 0x68, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0x10}, {[@lsrr={0x83, 0x7, 0x85, [@broadcast]}, @noop, @noop, @ssrr={0x89, 0x17, 0x51, [@loopback, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x3f}, @rand_addr=0x64010101]}, @ssrr={0x89, 0x1f, 0x36, [@multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x37}, @multicast2, @local, @private=0xa010100, @remote]}, @ssrr={0x89, 0x13, 0xda, [@loopback, @multicast2, @loopback, @local]}, @lsrr={0x83, 0x1b, 0xb6, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local, @remote, @broadcast]}, @timestamp_addr={0x44, 0x1c, 0x41, 0x1, 0x7, [{@local, 0xfff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x1}]}, @timestamp_prespec={0x44, 0xc, 0xf7, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x22}}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000bc0)={'gretap0\x00', &(0x7f0000000b00)={'syztnl1\x00', 0x0, 0x7800, 0x7, 0x1c, 0x8, {{0x1b, 0x4, 0x3, 0x3, 0x6c, 0x68, 0x0, 0x7, 0x2f, 0x0, @multicast1, @private=0xa010102, {[@cipso={0x86, 0x20, 0x0, [{0x1, 0x12, "5265cd5592c374389c5a699c8411560d"}, {0x2, 0x6, "11044aeb"}, {0x5, 0x2}]}, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x11, "4b49d717d8fbf2dc3f33836e589045"}, @cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x1, 0x9, "1a76dd7a5a1f52"}, {0x1, 0xb, "39a441dc948216b7af"}]}, @generic={0xd1, 0x7, "9e34051825"}]}}}}}) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000c00)={0x0, @initdev, @local}, &(0x7f0000000c40)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000d00)={'ip6gre0\x00', &(0x7f0000000c80)={'ip6tnl0\x00', 0x0, 0x29, 0xf8, 0x3e, 0x10001, 0x9, @private1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8000, 0x10, 0x2, 0xffffffff}}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000e00)={'gre0\x00', &(0x7f0000000d80)={'syztnl1\x00', 0x0, 0x80, 0x20, 0x9, 0x8, {{0xc, 0x4, 0x2, 0x1, 0x30, 0x68, 0x0, 0x9f, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x8d, 0x1, 0x1, [{@remote, 0x7ff}, {@rand_addr=0x64010101, 0x3}, {@remote, 0x37}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000ec0)={'syztnl1\x00', &(0x7f0000000e40)={'ip6tnl0\x00', 0x0, 0x29, 0x66, 0x2, 0x13, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x5, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000f00)={'batadv0\x00', 0x0}) getsockname$packet(r8, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000f80)=0x14) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000fc0)={@local, @empty, 0x0}, &(0x7f0000001000)=0xc) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f0000001280)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001040)={0x1cc, r9, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x44}, 0x48000) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000001540)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001500)={&(0x7f0000001300)={0x200, r9, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$TUNSETCARRIER(r8, 0x400454e2, &(0x7f0000001580)) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-dup-openat$tun-ioctl$TUNSETIFF-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff020020000000000000000000000001042022eb"], 0xfdef) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-openat$binderfs-ioctl$BINDER_WRITE_READ-dup3-openat$binderfs-mmap$binder-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ detailed listing: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000900)=[@acquire, @acquire={0x40046305, 0x3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x110000000000000, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0x1, 0x1}, @flat=@binder={0x73622a85, 0x190b, 0x3}, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x1000000000000, 0x0}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-openat$binderfs-ioctl$BINDER_WRITE_READ-dup3-openat$binderfs-mmap$binder-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ detailed listing: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000900)=[@acquire, @acquire={0x40046305, 0x3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x110000000000000, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0x1, 0x1}, @flat=@binder={0x73622a85, 0x190b, 0x3}, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x1000000000000, 0x0}) program did not crash single: failed to extract reproducer bisect: bisecting 35 programs with base timeout 6m0s testing program (duration=6m8s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 4, 3, 30, 2, 10, 10, 3, 19, 6, 20, 24, 6, 3, 17, 3, 6, 5, 24, 16, 5, 19, 12, 30, 22, 3, 2, 30, 15, 16, 8, 6, 8, 16, 30] detailed listing: executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRESHEX, @ANYBLOB="8ee56adb76c3da9954e7123fde39d859b7ce92be1303c63a38f6557919c1eeaa5be2d991dd634ec6d6b231a526affa61ce6ce522c17219a19d7de54abd4e78ff569d767871228cea41d6d670d418e468f512cc9728aa7fb966e1cbcf8776a4b66999ec158dccf913d91293752e091046", @ANYBLOB="565a10f2209b7ee07d4ede337234bfd5cad80e0b522aad6b850dd95dd825692017628991e5072b04f0cb273716522c4987d433aabd08b3067f758d880000", @ANYRESHEX=r0], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') fcntl$setsig(r0, 0xa, 0x10) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x108, 0x1f0, 0x0, 0x108, 0x2d8, 0x108, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x447) executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b80)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000004500)=""/4090, 0xffa}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/122, 0x7a}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f00000004c0)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}, {&(0x7f0000000400)=""/88, 0x58}], 0x9, 0x0, 0x0, 0xc3ff}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}], 0x7, 0x40000100, 0x0) executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x220001, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000040)=0x4200080) lsm_get_self_attr(0x68, 0x0, &(0x7f0000000380), 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9e02, 0x15}) write$binfmt_aout(r1, &(0x7f0000001140)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x3, 0xd, "0062007d82000000000000002240f7ffffff00"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x17) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) close(r5) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x82, 0x0) chroot(&(0x7f0000001140)='./file0\x00') unshare(0x60000600) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1a05400, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00 \x00'}) syz_usb_connect$uac2(0x3, 0x89, &(0x7f0000005480)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x154e, 0x500e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x3, 0x1, 0x0, 0xd0, 0x9, {0x8, 0xb, 0x1, 0x1, 0x1, 0xff, 0x20, 0xc0}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1ff, 0xff, 0x17}, [@multiply_unit={0x7, 0x24, 0xc, 0x80, 0x0, 0x7, 0x7}, @multiply_unit={0x7, 0x24, 0xc, 0x8, 0xc, 0x14, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x6, 0x2, 0x5, {0x8, 0x25, 0x1, 0x83, 0x18, 0xe2, 0xe3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0x1, 0xea, {0x8, 0x25, 0x1, 0x0, 0x3f, 0x2, 0x9}}}}}}}}]}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r6) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x881) ioctl$BLKSECDISCARD(r0, 0x127d, 0x0) executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000900)=[@acquire, @acquire={0x40046305, 0x3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x110000000000000, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0x1, 0x1}, @flat=@binder={0x73622a85, 0x190b, 0x3}, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x1000000000000, 0x0}) executing program 32: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000900)=[@acquire, @acquire={0x40046305, 0x3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x110000000000000, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0x1, 0x1}, @flat=@binder={0x73622a85, 0x190b, 0x3}, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x1000000000000, 0x0}) executing program 1: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000b80)=""/227, 0xe3}, {&(0x7f0000001a40)=""/194, 0xc2}, {&(0x7f0000004500)=""/4081, 0xff1}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/122, 0x7a}, {&(0x7f00000004c0)=""/128, 0x80}, {&(0x7f0000000340)=""/263, 0x107}, {&(0x7f0000000140)=""/88, 0x58}], 0x8}, 0xe}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}], 0x7, 0x40000100, 0x0) executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r7, &(0x7f0000006240)='-1\x00', 0x3) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x112, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00'}) bind$packet(r5, 0x0, 0x0) timer_gettime(r4, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r8 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) setns(r8, 0x80) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x2) executing program 1: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0xe851000) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) sendmmsg(0xffffffffffffffff, &(0x7f000000efc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, 0x0, 0xf08}}], 0x1, 0x20040044) ioctl$BLKRRPART(r0, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (fail_nth: 63) executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d7379737465225f75dd47d0b90b893a03"]) (async) r1 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) fcntl$addseals(r1, 0x409, 0x29) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x13, r1, 0x4e650000) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) (async) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000500)={{}, {0x1, 0x2}, [], {0x4, 0x1}, [{0x8, 0x1}], {0x10, 0x1}}, 0x2c, 0x3) (async) getxattr(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0xed) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x7, 0x9d0], 0x7f}, 0x10) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x189000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TCFLSH(r3, 0x400455c8, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f00000023c0)={0x0, 'vlan1\x00', {0xffe}, 0x6}) (async) r5 = socket$tipc(0x1e, 0x2, 0x0) listen(r5, 0x8001) executing program 1: r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) fcntl$setlease(r2, 0x400, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001a80)={0x2, 0x0, [{0x41000, 0xfb, &(0x7f0000001840)=""/251}, {0x10000, 0x37, &(0x7f00000004c0)=""/55}]}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r4, 0x0, 0x20, &(0x7f00000000c0)="66a75a9eac", 0x5) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000004580)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffff00000000", @ANYRES32=0x0, @ANYBLOB="000000002400000000000000290000003200000000000000000000000000ffffac1414300939"], 0x50}}], 0x1, 0x10) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000240)=0x1) creat(&(0x7f0000000080)='./file0\x00', 0x47) executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff020020000000000000000000000001042022eb"], 0xfdef) executing program 4: r0 = socket(0x4, 0x80000, 0xc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'bridge_slave_0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0xf351, 0xfffffff4, 0xa, 0x0, 0x5, 0x0, 0x0, 0x2d70}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000080)=@ethtool_ts_info}) executing program 4: r0 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d80402f000000000000109022d00010000001009040000010300000009211000fd0122050009058103"], 0x0) keyctl$set_reqkey_keyring(0x10, 0xfffffff8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x303001, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r3, 0x0, 0x500) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000400)=0x30) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080)=0x80, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'erspan0\x00'}) write$tun(r1, &(0x7f0000000100)={@void, @void, @mpls={[{0xff000, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x101}, {0x9}, {0x8}, {0x3, 0x0, 0x1}], @ipv4=@igmp={{0x3c, 0x4, 0x1, 0x4, 0x1ce, 0x66, 0x0, 0x5, 0x2, 0x0, @remote, @private=0xa010101, {[@timestamp={0x44, 0x10, 0x68, 0x0, 0xf, [0x81, 0x7, 0x81]}, @timestamp={0x44, 0x2c, 0xc5, 0x0, 0x0, [0x6, 0x7, 0x8, 0x7, 0xc3f, 0xff, 0x2, 0x2, 0x3, 0x7]}, @end, @noop, @cipso={0x86, 0xf, 0x1, [{0x0, 0x9, "20a910a0751863"}]}, @timestamp_addr={0x44, 0x24, 0x4d, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff9b}, {@private=0xa010100, 0x400}, {@private=0xa010101, 0x4}]}, @cipso={0x86, 0x1b, 0xffffffffffffffff, [{0x2, 0xe, "333c1a3d122bdb8b97697e16"}, {0x6, 0x7, "002e283ca4"}]}, @cipso={0x86, 0x29, 0x3, [{0x6, 0xc, "72476f4b64520cc6f3d3"}, {0x7, 0x8, "257cfbf86cff"}, {0x1, 0xf, "0b42e09c5e5b1d6deca1d4ce2a"}]}, @timestamp_addr={0x44, 0x24, 0x7b, 0x1, 0x9, [{@multicast1, 0xe}, {@loopback, 0x9}, {@loopback, 0x3}, {@loopback, 0x7}]}]}}, {0x14, 0x6, 0x0, @multicast2, "5ddcf444cbc8053ab38dffaab94486725ef82e7ca4fb030db3186f4a32a583e393019322a626986c6c707ceeca0d425d1bbba6653a77bf7d07233066954c7ffd5dc094a9e67974933180380ff0fae274d8aea0d42a0881e1dd74375e1131184640342477c2f0aa0c875cfc369c2b8435f67165d7af0da4204cd2cab94e7cfbd4974fdbb5d3eb2c83c7fa29a2e46d26a4ec958312479eafe9ff698cc489eb4d7039d5306a79a1481bcc188c356b9e246ecf6d3e5a695e96676f2611b7948afb3d17fecf31ddb77df115d095a388a21598194a165022eb"}}}}, 0x1e6) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xd90, 0x0, 0x8}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220540000093fbd16a63"], 0x0}, 0x0) executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000b80)=""/227, 0xe3}, {&(0x7f0000001a40)=""/201, 0xc9}, {&(0x7f0000004500)=""/4090, 0xffa}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/122, 0x7a}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f00000004c0)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}, {&(0x7f0000000140)=""/88, 0x58}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc3}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}], 0x7, 0x40000100, 0x0) executing program 4: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0xe851000) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) sendmmsg(0xffffffffffffffff, &(0x7f000000efc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, 0x0, 0xf08}}], 0x1, 0x20040044) ioctl$BLKRRPART(r0, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (fail_nth: 67) executing program 2: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0xe851000) sendmmsg(0xffffffffffffffff, &(0x7f000000efc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, 0x0, 0xf08}}], 0x1, 0x20040044) ioctl$BLKRRPART(r0, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x74390) (fail_nth: 75) executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0xb) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x8880, 0x85) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x14, 0x0, &(0x7f0000000300)) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa1400198077167d6bcfd4fc6a080002", @ANYBLOB="7469837fdee51472f65042efe4dd290009d281cbb9293f80db8e4057853a26619f8669d8d0d4f3a57b8f71d13547f5219f9587983991be4368c69a77823884145878b62a90c934d7ca29432cd5b16792815cdacca59163291feb1435fcc8b66cf7a22a94cbdd46849ad98135fef4804c0e7fcb8fd5c35dced71078a64458d74cd6b6cc56b86da386a3a19280461109fc54371d299d5e4c1d6b3e4227e7b762ea667f8bd376055a1b8e5875d1a519453690cd037f4003e8f66147511aa45fdb96bb7d770114f795aa1bc649a46653a3784340662bcf2380816e737c79f3af67"], 0x44}}, 0x40041) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x4, 0xe0, 0x11, @private1={0xfc, 0x1, '\x00', 0x8}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x80, 0x6, 0xffff}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x2f, 0x24, 0xfc, 0xfbfe, 0x2, @empty, @mcast2, 0x7, 0x80, 0x6, 0x6}}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r6, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r8, &(0x7f00000001c0)={0x1d, r9}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xb8, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_DEBUG_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000895}, 0x40000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x10, &(0x7f0000000100)=0xc, 0x4) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000) executing program 0: r0 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002180), 0xa0002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x44a30c8c58d93834, 0x0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000180)={0x1, 0x0, [{0x80000001, 0x6, 0x100, 0x8000, 0x7}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) (async) landlock_restrict_self(r0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000002180), 0xa0002, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x44a30c8c58d93834, 0x0, 0x0) (async) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000180)={0x1, 0x0, [{0x80000001, 0x6, 0x100, 0x8000, 0x7}]}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) executing program 4: capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x42cd, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000110000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x2402c004) executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r7, &(0x7f0000006240)='-1\x00', 0x3) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x112, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x24, 0x6, @broadcast}, 0x14) timer_gettime(r4, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) open(0x0, 0x0, 0x0) r9 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) setns(r9, 0x80) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x2) executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) (async) writev(r1, &(0x7f0000000cc0)=[{&(0x7f0000000780)="1e", 0x1}], 0x1) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="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", @ANYRESHEX=r5, @ANYBLOB=',debug=0x0000000000000002,afid=0x0000000000000006,k']) executing program 4: io_setup(0x7fff, &(0x7f0000000000)=0x0) r1 = syz_socket_connect_nvme_tcp() r2 = eventfd2(0x7, 0x80800) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) r4 = eventfd2(0x4, 0x801) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x10002, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000380), 0x1000, 0x30000) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) io_submit(r0, 0x5, &(0x7f0000000600)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f0000000040)="b17877d77634c2beb765396102e771affe1b7d7108393eeb5c10174c5560b0451fe84c37df158561bf6f8b98ee9e4e89b34c0ac9acda42f92736096d7f5cd0e008a7e16d4e5eda52be7ee472bd8defd184e96b7e32d83b7357ab7ab1db408e3a3463a2ef62370d031b64a335148405e7ee19e7ac3bb623c92bca006868ba2fe3bfced54272949a5996bc19087f22c2adb61205e9f1e8341b3f6b11f6abb3ec1ef9739a798a08ec9f3c4008e239d1c96985c813e5211c68c910b6a945ea5b5bc69e3e8853", 0xc4, 0x1, 0x0, 0x0, r2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x6, r3, &(0x7f00000001c0)="e150eff5183ed97e4dc7b4326fe8abd5ae4993b35b748e43954235673b578f8ffde297c77f9805c7a9ebec83d0584421e248d09b6e884bac31b71899a485eacbc6caabb8af5092208423c236cef5509b7158", 0x52, 0xad, 0x0, 0x0, r4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x6, r5, &(0x7f00000002c0)="7d40bc5e69c126", 0x7, 0xea27, 0x0, 0x1, r6}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x8000, r7, &(0x7f00000003c0)="b9411b25d3c7454733d35b5868ccd6fd747607711fbd74870c8838b9944a1aac0fe1dc8acd26cf39d046469615de94239135a30df523a161b445f4946780eb993d30dcb88053fb2b867985d496956dd3fae927b417b65bbcb32bead89119", 0x5e, 0x7}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x1, r8, &(0x7f00000004c0)="034d29271214f9c8b1dbbd7b8537a84d33d28fc634ef568ec0f3be05a9703aa633b93cf17696d33d71a2d5fd002132bd849db78fb73056beddbf497668f368d64182f8e82a21158a650b486ecc69cc8663d16ca0aab51e503c700f9ea74a92d64123962aaa77c1b08ebc05234dfdd2778fdc3e39578fe2e719e441d34aa760a67f45a9c4f592baddb5f95571d39e28ab9776afdf14cb460517bbfb60879ee451041bb8f5f7e81080fb27aa14c34c911af265148331d7f5c2abea8e994986ef8c80703a5ac2d0bef7d2dac7a06339e2fc349fb6aea2dc612a4ac9033915ac2247c5450be3", 0xe4, 0x10, 0x0, 0x3}]) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000640)={0x101ff, 0x6, 0xb85d3d53025fa6fb, 0x1000, &(0x7f0000fff000/0x1000)=nil}) syz_open_procfs$pagemap(0x0, &(0x7f0000000680)) ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0xc008ae05, &(0x7f00000006c0)={0x4, 0x0, [{0x80000000, 0x6, 0x1, 0x9, 0x7, 0xe1a, 0x8}, {0x80000008, 0x2, 0x1, 0xc6b6, 0x46, 0x10000, 0x4}, {0x80000008, 0x6, 0x2, 0x7, 0x1, 0x6, 0x8}, {0x2, 0x4, 0x5, 0xffffff7f, 0x2, 0x2, 0x8}]}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000800)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0xd, 0xa50, 0x24, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x10, 0x80, 0x10, 0x93}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x2, 0x0, 0x2, @remote, @mcast1, 0x700, 0x0, 0x3ff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000ac0)={'syztnl0\x00', &(0x7f00000009c0)={'gretap0\x00', 0x0, 0x40, 0x80, 0x3, 0x1000, {{0x2b, 0x4, 0x1, 0x32, 0xac, 0x68, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0x10}, {[@lsrr={0x83, 0x7, 0x85, [@broadcast]}, @noop, @noop, @ssrr={0x89, 0x17, 0x51, [@loopback, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x3f}, @rand_addr=0x64010101]}, @ssrr={0x89, 0x1f, 0x36, [@multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x37}, @multicast2, @local, @private=0xa010100, @remote]}, @ssrr={0x89, 0x13, 0xda, [@loopback, @multicast2, @loopback, @local]}, @lsrr={0x83, 0x1b, 0xb6, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local, @remote, @broadcast]}, @timestamp_addr={0x44, 0x1c, 0x41, 0x1, 0x7, [{@local, 0xfff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x1}]}, @timestamp_prespec={0x44, 0xc, 0xf7, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x22}}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000bc0)={'gretap0\x00', &(0x7f0000000b00)={'syztnl1\x00', 0x0, 0x7800, 0x7, 0x1c, 0x8, {{0x1b, 0x4, 0x3, 0x3, 0x6c, 0x68, 0x0, 0x7, 0x2f, 0x0, @multicast1, @private=0xa010102, {[@cipso={0x86, 0x20, 0x0, [{0x1, 0x12, "5265cd5592c374389c5a699c8411560d"}, {0x2, 0x6, "11044aeb"}, {0x5, 0x2}]}, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x11, "4b49d717d8fbf2dc3f33836e589045"}, @cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x1, 0x9, "1a76dd7a5a1f52"}, {0x1, 0xb, "39a441dc948216b7af"}]}, @generic={0xd1, 0x7, "9e34051825"}]}}}}}) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000c00)={0x0, @initdev, @local}, &(0x7f0000000c40)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000d00)={'ip6gre0\x00', &(0x7f0000000c80)={'ip6tnl0\x00', 0x0, 0x29, 0xf8, 0x3e, 0x10001, 0x9, @private1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8000, 0x10, 0x2, 0xffffffff}}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000e00)={'gre0\x00', &(0x7f0000000d80)={'syztnl1\x00', 0x0, 0x80, 0x20, 0x9, 0x8, {{0xc, 0x4, 0x2, 0x1, 0x30, 0x68, 0x0, 0x9f, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x8d, 0x1, 0x1, [{@remote, 0x7ff}, {@rand_addr=0x64010101, 0x3}, {@remote, 0x37}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000ec0)={'syztnl1\x00', &(0x7f0000000e40)={'ip6tnl0\x00', 0x0, 0x29, 0x66, 0x2, 0x13, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x5, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000f00)={'batadv0\x00', 0x0}) getsockname$packet(r8, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000f80)=0x14) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000fc0)={@local, @empty, 0x0}, &(0x7f0000001000)=0xc) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f0000001280)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001040)={0x1cc, r9, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x44}, 0x48000) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000001540)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001500)={&(0x7f0000001300)={0x200, r9, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$TUNSETCARRIER(r8, 0x400454e2, &(0x7f0000001580)) executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/275, 0x113}], 0x1, 0xa3, 0xf9f) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0x0) (async) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x18, 0x0, 0x101}}) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000240)={'wg2\x00', &(0x7f0000000280)=@ethtool_cmd={0x1c, 0x10000000, 0xa, 0x6, 0x2, 0x7, 0x7f, 0x8, 0x7, 0x10, 0x9, 0x0, 0x5, 0xc, 0x5, 0x7, [0x1, 0x4]}}) syz_usb_control_io(r1, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2001030000000f39bed69530ea280ac22de5bbb1a2535f"], 0x0}) (async, rerun: 32) syz_usb_connect(0x2, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000094ba78084e080110aeed010203010902220001000000000904000001437b6a000905000000130000000705", @ANYRES8], 0x0) (async) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = dup(r5) ioctl$PTP_EXTTS_REQUEST2(r6, 0x40043d14, &(0x7f0000000040)) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 32) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, 0x400000, 0xfffffffd}) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x64}}, 0x0) (async) r7 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40088a01, &(0x7f0000000000)=0x20000000) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000340)={0x40, 0x14, 0xd, "37e44d8944ebcd9e2d74b0eabd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000b80)=""/227, 0xe3}, {&(0x7f0000001a40)=""/201, 0xc9}, {&(0x7f0000004500)=""/4090, 0xffa}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/122, 0x7a}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f00000004c0)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}, {&(0x7f0000000140)=""/88, 0x58}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}], 0x7, 0x40000100, 0x0) executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="140000000000000000000000070000004404fc5c000000001c000000000000003fca79dee88f53a1", @ANYRES32=0x0, @ANYBLOB="ac141412ac1e000100000000"], 0x38}, 0x4000004) executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2003, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000080)=0x14) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) keyctl$setperm(0x5, 0x0, 0x30925) (async, rerun: 32) keyctl$join(0x1, 0x0) (async, rerun: 32) fstat(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r4, r4) (async) syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000500000000000a00000000000000f65e01905361"], 0xa0}}, 0x0) (async, rerun: 32) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x47, [0xfffffff8, 0x1, 0x5, 0x9, 0x10008, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbd, 0x4a732f64, 0x1, 0x1000, 0xd, 0x6, 0xb87, 0x6, 0xfffffffd, 0x2, 0x6, 0x7, 0x8, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x7, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0xa, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x6], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x9, 0x5, 0x2, 0x809, 0x0, 0xa7, 0x1000, 0x2000, 0x400, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x0, 0x7, 0xf1, 0x4, 0x1, 0xfffd, 0x7, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000002, 0x3, 0x438, 0x2, 0x9, 0x95, 0x7ffffffb, 0x4, 0xfffffff9, 0x7f, 0x1000, 0xfffff801, 0x5], [0xffdffffe, 0xf2, 0xffff, 0xc, 0xfff, 0x2e6bf786, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0xb834, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100009, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x4, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x43, 0xff, 0x1005, 0x5, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x10001, 0xd, 0xfffffff7, 0x8, 0x6, 0x5396, 0x3, 0x200006, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x400, 0x9, 0xe, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8008, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffffc, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x1, 0x14000, 0x1, 0x9]}, 0x45c) (async, rerun: 32) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r10 = dup(r9) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (rerun: 32) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) socket$packet(0x11, 0x3, 0x300) executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) fadvise64(r1, 0x8a, 0xd, 0x2) (async, rerun: 64) r2 = socket(0x1e, 0x4, 0x0) (rerun: 64) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x8, 0x0, 0xc}, 0x10) (async) r3 = socket(0x1e, 0x4, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r5, 0x201, 0x3ffffd, 0x800000, {{}, {}, {0x8, 0x11, 0x84e}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20040010) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) close(r0) (async) socket$tipc(0x1e, 0x4, 0x0) (async) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) executing program 2: socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x4001, 0xe, 0x5, 0xe4fa}, 0x2, [0x2, 0x9, 0x3, 0x7, 0x7, 0x8, 0x0, 0x5, 0x3, 0x3, 0x101, 0x400, 0x81, 0x7, 0x6, 0x3, 0xe, 0x875, 0x6, 0x6, 0x3, 0x6, 0xb, 0x7, 0x4, 0x7ff, 0xa0, 0x80000000, 0x0, 0xfffffffc, 0xea16, 0x7, 0x11fe, 0x2, 0x642, 0x7, 0x1, 0xbe, 0x31, 0x407c1912, 0x18000000, 0x6, 0xedb1, 0x7, 0x7, 0x1, 0xd7e, 0xffffff36, 0x3, 0x7fffffff, 0xa, 0xffffffff, 0x92, 0xb7, 0x2, 0x7fffffff, 0x9, 0x6, 0x6, 0x3, 0x10000, 0x6, 0x7, 0xf19], [0x27, 0x0, 0x6, 0x9, 0x7, 0x2e6bbd38, 0x1, 0x0, 0x4, 0x7, 0x2, 0x8, 0xf22, 0x7230, 0x9, 0x0, 0xa8b, 0x36, 0x101, 0xa, 0x400, 0x8000, 0x8, 0xffff, 0xe, 0x3, 0x1000, 0xfffffd23, 0x4e, 0x5, 0x10001, 0x1, 0x7, 0x8, 0x5, 0x6808, 0x5, 0x5, 0x58ffede2, 0xdef, 0x7, 0x5, 0x1, 0x3, 0x18, 0xa9, 0x60c2, 0x0, 0xd5, 0xee6, 0x1, 0x5, 0x80000000, 0x0, 0x1, 0xf, 0x2, 0x80003e, 0xc436, 0x0, 0x5, 0xdd, 0x4, 0x100], [0x5, 0x8, 0x5, 0x0, 0x9, 0x2, 0x7, 0x6, 0x4, 0x0, 0xffffffff, 0xff, 0xfffffffc, 0xfe, 0xa373, 0xf7, 0x9, 0x6, 0x1, 0x8, 0x9, 0x1000003, 0x2, 0x4, 0x4e, 0x8000, 0x46, 0x4, 0x7, 0x0, 0x64, 0x80000000, 0x5, 0xa48, 0x7, 0x200, 0x4, 0xfffffffd, 0x7fff, 0x3, 0x2, 0xb, 0x9, 0xffffffff, 0x0, 0x2, 0x2e, 0x1000, 0x3, 0xec35, 0x0, 0x2e81, 0xfffffffe, 0x5, 0x4, 0x9, 0x81, 0xee7, 0x6, 0x7, 0x5, 0x9, 0x3, 0x8], [0x1ff, 0x2, 0x5, 0x8, 0x6, 0x5, 0xe00000, 0x800, 0xc1, 0x6, 0x4, 0x1, 0x5, 0x9, 0x9b, 0x6, 0xfffff801, 0xfffffff6, 0x4, 0xfffff49d, 0x4, 0x0, 0x100, 0x9, 0x9, 0x2, 0x5db8, 0x0, 0x6, 0xe, 0x2, 0x6, 0x5, 0x9, 0x5, 0x2f4, 0x9, 0x4, 0xffff0000, 0x7, 0x1, 0xdc7a, 0xe8, 0x8, 0x42000, 0x9, 0x2, 0xb, 0x1, 0xa, 0x6, 0x0, 0x6, 0x6, 0x80000001, 0x2, 0x9, 0x34, 0x6, 0xfffffffe, 0x6, 0xae, 0x1, 0x9]}, 0x45c) (async, rerun: 32) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async, rerun: 64) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 64) pread64(r0, &(0x7f0000002200)=""/87, 0x57, 0xfffd) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065"], 0x94}}, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007"], 0x40}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) r4 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) sendto$inet(r4, &(0x7f0000000100), 0x5ee, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) executing program 0: mlockall(0x7) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = memfd_create(&(0x7f0000000240)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\x0e\b$\x16\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0', 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000180)={0xfffffffffffffffd, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0xcc, 0x3, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_NAT_SRC={0x28, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x12}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0xcc}}, 0x8010) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) executing program 33: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff020020000000000000000000000001042022eb"], 0xfdef) executing program 34: mlockall(0x7) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = memfd_create(&(0x7f0000000240)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\x0e\b$\x16\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0', 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000180)={0xfffffffffffffffd, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0xcc, 0x3, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_NAT_SRC={0x28, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x12}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0xcc}}, 0x8010) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) executing program 35: socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x4001, 0xe, 0x5, 0xe4fa}, 0x2, [0x2, 0x9, 0x3, 0x7, 0x7, 0x8, 0x0, 0x5, 0x3, 0x3, 0x101, 0x400, 0x81, 0x7, 0x6, 0x3, 0xe, 0x875, 0x6, 0x6, 0x3, 0x6, 0xb, 0x7, 0x4, 0x7ff, 0xa0, 0x80000000, 0x0, 0xfffffffc, 0xea16, 0x7, 0x11fe, 0x2, 0x642, 0x7, 0x1, 0xbe, 0x31, 0x407c1912, 0x18000000, 0x6, 0xedb1, 0x7, 0x7, 0x1, 0xd7e, 0xffffff36, 0x3, 0x7fffffff, 0xa, 0xffffffff, 0x92, 0xb7, 0x2, 0x7fffffff, 0x9, 0x6, 0x6, 0x3, 0x10000, 0x6, 0x7, 0xf19], [0x27, 0x0, 0x6, 0x9, 0x7, 0x2e6bbd38, 0x1, 0x0, 0x4, 0x7, 0x2, 0x8, 0xf22, 0x7230, 0x9, 0x0, 0xa8b, 0x36, 0x101, 0xa, 0x400, 0x8000, 0x8, 0xffff, 0xe, 0x3, 0x1000, 0xfffffd23, 0x4e, 0x5, 0x10001, 0x1, 0x7, 0x8, 0x5, 0x6808, 0x5, 0x5, 0x58ffede2, 0xdef, 0x7, 0x5, 0x1, 0x3, 0x18, 0xa9, 0x60c2, 0x0, 0xd5, 0xee6, 0x1, 0x5, 0x80000000, 0x0, 0x1, 0xf, 0x2, 0x80003e, 0xc436, 0x0, 0x5, 0xdd, 0x4, 0x100], [0x5, 0x8, 0x5, 0x0, 0x9, 0x2, 0x7, 0x6, 0x4, 0x0, 0xffffffff, 0xff, 0xfffffffc, 0xfe, 0xa373, 0xf7, 0x9, 0x6, 0x1, 0x8, 0x9, 0x1000003, 0x2, 0x4, 0x4e, 0x8000, 0x46, 0x4, 0x7, 0x0, 0x64, 0x80000000, 0x5, 0xa48, 0x7, 0x200, 0x4, 0xfffffffd, 0x7fff, 0x3, 0x2, 0xb, 0x9, 0xffffffff, 0x0, 0x2, 0x2e, 0x1000, 0x3, 0xec35, 0x0, 0x2e81, 0xfffffffe, 0x5, 0x4, 0x9, 0x81, 0xee7, 0x6, 0x7, 0x5, 0x9, 0x3, 0x8], [0x1ff, 0x2, 0x5, 0x8, 0x6, 0x5, 0xe00000, 0x800, 0xc1, 0x6, 0x4, 0x1, 0x5, 0x9, 0x9b, 0x6, 0xfffff801, 0xfffffff6, 0x4, 0xfffff49d, 0x4, 0x0, 0x100, 0x9, 0x9, 0x2, 0x5db8, 0x0, 0x6, 0xe, 0x2, 0x6, 0x5, 0x9, 0x5, 0x2f4, 0x9, 0x4, 0xffff0000, 0x7, 0x1, 0xdc7a, 0xe8, 0x8, 0x42000, 0x9, 0x2, 0xb, 0x1, 0xa, 0x6, 0x0, 0x6, 0x6, 0x80000001, 0x2, 0x9, 0x34, 0x6, 0xfffffffe, 0x6, 0xae, 0x1, 0x9]}, 0x45c) (async, rerun: 32) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async, rerun: 64) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 64) pread64(r0, &(0x7f0000002200)=""/87, 0x57, 0xfffd) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065"], 0x94}}, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007"], 0x40}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) r4 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) sendto$inet(r4, &(0x7f0000000100), 0x5ee, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) executing program 36: io_setup(0x7fff, &(0x7f0000000000)=0x0) r1 = syz_socket_connect_nvme_tcp() r2 = eventfd2(0x7, 0x80800) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) r4 = eventfd2(0x4, 0x801) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x10002, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000380), 0x1000, 0x30000) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) io_submit(r0, 0x5, &(0x7f0000000600)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f0000000040)="b17877d77634c2beb765396102e771affe1b7d7108393eeb5c10174c5560b0451fe84c37df158561bf6f8b98ee9e4e89b34c0ac9acda42f92736096d7f5cd0e008a7e16d4e5eda52be7ee472bd8defd184e96b7e32d83b7357ab7ab1db408e3a3463a2ef62370d031b64a335148405e7ee19e7ac3bb623c92bca006868ba2fe3bfced54272949a5996bc19087f22c2adb61205e9f1e8341b3f6b11f6abb3ec1ef9739a798a08ec9f3c4008e239d1c96985c813e5211c68c910b6a945ea5b5bc69e3e8853", 0xc4, 0x1, 0x0, 0x0, r2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x6, r3, &(0x7f00000001c0)="e150eff5183ed97e4dc7b4326fe8abd5ae4993b35b748e43954235673b578f8ffde297c77f9805c7a9ebec83d0584421e248d09b6e884bac31b71899a485eacbc6caabb8af5092208423c236cef5509b7158", 0x52, 0xad, 0x0, 0x0, r4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x6, r5, &(0x7f00000002c0)="7d40bc5e69c126", 0x7, 0xea27, 0x0, 0x1, r6}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x8000, r7, &(0x7f00000003c0)="b9411b25d3c7454733d35b5868ccd6fd747607711fbd74870c8838b9944a1aac0fe1dc8acd26cf39d046469615de94239135a30df523a161b445f4946780eb993d30dcb88053fb2b867985d496956dd3fae927b417b65bbcb32bead89119", 0x5e, 0x7}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x1, r8, &(0x7f00000004c0)="034d29271214f9c8b1dbbd7b8537a84d33d28fc634ef568ec0f3be05a9703aa633b93cf17696d33d71a2d5fd002132bd849db78fb73056beddbf497668f368d64182f8e82a21158a650b486ecc69cc8663d16ca0aab51e503c700f9ea74a92d64123962aaa77c1b08ebc05234dfdd2778fdc3e39578fe2e719e441d34aa760a67f45a9c4f592baddb5f95571d39e28ab9776afdf14cb460517bbfb60879ee451041bb8f5f7e81080fb27aa14c34c911af265148331d7f5c2abea8e994986ef8c80703a5ac2d0bef7d2dac7a06339e2fc349fb6aea2dc612a4ac9033915ac2247c5450be3", 0xe4, 0x10, 0x0, 0x3}]) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000640)={0x101ff, 0x6, 0xb85d3d53025fa6fb, 0x1000, &(0x7f0000fff000/0x1000)=nil}) syz_open_procfs$pagemap(0x0, &(0x7f0000000680)) ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0xc008ae05, &(0x7f00000006c0)={0x4, 0x0, [{0x80000000, 0x6, 0x1, 0x9, 0x7, 0xe1a, 0x8}, {0x80000008, 0x2, 0x1, 0xc6b6, 0x46, 0x10000, 0x4}, {0x80000008, 0x6, 0x2, 0x7, 0x1, 0x6, 0x8}, {0x2, 0x4, 0x5, 0xffffff7f, 0x2, 0x2, 0x8}]}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000800)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0xd, 0xa50, 0x24, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x10, 0x80, 0x10, 0x93}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x2, 0x0, 0x2, @remote, @mcast1, 0x700, 0x0, 0x3ff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000ac0)={'syztnl0\x00', &(0x7f00000009c0)={'gretap0\x00', 0x0, 0x40, 0x80, 0x3, 0x1000, {{0x2b, 0x4, 0x1, 0x32, 0xac, 0x68, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0x10}, {[@lsrr={0x83, 0x7, 0x85, [@broadcast]}, @noop, @noop, @ssrr={0x89, 0x17, 0x51, [@loopback, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x3f}, @rand_addr=0x64010101]}, @ssrr={0x89, 0x1f, 0x36, [@multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x37}, @multicast2, @local, @private=0xa010100, @remote]}, @ssrr={0x89, 0x13, 0xda, [@loopback, @multicast2, @loopback, @local]}, @lsrr={0x83, 0x1b, 0xb6, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local, @remote, @broadcast]}, @timestamp_addr={0x44, 0x1c, 0x41, 0x1, 0x7, [{@local, 0xfff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x1}]}, @timestamp_prespec={0x44, 0xc, 0xf7, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x22}}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000bc0)={'gretap0\x00', &(0x7f0000000b00)={'syztnl1\x00', 0x0, 0x7800, 0x7, 0x1c, 0x8, {{0x1b, 0x4, 0x3, 0x3, 0x6c, 0x68, 0x0, 0x7, 0x2f, 0x0, @multicast1, @private=0xa010102, {[@cipso={0x86, 0x20, 0x0, [{0x1, 0x12, "5265cd5592c374389c5a699c8411560d"}, {0x2, 0x6, "11044aeb"}, {0x5, 0x2}]}, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x11, "4b49d717d8fbf2dc3f33836e589045"}, @cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x1, 0x9, "1a76dd7a5a1f52"}, {0x1, 0xb, "39a441dc948216b7af"}]}, @generic={0xd1, 0x7, "9e34051825"}]}}}}}) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000c00)={0x0, @initdev, @local}, &(0x7f0000000c40)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000d00)={'ip6gre0\x00', &(0x7f0000000c80)={'ip6tnl0\x00', 0x0, 0x29, 0xf8, 0x3e, 0x10001, 0x9, @private1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8000, 0x10, 0x2, 0xffffffff}}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000e00)={'gre0\x00', &(0x7f0000000d80)={'syztnl1\x00', 0x0, 0x80, 0x20, 0x9, 0x8, {{0xc, 0x4, 0x2, 0x1, 0x30, 0x68, 0x0, 0x9f, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x8d, 0x1, 0x1, [{@remote, 0x7ff}, {@rand_addr=0x64010101, 0x3}, {@remote, 0x37}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000ec0)={'syztnl1\x00', &(0x7f0000000e40)={'ip6tnl0\x00', 0x0, 0x29, 0x66, 0x2, 0x13, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x5, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000f00)={'batadv0\x00', 0x0}) getsockname$packet(r8, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000f80)=0x14) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000fc0)={@local, @empty, 0x0}, &(0x7f0000001000)=0xc) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f0000001280)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001040)={0x1cc, r9, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x44}, 0x48000) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000001540)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001500)={&(0x7f0000001300)={0x200, r9, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$TUNSETCARRIER(r8, 0x400454e2, &(0x7f0000001580)) program crashed: lost connection to test machine bisect: bisecting 35 programs bisect: split chunks (needed=false): <35> bisect: split chunk #0 of len 35 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=6m5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 3, 17, 3, 6, 5, 24, 16, 5, 19, 12, 30, 22, 3, 2, 30, 15, 16, 8, 6, 8, 16, 30] detailed listing: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff020020000000000000000000000001042022eb"], 0xfdef) executing program 4: r0 = socket(0x4, 0x80000, 0xc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'bridge_slave_0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0xf351, 0xfffffff4, 0xa, 0x0, 0x5, 0x0, 0x0, 0x2d70}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000080)=@ethtool_ts_info}) executing program 4: r0 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d80402f000000000000109022d00010000001009040000010300000009211000fd0122050009058103"], 0x0) keyctl$set_reqkey_keyring(0x10, 0xfffffff8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x303001, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r3, 0x0, 0x500) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000400)=0x30) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080)=0x80, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'erspan0\x00'}) write$tun(r1, &(0x7f0000000100)={@void, @void, @mpls={[{0xff000, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x101}, {0x9}, {0x8}, {0x3, 0x0, 0x1}], @ipv4=@igmp={{0x3c, 0x4, 0x1, 0x4, 0x1ce, 0x66, 0x0, 0x5, 0x2, 0x0, @remote, @private=0xa010101, {[@timestamp={0x44, 0x10, 0x68, 0x0, 0xf, [0x81, 0x7, 0x81]}, @timestamp={0x44, 0x2c, 0xc5, 0x0, 0x0, [0x6, 0x7, 0x8, 0x7, 0xc3f, 0xff, 0x2, 0x2, 0x3, 0x7]}, @end, @noop, @cipso={0x86, 0xf, 0x1, [{0x0, 0x9, "20a910a0751863"}]}, @timestamp_addr={0x44, 0x24, 0x4d, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff9b}, {@private=0xa010100, 0x400}, {@private=0xa010101, 0x4}]}, @cipso={0x86, 0x1b, 0xffffffffffffffff, [{0x2, 0xe, "333c1a3d122bdb8b97697e16"}, {0x6, 0x7, "002e283ca4"}]}, @cipso={0x86, 0x29, 0x3, [{0x6, 0xc, "72476f4b64520cc6f3d3"}, {0x7, 0x8, "257cfbf86cff"}, {0x1, 0xf, "0b42e09c5e5b1d6deca1d4ce2a"}]}, @timestamp_addr={0x44, 0x24, 0x7b, 0x1, 0x9, [{@multicast1, 0xe}, {@loopback, 0x9}, {@loopback, 0x3}, {@loopback, 0x7}]}]}}, {0x14, 0x6, 0x0, @multicast2, "5ddcf444cbc8053ab38dffaab94486725ef82e7ca4fb030db3186f4a32a583e393019322a626986c6c707ceeca0d425d1bbba6653a77bf7d07233066954c7ffd5dc094a9e67974933180380ff0fae274d8aea0d42a0881e1dd74375e1131184640342477c2f0aa0c875cfc369c2b8435f67165d7af0da4204cd2cab94e7cfbd4974fdbb5d3eb2c83c7fa29a2e46d26a4ec958312479eafe9ff698cc489eb4d7039d5306a79a1481bcc188c356b9e246ecf6d3e5a695e96676f2611b7948afb3d17fecf31ddb77df115d095a388a21598194a165022eb"}}}}, 0x1e6) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xd90, 0x0, 0x8}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220540000093fbd16a63"], 0x0}, 0x0) executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000b80)=""/227, 0xe3}, {&(0x7f0000001a40)=""/201, 0xc9}, {&(0x7f0000004500)=""/4090, 0xffa}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/122, 0x7a}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f00000004c0)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}, {&(0x7f0000000140)=""/88, 0x58}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc3}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}], 0x7, 0x40000100, 0x0) executing program 4: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0xe851000) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) sendmmsg(0xffffffffffffffff, &(0x7f000000efc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, 0x0, 0xf08}}], 0x1, 0x20040044) ioctl$BLKRRPART(r0, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (fail_nth: 67) executing program 2: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0xe851000) sendmmsg(0xffffffffffffffff, &(0x7f000000efc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, 0x0, 0xf08}}], 0x1, 0x20040044) ioctl$BLKRRPART(r0, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x74390) (fail_nth: 75) executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0xb) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x8880, 0x85) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x14, 0x0, &(0x7f0000000300)) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa1400198077167d6bcfd4fc6a080002", @ANYBLOB="7469837fdee51472f65042efe4dd290009d281cbb9293f80db8e4057853a26619f8669d8d0d4f3a57b8f71d13547f5219f9587983991be4368c69a77823884145878b62a90c934d7ca29432cd5b16792815cdacca59163291feb1435fcc8b66cf7a22a94cbdd46849ad98135fef4804c0e7fcb8fd5c35dced71078a64458d74cd6b6cc56b86da386a3a19280461109fc54371d299d5e4c1d6b3e4227e7b762ea667f8bd376055a1b8e5875d1a519453690cd037f4003e8f66147511aa45fdb96bb7d770114f795aa1bc649a46653a3784340662bcf2380816e737c79f3af67"], 0x44}}, 0x40041) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x4, 0xe0, 0x11, @private1={0xfc, 0x1, '\x00', 0x8}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x80, 0x6, 0xffff}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x2f, 0x24, 0xfc, 0xfbfe, 0x2, @empty, @mcast2, 0x7, 0x80, 0x6, 0x6}}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r6, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r8, &(0x7f00000001c0)={0x1d, r9}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xb8, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_DEBUG_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000895}, 0x40000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x10, &(0x7f0000000100)=0xc, 0x4) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000) executing program 0: r0 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002180), 0xa0002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x44a30c8c58d93834, 0x0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000180)={0x1, 0x0, [{0x80000001, 0x6, 0x100, 0x8000, 0x7}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) (async) landlock_restrict_self(r0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000002180), 0xa0002, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x44a30c8c58d93834, 0x0, 0x0) (async) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000180)={0x1, 0x0, [{0x80000001, 0x6, 0x100, 0x8000, 0x7}]}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) executing program 4: capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x42cd, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000110000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x2402c004) executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r7, &(0x7f0000006240)='-1\x00', 0x3) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x112, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x24, 0x6, @broadcast}, 0x14) timer_gettime(r4, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) open(0x0, 0x0, 0x0) r9 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) setns(r9, 0x80) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x2) executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) (async) writev(r1, &(0x7f0000000cc0)=[{&(0x7f0000000780)="1e", 0x1}], 0x1) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="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", @ANYRESHEX=r5, @ANYBLOB=',debug=0x0000000000000002,afid=0x0000000000000006,k']) executing program 4: io_setup(0x7fff, &(0x7f0000000000)=0x0) r1 = syz_socket_connect_nvme_tcp() r2 = eventfd2(0x7, 0x80800) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) r4 = eventfd2(0x4, 0x801) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x10002, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000380), 0x1000, 0x30000) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) io_submit(r0, 0x5, &(0x7f0000000600)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f0000000040)="b17877d77634c2beb765396102e771affe1b7d7108393eeb5c10174c5560b0451fe84c37df158561bf6f8b98ee9e4e89b34c0ac9acda42f92736096d7f5cd0e008a7e16d4e5eda52be7ee472bd8defd184e96b7e32d83b7357ab7ab1db408e3a3463a2ef62370d031b64a335148405e7ee19e7ac3bb623c92bca006868ba2fe3bfced54272949a5996bc19087f22c2adb61205e9f1e8341b3f6b11f6abb3ec1ef9739a798a08ec9f3c4008e239d1c96985c813e5211c68c910b6a945ea5b5bc69e3e8853", 0xc4, 0x1, 0x0, 0x0, r2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x6, r3, &(0x7f00000001c0)="e150eff5183ed97e4dc7b4326fe8abd5ae4993b35b748e43954235673b578f8ffde297c77f9805c7a9ebec83d0584421e248d09b6e884bac31b71899a485eacbc6caabb8af5092208423c236cef5509b7158", 0x52, 0xad, 0x0, 0x0, r4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x6, r5, &(0x7f00000002c0)="7d40bc5e69c126", 0x7, 0xea27, 0x0, 0x1, r6}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x8000, r7, &(0x7f00000003c0)="b9411b25d3c7454733d35b5868ccd6fd747607711fbd74870c8838b9944a1aac0fe1dc8acd26cf39d046469615de94239135a30df523a161b445f4946780eb993d30dcb88053fb2b867985d496956dd3fae927b417b65bbcb32bead89119", 0x5e, 0x7}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x1, r8, &(0x7f00000004c0)="034d29271214f9c8b1dbbd7b8537a84d33d28fc634ef568ec0f3be05a9703aa633b93cf17696d33d71a2d5fd002132bd849db78fb73056beddbf497668f368d64182f8e82a21158a650b486ecc69cc8663d16ca0aab51e503c700f9ea74a92d64123962aaa77c1b08ebc05234dfdd2778fdc3e39578fe2e719e441d34aa760a67f45a9c4f592baddb5f95571d39e28ab9776afdf14cb460517bbfb60879ee451041bb8f5f7e81080fb27aa14c34c911af265148331d7f5c2abea8e994986ef8c80703a5ac2d0bef7d2dac7a06339e2fc349fb6aea2dc612a4ac9033915ac2247c5450be3", 0xe4, 0x10, 0x0, 0x3}]) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000640)={0x101ff, 0x6, 0xb85d3d53025fa6fb, 0x1000, &(0x7f0000fff000/0x1000)=nil}) syz_open_procfs$pagemap(0x0, &(0x7f0000000680)) ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0xc008ae05, &(0x7f00000006c0)={0x4, 0x0, [{0x80000000, 0x6, 0x1, 0x9, 0x7, 0xe1a, 0x8}, {0x80000008, 0x2, 0x1, 0xc6b6, 0x46, 0x10000, 0x4}, {0x80000008, 0x6, 0x2, 0x7, 0x1, 0x6, 0x8}, {0x2, 0x4, 0x5, 0xffffff7f, 0x2, 0x2, 0x8}]}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000800)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0xd, 0xa50, 0x24, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x10, 0x80, 0x10, 0x93}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x2, 0x0, 0x2, @remote, @mcast1, 0x700, 0x0, 0x3ff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000ac0)={'syztnl0\x00', &(0x7f00000009c0)={'gretap0\x00', 0x0, 0x40, 0x80, 0x3, 0x1000, {{0x2b, 0x4, 0x1, 0x32, 0xac, 0x68, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0x10}, {[@lsrr={0x83, 0x7, 0x85, [@broadcast]}, @noop, @noop, @ssrr={0x89, 0x17, 0x51, [@loopback, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x3f}, @rand_addr=0x64010101]}, @ssrr={0x89, 0x1f, 0x36, [@multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x37}, @multicast2, @local, @private=0xa010100, @remote]}, @ssrr={0x89, 0x13, 0xda, [@loopback, @multicast2, @loopback, @local]}, @lsrr={0x83, 0x1b, 0xb6, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local, @remote, @broadcast]}, @timestamp_addr={0x44, 0x1c, 0x41, 0x1, 0x7, [{@local, 0xfff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x1}]}, @timestamp_prespec={0x44, 0xc, 0xf7, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x22}}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000bc0)={'gretap0\x00', &(0x7f0000000b00)={'syztnl1\x00', 0x0, 0x7800, 0x7, 0x1c, 0x8, {{0x1b, 0x4, 0x3, 0x3, 0x6c, 0x68, 0x0, 0x7, 0x2f, 0x0, @multicast1, @private=0xa010102, {[@cipso={0x86, 0x20, 0x0, [{0x1, 0x12, "5265cd5592c374389c5a699c8411560d"}, {0x2, 0x6, "11044aeb"}, {0x5, 0x2}]}, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x11, "4b49d717d8fbf2dc3f33836e589045"}, @cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x1, 0x9, "1a76dd7a5a1f52"}, {0x1, 0xb, "39a441dc948216b7af"}]}, @generic={0xd1, 0x7, "9e34051825"}]}}}}}) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000c00)={0x0, @initdev, @local}, &(0x7f0000000c40)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000d00)={'ip6gre0\x00', &(0x7f0000000c80)={'ip6tnl0\x00', 0x0, 0x29, 0xf8, 0x3e, 0x10001, 0x9, @private1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8000, 0x10, 0x2, 0xffffffff}}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000e00)={'gre0\x00', &(0x7f0000000d80)={'syztnl1\x00', 0x0, 0x80, 0x20, 0x9, 0x8, {{0xc, 0x4, 0x2, 0x1, 0x30, 0x68, 0x0, 0x9f, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x8d, 0x1, 0x1, [{@remote, 0x7ff}, {@rand_addr=0x64010101, 0x3}, {@remote, 0x37}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000ec0)={'syztnl1\x00', &(0x7f0000000e40)={'ip6tnl0\x00', 0x0, 0x29, 0x66, 0x2, 0x13, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x5, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000f00)={'batadv0\x00', 0x0}) getsockname$packet(r8, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000f80)=0x14) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000fc0)={@local, @empty, 0x0}, &(0x7f0000001000)=0xc) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f0000001280)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001040)={0x1cc, r9, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x44}, 0x48000) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000001540)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001500)={&(0x7f0000001300)={0x200, r9, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$TUNSETCARRIER(r8, 0x400454e2, &(0x7f0000001580)) executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/275, 0x113}], 0x1, 0xa3, 0xf9f) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0x0) (async) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x18, 0x0, 0x101}}) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000240)={'wg2\x00', &(0x7f0000000280)=@ethtool_cmd={0x1c, 0x10000000, 0xa, 0x6, 0x2, 0x7, 0x7f, 0x8, 0x7, 0x10, 0x9, 0x0, 0x5, 0xc, 0x5, 0x7, [0x1, 0x4]}}) syz_usb_control_io(r1, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2001030000000f39bed69530ea280ac22de5bbb1a2535f"], 0x0}) (async, rerun: 32) syz_usb_connect(0x2, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000094ba78084e080110aeed010203010902220001000000000904000001437b6a000905000000130000000705", @ANYRES8], 0x0) (async) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = dup(r5) ioctl$PTP_EXTTS_REQUEST2(r6, 0x40043d14, &(0x7f0000000040)) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 32) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, 0x400000, 0xfffffffd}) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x64}}, 0x0) (async) r7 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40088a01, &(0x7f0000000000)=0x20000000) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000340)={0x40, 0x14, 0xd, "37e44d8944ebcd9e2d74b0eabd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000b80)=""/227, 0xe3}, {&(0x7f0000001a40)=""/201, 0xc9}, {&(0x7f0000004500)=""/4090, 0xffa}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/122, 0x7a}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f00000004c0)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}, {&(0x7f0000000140)=""/88, 0x58}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}], 0x7, 0x40000100, 0x0) executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="140000000000000000000000070000004404fc5c000000001c000000000000003fca79dee88f53a1", @ANYRES32=0x0, @ANYBLOB="ac141412ac1e000100000000"], 0x38}, 0x4000004) executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2003, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000080)=0x14) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) keyctl$setperm(0x5, 0x0, 0x30925) (async, rerun: 32) keyctl$join(0x1, 0x0) (async, rerun: 32) fstat(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r4, r4) (async) syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000500000000000a00000000000000f65e01905361"], 0xa0}}, 0x0) (async, rerun: 32) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x47, [0xfffffff8, 0x1, 0x5, 0x9, 0x10008, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbd, 0x4a732f64, 0x1, 0x1000, 0xd, 0x6, 0xb87, 0x6, 0xfffffffd, 0x2, 0x6, 0x7, 0x8, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x7, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0xa, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x6], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x9, 0x5, 0x2, 0x809, 0x0, 0xa7, 0x1000, 0x2000, 0x400, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x0, 0x7, 0xf1, 0x4, 0x1, 0xfffd, 0x7, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000002, 0x3, 0x438, 0x2, 0x9, 0x95, 0x7ffffffb, 0x4, 0xfffffff9, 0x7f, 0x1000, 0xfffff801, 0x5], [0xffdffffe, 0xf2, 0xffff, 0xc, 0xfff, 0x2e6bf786, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0xb834, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100009, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x4, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x43, 0xff, 0x1005, 0x5, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x10001, 0xd, 0xfffffff7, 0x8, 0x6, 0x5396, 0x3, 0x200006, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x400, 0x9, 0xe, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8008, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffffc, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x1, 0x14000, 0x1, 0x9]}, 0x45c) (async, rerun: 32) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r10 = dup(r9) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (rerun: 32) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) socket$packet(0x11, 0x3, 0x300) executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) fadvise64(r1, 0x8a, 0xd, 0x2) (async, rerun: 64) r2 = socket(0x1e, 0x4, 0x0) (rerun: 64) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x8, 0x0, 0xc}, 0x10) (async) r3 = socket(0x1e, 0x4, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r5, 0x201, 0x3ffffd, 0x800000, {{}, {}, {0x8, 0x11, 0x84e}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20040010) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) close(r0) (async) socket$tipc(0x1e, 0x4, 0x0) (async) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) executing program 2: socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x4001, 0xe, 0x5, 0xe4fa}, 0x2, [0x2, 0x9, 0x3, 0x7, 0x7, 0x8, 0x0, 0x5, 0x3, 0x3, 0x101, 0x400, 0x81, 0x7, 0x6, 0x3, 0xe, 0x875, 0x6, 0x6, 0x3, 0x6, 0xb, 0x7, 0x4, 0x7ff, 0xa0, 0x80000000, 0x0, 0xfffffffc, 0xea16, 0x7, 0x11fe, 0x2, 0x642, 0x7, 0x1, 0xbe, 0x31, 0x407c1912, 0x18000000, 0x6, 0xedb1, 0x7, 0x7, 0x1, 0xd7e, 0xffffff36, 0x3, 0x7fffffff, 0xa, 0xffffffff, 0x92, 0xb7, 0x2, 0x7fffffff, 0x9, 0x6, 0x6, 0x3, 0x10000, 0x6, 0x7, 0xf19], [0x27, 0x0, 0x6, 0x9, 0x7, 0x2e6bbd38, 0x1, 0x0, 0x4, 0x7, 0x2, 0x8, 0xf22, 0x7230, 0x9, 0x0, 0xa8b, 0x36, 0x101, 0xa, 0x400, 0x8000, 0x8, 0xffff, 0xe, 0x3, 0x1000, 0xfffffd23, 0x4e, 0x5, 0x10001, 0x1, 0x7, 0x8, 0x5, 0x6808, 0x5, 0x5, 0x58ffede2, 0xdef, 0x7, 0x5, 0x1, 0x3, 0x18, 0xa9, 0x60c2, 0x0, 0xd5, 0xee6, 0x1, 0x5, 0x80000000, 0x0, 0x1, 0xf, 0x2, 0x80003e, 0xc436, 0x0, 0x5, 0xdd, 0x4, 0x100], [0x5, 0x8, 0x5, 0x0, 0x9, 0x2, 0x7, 0x6, 0x4, 0x0, 0xffffffff, 0xff, 0xfffffffc, 0xfe, 0xa373, 0xf7, 0x9, 0x6, 0x1, 0x8, 0x9, 0x1000003, 0x2, 0x4, 0x4e, 0x8000, 0x46, 0x4, 0x7, 0x0, 0x64, 0x80000000, 0x5, 0xa48, 0x7, 0x200, 0x4, 0xfffffffd, 0x7fff, 0x3, 0x2, 0xb, 0x9, 0xffffffff, 0x0, 0x2, 0x2e, 0x1000, 0x3, 0xec35, 0x0, 0x2e81, 0xfffffffe, 0x5, 0x4, 0x9, 0x81, 0xee7, 0x6, 0x7, 0x5, 0x9, 0x3, 0x8], [0x1ff, 0x2, 0x5, 0x8, 0x6, 0x5, 0xe00000, 0x800, 0xc1, 0x6, 0x4, 0x1, 0x5, 0x9, 0x9b, 0x6, 0xfffff801, 0xfffffff6, 0x4, 0xfffff49d, 0x4, 0x0, 0x100, 0x9, 0x9, 0x2, 0x5db8, 0x0, 0x6, 0xe, 0x2, 0x6, 0x5, 0x9, 0x5, 0x2f4, 0x9, 0x4, 0xffff0000, 0x7, 0x1, 0xdc7a, 0xe8, 0x8, 0x42000, 0x9, 0x2, 0xb, 0x1, 0xa, 0x6, 0x0, 0x6, 0x6, 0x80000001, 0x2, 0x9, 0x34, 0x6, 0xfffffffe, 0x6, 0xae, 0x1, 0x9]}, 0x45c) (async, rerun: 32) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async, rerun: 64) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 64) pread64(r0, &(0x7f0000002200)=""/87, 0x57, 0xfffd) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065"], 0x94}}, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007"], 0x40}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) r4 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) sendto$inet(r4, &(0x7f0000000100), 0x5ee, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) executing program 0: mlockall(0x7) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = memfd_create(&(0x7f0000000240)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\x0e\b$\x16\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0', 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000180)={0xfffffffffffffffd, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0xcc, 0x3, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_NAT_SRC={0x28, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x12}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0xcc}}, 0x8010) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) executing program 33: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff020020000000000000000000000001042022eb"], 0xfdef) executing program 34: mlockall(0x7) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = memfd_create(&(0x7f0000000240)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\x0e\b$\x16\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0', 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000180)={0xfffffffffffffffd, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0xcc, 0x3, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_NAT_SRC={0x28, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x12}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0xcc}}, 0x8010) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) executing program 35: socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x4001, 0xe, 0x5, 0xe4fa}, 0x2, [0x2, 0x9, 0x3, 0x7, 0x7, 0x8, 0x0, 0x5, 0x3, 0x3, 0x101, 0x400, 0x81, 0x7, 0x6, 0x3, 0xe, 0x875, 0x6, 0x6, 0x3, 0x6, 0xb, 0x7, 0x4, 0x7ff, 0xa0, 0x80000000, 0x0, 0xfffffffc, 0xea16, 0x7, 0x11fe, 0x2, 0x642, 0x7, 0x1, 0xbe, 0x31, 0x407c1912, 0x18000000, 0x6, 0xedb1, 0x7, 0x7, 0x1, 0xd7e, 0xffffff36, 0x3, 0x7fffffff, 0xa, 0xffffffff, 0x92, 0xb7, 0x2, 0x7fffffff, 0x9, 0x6, 0x6, 0x3, 0x10000, 0x6, 0x7, 0xf19], [0x27, 0x0, 0x6, 0x9, 0x7, 0x2e6bbd38, 0x1, 0x0, 0x4, 0x7, 0x2, 0x8, 0xf22, 0x7230, 0x9, 0x0, 0xa8b, 0x36, 0x101, 0xa, 0x400, 0x8000, 0x8, 0xffff, 0xe, 0x3, 0x1000, 0xfffffd23, 0x4e, 0x5, 0x10001, 0x1, 0x7, 0x8, 0x5, 0x6808, 0x5, 0x5, 0x58ffede2, 0xdef, 0x7, 0x5, 0x1, 0x3, 0x18, 0xa9, 0x60c2, 0x0, 0xd5, 0xee6, 0x1, 0x5, 0x80000000, 0x0, 0x1, 0xf, 0x2, 0x80003e, 0xc436, 0x0, 0x5, 0xdd, 0x4, 0x100], [0x5, 0x8, 0x5, 0x0, 0x9, 0x2, 0x7, 0x6, 0x4, 0x0, 0xffffffff, 0xff, 0xfffffffc, 0xfe, 0xa373, 0xf7, 0x9, 0x6, 0x1, 0x8, 0x9, 0x1000003, 0x2, 0x4, 0x4e, 0x8000, 0x46, 0x4, 0x7, 0x0, 0x64, 0x80000000, 0x5, 0xa48, 0x7, 0x200, 0x4, 0xfffffffd, 0x7fff, 0x3, 0x2, 0xb, 0x9, 0xffffffff, 0x0, 0x2, 0x2e, 0x1000, 0x3, 0xec35, 0x0, 0x2e81, 0xfffffffe, 0x5, 0x4, 0x9, 0x81, 0xee7, 0x6, 0x7, 0x5, 0x9, 0x3, 0x8], [0x1ff, 0x2, 0x5, 0x8, 0x6, 0x5, 0xe00000, 0x800, 0xc1, 0x6, 0x4, 0x1, 0x5, 0x9, 0x9b, 0x6, 0xfffff801, 0xfffffff6, 0x4, 0xfffff49d, 0x4, 0x0, 0x100, 0x9, 0x9, 0x2, 0x5db8, 0x0, 0x6, 0xe, 0x2, 0x6, 0x5, 0x9, 0x5, 0x2f4, 0x9, 0x4, 0xffff0000, 0x7, 0x1, 0xdc7a, 0xe8, 0x8, 0x42000, 0x9, 0x2, 0xb, 0x1, 0xa, 0x6, 0x0, 0x6, 0x6, 0x80000001, 0x2, 0x9, 0x34, 0x6, 0xfffffffe, 0x6, 0xae, 0x1, 0x9]}, 0x45c) (async, rerun: 32) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async, rerun: 64) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 64) pread64(r0, &(0x7f0000002200)=""/87, 0x57, 0xfffd) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065"], 0x94}}, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007"], 0x40}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) r4 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) sendto$inet(r4, &(0x7f0000000100), 0x5ee, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) executing program 36: io_setup(0x7fff, &(0x7f0000000000)=0x0) r1 = syz_socket_connect_nvme_tcp() r2 = eventfd2(0x7, 0x80800) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) r4 = eventfd2(0x4, 0x801) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x10002, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000380), 0x1000, 0x30000) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) io_submit(r0, 0x5, &(0x7f0000000600)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f0000000040)="b17877d77634c2beb765396102e771affe1b7d7108393eeb5c10174c5560b0451fe84c37df158561bf6f8b98ee9e4e89b34c0ac9acda42f92736096d7f5cd0e008a7e16d4e5eda52be7ee472bd8defd184e96b7e32d83b7357ab7ab1db408e3a3463a2ef62370d031b64a335148405e7ee19e7ac3bb623c92bca006868ba2fe3bfced54272949a5996bc19087f22c2adb61205e9f1e8341b3f6b11f6abb3ec1ef9739a798a08ec9f3c4008e239d1c96985c813e5211c68c910b6a945ea5b5bc69e3e8853", 0xc4, 0x1, 0x0, 0x0, r2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x6, r3, &(0x7f00000001c0)="e150eff5183ed97e4dc7b4326fe8abd5ae4993b35b748e43954235673b578f8ffde297c77f9805c7a9ebec83d0584421e248d09b6e884bac31b71899a485eacbc6caabb8af5092208423c236cef5509b7158", 0x52, 0xad, 0x0, 0x0, r4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x6, r5, &(0x7f00000002c0)="7d40bc5e69c126", 0x7, 0xea27, 0x0, 0x1, r6}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x8000, r7, &(0x7f00000003c0)="b9411b25d3c7454733d35b5868ccd6fd747607711fbd74870c8838b9944a1aac0fe1dc8acd26cf39d046469615de94239135a30df523a161b445f4946780eb993d30dcb88053fb2b867985d496956dd3fae927b417b65bbcb32bead89119", 0x5e, 0x7}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x1, r8, &(0x7f00000004c0)="034d29271214f9c8b1dbbd7b8537a84d33d28fc634ef568ec0f3be05a9703aa633b93cf17696d33d71a2d5fd002132bd849db78fb73056beddbf497668f368d64182f8e82a21158a650b486ecc69cc8663d16ca0aab51e503c700f9ea74a92d64123962aaa77c1b08ebc05234dfdd2778fdc3e39578fe2e719e441d34aa760a67f45a9c4f592baddb5f95571d39e28ab9776afdf14cb460517bbfb60879ee451041bb8f5f7e81080fb27aa14c34c911af265148331d7f5c2abea8e994986ef8c80703a5ac2d0bef7d2dac7a06339e2fc349fb6aea2dc612a4ac9033915ac2247c5450be3", 0xe4, 0x10, 0x0, 0x3}]) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000640)={0x101ff, 0x6, 0xb85d3d53025fa6fb, 0x1000, &(0x7f0000fff000/0x1000)=nil}) syz_open_procfs$pagemap(0x0, &(0x7f0000000680)) ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0xc008ae05, &(0x7f00000006c0)={0x4, 0x0, [{0x80000000, 0x6, 0x1, 0x9, 0x7, 0xe1a, 0x8}, {0x80000008, 0x2, 0x1, 0xc6b6, 0x46, 0x10000, 0x4}, {0x80000008, 0x6, 0x2, 0x7, 0x1, 0x6, 0x8}, {0x2, 0x4, 0x5, 0xffffff7f, 0x2, 0x2, 0x8}]}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000800)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0xd, 0xa50, 0x24, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x10, 0x80, 0x10, 0x93}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x2, 0x0, 0x2, @remote, @mcast1, 0x700, 0x0, 0x3ff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000ac0)={'syztnl0\x00', &(0x7f00000009c0)={'gretap0\x00', 0x0, 0x40, 0x80, 0x3, 0x1000, {{0x2b, 0x4, 0x1, 0x32, 0xac, 0x68, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0x10}, {[@lsrr={0x83, 0x7, 0x85, [@broadcast]}, @noop, @noop, @ssrr={0x89, 0x17, 0x51, [@loopback, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x3f}, @rand_addr=0x64010101]}, @ssrr={0x89, 0x1f, 0x36, [@multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x37}, @multicast2, @local, @private=0xa010100, @remote]}, @ssrr={0x89, 0x13, 0xda, [@loopback, @multicast2, @loopback, @local]}, @lsrr={0x83, 0x1b, 0xb6, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local, @remote, @broadcast]}, @timestamp_addr={0x44, 0x1c, 0x41, 0x1, 0x7, [{@local, 0xfff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x1}]}, @timestamp_prespec={0x44, 0xc, 0xf7, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x22}}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000bc0)={'gretap0\x00', &(0x7f0000000b00)={'syztnl1\x00', 0x0, 0x7800, 0x7, 0x1c, 0x8, {{0x1b, 0x4, 0x3, 0x3, 0x6c, 0x68, 0x0, 0x7, 0x2f, 0x0, @multicast1, @private=0xa010102, {[@cipso={0x86, 0x20, 0x0, [{0x1, 0x12, "5265cd5592c374389c5a699c8411560d"}, {0x2, 0x6, "11044aeb"}, {0x5, 0x2}]}, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x11, "4b49d717d8fbf2dc3f33836e589045"}, @cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x1, 0x9, "1a76dd7a5a1f52"}, {0x1, 0xb, "39a441dc948216b7af"}]}, @generic={0xd1, 0x7, "9e34051825"}]}}}}}) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000c00)={0x0, @initdev, @local}, &(0x7f0000000c40)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000d00)={'ip6gre0\x00', &(0x7f0000000c80)={'ip6tnl0\x00', 0x0, 0x29, 0xf8, 0x3e, 0x10001, 0x9, @private1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8000, 0x10, 0x2, 0xffffffff}}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000e00)={'gre0\x00', &(0x7f0000000d80)={'syztnl1\x00', 0x0, 0x80, 0x20, 0x9, 0x8, {{0xc, 0x4, 0x2, 0x1, 0x30, 0x68, 0x0, 0x9f, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x8d, 0x1, 0x1, [{@remote, 0x7ff}, {@rand_addr=0x64010101, 0x3}, {@remote, 0x37}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000ec0)={'syztnl1\x00', &(0x7f0000000e40)={'ip6tnl0\x00', 0x0, 0x29, 0x66, 0x2, 0x13, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x5, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000f00)={'batadv0\x00', 0x0}) getsockname$packet(r8, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000f80)=0x14) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000fc0)={@local, @empty, 0x0}, &(0x7f0000001000)=0xc) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f0000001280)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001040)={0x1cc, r9, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x44}, 0x48000) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000001540)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001500)={&(0x7f0000001300)={0x200, r9, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$TUNSETCARRIER(r8, 0x400454e2, &(0x7f0000001580)) program crashed: lost connection to test machine bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=6m2s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [22, 3, 2, 30, 15, 16, 8, 6, 8, 16, 30] detailed listing: executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/275, 0x113}], 0x1, 0xa3, 0xf9f) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0x0) (async) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x18, 0x0, 0x101}}) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000240)={'wg2\x00', &(0x7f0000000280)=@ethtool_cmd={0x1c, 0x10000000, 0xa, 0x6, 0x2, 0x7, 0x7f, 0x8, 0x7, 0x10, 0x9, 0x0, 0x5, 0xc, 0x5, 0x7, [0x1, 0x4]}}) syz_usb_control_io(r1, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2001030000000f39bed69530ea280ac22de5bbb1a2535f"], 0x0}) (async, rerun: 32) syz_usb_connect(0x2, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000094ba78084e080110aeed010203010902220001000000000904000001437b6a000905000000130000000705", @ANYRES8], 0x0) (async) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = dup(r5) ioctl$PTP_EXTTS_REQUEST2(r6, 0x40043d14, &(0x7f0000000040)) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 32) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, 0x400000, 0xfffffffd}) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x64}}, 0x0) (async) r7 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40088a01, &(0x7f0000000000)=0x20000000) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000340)={0x40, 0x14, 0xd, "37e44d8944ebcd9e2d74b0eabd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000b80)=""/227, 0xe3}, {&(0x7f0000001a40)=""/201, 0xc9}, {&(0x7f0000004500)=""/4090, 0xffa}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/122, 0x7a}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f00000004c0)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}, {&(0x7f0000000140)=""/88, 0x58}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}], 0x7, 0x40000100, 0x0) executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="140000000000000000000000070000004404fc5c000000001c000000000000003fca79dee88f53a1", @ANYRES32=0x0, @ANYBLOB="ac141412ac1e000100000000"], 0x38}, 0x4000004) executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2003, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000080)=0x14) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) keyctl$setperm(0x5, 0x0, 0x30925) (async, rerun: 32) keyctl$join(0x1, 0x0) (async, rerun: 32) fstat(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r4, r4) (async) syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000500000000000a00000000000000f65e01905361"], 0xa0}}, 0x0) (async, rerun: 32) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x47, [0xfffffff8, 0x1, 0x5, 0x9, 0x10008, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbd, 0x4a732f64, 0x1, 0x1000, 0xd, 0x6, 0xb87, 0x6, 0xfffffffd, 0x2, 0x6, 0x7, 0x8, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x7, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0xa, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x6], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x9, 0x5, 0x2, 0x809, 0x0, 0xa7, 0x1000, 0x2000, 0x400, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x0, 0x7, 0xf1, 0x4, 0x1, 0xfffd, 0x7, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000002, 0x3, 0x438, 0x2, 0x9, 0x95, 0x7ffffffb, 0x4, 0xfffffff9, 0x7f, 0x1000, 0xfffff801, 0x5], [0xffdffffe, 0xf2, 0xffff, 0xc, 0xfff, 0x2e6bf786, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0xb834, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100009, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x4, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x43, 0xff, 0x1005, 0x5, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x10001, 0xd, 0xfffffff7, 0x8, 0x6, 0x5396, 0x3, 0x200006, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x400, 0x9, 0xe, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8008, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffffc, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x1, 0x14000, 0x1, 0x9]}, 0x45c) (async, rerun: 32) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r10 = dup(r9) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (rerun: 32) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) socket$packet(0x11, 0x3, 0x300) executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) fadvise64(r1, 0x8a, 0xd, 0x2) (async, rerun: 64) r2 = socket(0x1e, 0x4, 0x0) (rerun: 64) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x8, 0x0, 0xc}, 0x10) (async) r3 = socket(0x1e, 0x4, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r5, 0x201, 0x3ffffd, 0x800000, {{}, {}, {0x8, 0x11, 0x84e}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20040010) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) close(r0) (async) socket$tipc(0x1e, 0x4, 0x0) (async) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) executing program 2: socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x4001, 0xe, 0x5, 0xe4fa}, 0x2, [0x2, 0x9, 0x3, 0x7, 0x7, 0x8, 0x0, 0x5, 0x3, 0x3, 0x101, 0x400, 0x81, 0x7, 0x6, 0x3, 0xe, 0x875, 0x6, 0x6, 0x3, 0x6, 0xb, 0x7, 0x4, 0x7ff, 0xa0, 0x80000000, 0x0, 0xfffffffc, 0xea16, 0x7, 0x11fe, 0x2, 0x642, 0x7, 0x1, 0xbe, 0x31, 0x407c1912, 0x18000000, 0x6, 0xedb1, 0x7, 0x7, 0x1, 0xd7e, 0xffffff36, 0x3, 0x7fffffff, 0xa, 0xffffffff, 0x92, 0xb7, 0x2, 0x7fffffff, 0x9, 0x6, 0x6, 0x3, 0x10000, 0x6, 0x7, 0xf19], [0x27, 0x0, 0x6, 0x9, 0x7, 0x2e6bbd38, 0x1, 0x0, 0x4, 0x7, 0x2, 0x8, 0xf22, 0x7230, 0x9, 0x0, 0xa8b, 0x36, 0x101, 0xa, 0x400, 0x8000, 0x8, 0xffff, 0xe, 0x3, 0x1000, 0xfffffd23, 0x4e, 0x5, 0x10001, 0x1, 0x7, 0x8, 0x5, 0x6808, 0x5, 0x5, 0x58ffede2, 0xdef, 0x7, 0x5, 0x1, 0x3, 0x18, 0xa9, 0x60c2, 0x0, 0xd5, 0xee6, 0x1, 0x5, 0x80000000, 0x0, 0x1, 0xf, 0x2, 0x80003e, 0xc436, 0x0, 0x5, 0xdd, 0x4, 0x100], [0x5, 0x8, 0x5, 0x0, 0x9, 0x2, 0x7, 0x6, 0x4, 0x0, 0xffffffff, 0xff, 0xfffffffc, 0xfe, 0xa373, 0xf7, 0x9, 0x6, 0x1, 0x8, 0x9, 0x1000003, 0x2, 0x4, 0x4e, 0x8000, 0x46, 0x4, 0x7, 0x0, 0x64, 0x80000000, 0x5, 0xa48, 0x7, 0x200, 0x4, 0xfffffffd, 0x7fff, 0x3, 0x2, 0xb, 0x9, 0xffffffff, 0x0, 0x2, 0x2e, 0x1000, 0x3, 0xec35, 0x0, 0x2e81, 0xfffffffe, 0x5, 0x4, 0x9, 0x81, 0xee7, 0x6, 0x7, 0x5, 0x9, 0x3, 0x8], [0x1ff, 0x2, 0x5, 0x8, 0x6, 0x5, 0xe00000, 0x800, 0xc1, 0x6, 0x4, 0x1, 0x5, 0x9, 0x9b, 0x6, 0xfffff801, 0xfffffff6, 0x4, 0xfffff49d, 0x4, 0x0, 0x100, 0x9, 0x9, 0x2, 0x5db8, 0x0, 0x6, 0xe, 0x2, 0x6, 0x5, 0x9, 0x5, 0x2f4, 0x9, 0x4, 0xffff0000, 0x7, 0x1, 0xdc7a, 0xe8, 0x8, 0x42000, 0x9, 0x2, 0xb, 0x1, 0xa, 0x6, 0x0, 0x6, 0x6, 0x80000001, 0x2, 0x9, 0x34, 0x6, 0xfffffffe, 0x6, 0xae, 0x1, 0x9]}, 0x45c) (async, rerun: 32) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async, rerun: 64) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 64) pread64(r0, &(0x7f0000002200)=""/87, 0x57, 0xfffd) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065"], 0x94}}, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007"], 0x40}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) r4 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) sendto$inet(r4, &(0x7f0000000100), 0x5ee, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) executing program 0: mlockall(0x7) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = memfd_create(&(0x7f0000000240)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\x0e\b$\x16\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0', 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000180)={0xfffffffffffffffd, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0xcc, 0x3, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_NAT_SRC={0x28, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x12}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0xcc}}, 0x8010) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) executing program 33: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff020020000000000000000000000001042022eb"], 0xfdef) executing program 34: mlockall(0x7) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = memfd_create(&(0x7f0000000240)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\x0e\b$\x16\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0', 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000180)={0xfffffffffffffffd, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0xcc, 0x3, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_NAT_SRC={0x28, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x12}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0xcc}}, 0x8010) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) executing program 35: socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x4001, 0xe, 0x5, 0xe4fa}, 0x2, [0x2, 0x9, 0x3, 0x7, 0x7, 0x8, 0x0, 0x5, 0x3, 0x3, 0x101, 0x400, 0x81, 0x7, 0x6, 0x3, 0xe, 0x875, 0x6, 0x6, 0x3, 0x6, 0xb, 0x7, 0x4, 0x7ff, 0xa0, 0x80000000, 0x0, 0xfffffffc, 0xea16, 0x7, 0x11fe, 0x2, 0x642, 0x7, 0x1, 0xbe, 0x31, 0x407c1912, 0x18000000, 0x6, 0xedb1, 0x7, 0x7, 0x1, 0xd7e, 0xffffff36, 0x3, 0x7fffffff, 0xa, 0xffffffff, 0x92, 0xb7, 0x2, 0x7fffffff, 0x9, 0x6, 0x6, 0x3, 0x10000, 0x6, 0x7, 0xf19], [0x27, 0x0, 0x6, 0x9, 0x7, 0x2e6bbd38, 0x1, 0x0, 0x4, 0x7, 0x2, 0x8, 0xf22, 0x7230, 0x9, 0x0, 0xa8b, 0x36, 0x101, 0xa, 0x400, 0x8000, 0x8, 0xffff, 0xe, 0x3, 0x1000, 0xfffffd23, 0x4e, 0x5, 0x10001, 0x1, 0x7, 0x8, 0x5, 0x6808, 0x5, 0x5, 0x58ffede2, 0xdef, 0x7, 0x5, 0x1, 0x3, 0x18, 0xa9, 0x60c2, 0x0, 0xd5, 0xee6, 0x1, 0x5, 0x80000000, 0x0, 0x1, 0xf, 0x2, 0x80003e, 0xc436, 0x0, 0x5, 0xdd, 0x4, 0x100], [0x5, 0x8, 0x5, 0x0, 0x9, 0x2, 0x7, 0x6, 0x4, 0x0, 0xffffffff, 0xff, 0xfffffffc, 0xfe, 0xa373, 0xf7, 0x9, 0x6, 0x1, 0x8, 0x9, 0x1000003, 0x2, 0x4, 0x4e, 0x8000, 0x46, 0x4, 0x7, 0x0, 0x64, 0x80000000, 0x5, 0xa48, 0x7, 0x200, 0x4, 0xfffffffd, 0x7fff, 0x3, 0x2, 0xb, 0x9, 0xffffffff, 0x0, 0x2, 0x2e, 0x1000, 0x3, 0xec35, 0x0, 0x2e81, 0xfffffffe, 0x5, 0x4, 0x9, 0x81, 0xee7, 0x6, 0x7, 0x5, 0x9, 0x3, 0x8], [0x1ff, 0x2, 0x5, 0x8, 0x6, 0x5, 0xe00000, 0x800, 0xc1, 0x6, 0x4, 0x1, 0x5, 0x9, 0x9b, 0x6, 0xfffff801, 0xfffffff6, 0x4, 0xfffff49d, 0x4, 0x0, 0x100, 0x9, 0x9, 0x2, 0x5db8, 0x0, 0x6, 0xe, 0x2, 0x6, 0x5, 0x9, 0x5, 0x2f4, 0x9, 0x4, 0xffff0000, 0x7, 0x1, 0xdc7a, 0xe8, 0x8, 0x42000, 0x9, 0x2, 0xb, 0x1, 0xa, 0x6, 0x0, 0x6, 0x6, 0x80000001, 0x2, 0x9, 0x34, 0x6, 0xfffffffe, 0x6, 0xae, 0x1, 0x9]}, 0x45c) (async, rerun: 32) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async, rerun: 64) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 64) pread64(r0, &(0x7f0000002200)=""/87, 0x57, 0xfffd) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065"], 0x94}}, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007"], 0x40}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) r4 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) sendto$inet(r4, &(0x7f0000000100), 0x5ee, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) executing program 36: io_setup(0x7fff, &(0x7f0000000000)=0x0) r1 = syz_socket_connect_nvme_tcp() r2 = eventfd2(0x7, 0x80800) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) r4 = eventfd2(0x4, 0x801) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x10002, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000380), 0x1000, 0x30000) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) io_submit(r0, 0x5, &(0x7f0000000600)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f0000000040)="b17877d77634c2beb765396102e771affe1b7d7108393eeb5c10174c5560b0451fe84c37df158561bf6f8b98ee9e4e89b34c0ac9acda42f92736096d7f5cd0e008a7e16d4e5eda52be7ee472bd8defd184e96b7e32d83b7357ab7ab1db408e3a3463a2ef62370d031b64a335148405e7ee19e7ac3bb623c92bca006868ba2fe3bfced54272949a5996bc19087f22c2adb61205e9f1e8341b3f6b11f6abb3ec1ef9739a798a08ec9f3c4008e239d1c96985c813e5211c68c910b6a945ea5b5bc69e3e8853", 0xc4, 0x1, 0x0, 0x0, r2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x6, r3, &(0x7f00000001c0)="e150eff5183ed97e4dc7b4326fe8abd5ae4993b35b748e43954235673b578f8ffde297c77f9805c7a9ebec83d0584421e248d09b6e884bac31b71899a485eacbc6caabb8af5092208423c236cef5509b7158", 0x52, 0xad, 0x0, 0x0, r4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x6, r5, &(0x7f00000002c0)="7d40bc5e69c126", 0x7, 0xea27, 0x0, 0x1, r6}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x8000, r7, &(0x7f00000003c0)="b9411b25d3c7454733d35b5868ccd6fd747607711fbd74870c8838b9944a1aac0fe1dc8acd26cf39d046469615de94239135a30df523a161b445f4946780eb993d30dcb88053fb2b867985d496956dd3fae927b417b65bbcb32bead89119", 0x5e, 0x7}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x1, r8, &(0x7f00000004c0)="034d29271214f9c8b1dbbd7b8537a84d33d28fc634ef568ec0f3be05a9703aa633b93cf17696d33d71a2d5fd002132bd849db78fb73056beddbf497668f368d64182f8e82a21158a650b486ecc69cc8663d16ca0aab51e503c700f9ea74a92d64123962aaa77c1b08ebc05234dfdd2778fdc3e39578fe2e719e441d34aa760a67f45a9c4f592baddb5f95571d39e28ab9776afdf14cb460517bbfb60879ee451041bb8f5f7e81080fb27aa14c34c911af265148331d7f5c2abea8e994986ef8c80703a5ac2d0bef7d2dac7a06339e2fc349fb6aea2dc612a4ac9033915ac2247c5450be3", 0xe4, 0x10, 0x0, 0x3}]) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000640)={0x101ff, 0x6, 0xb85d3d53025fa6fb, 0x1000, &(0x7f0000fff000/0x1000)=nil}) syz_open_procfs$pagemap(0x0, &(0x7f0000000680)) ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0xc008ae05, &(0x7f00000006c0)={0x4, 0x0, [{0x80000000, 0x6, 0x1, 0x9, 0x7, 0xe1a, 0x8}, {0x80000008, 0x2, 0x1, 0xc6b6, 0x46, 0x10000, 0x4}, {0x80000008, 0x6, 0x2, 0x7, 0x1, 0x6, 0x8}, {0x2, 0x4, 0x5, 0xffffff7f, 0x2, 0x2, 0x8}]}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000800)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0xd, 0xa50, 0x24, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x10, 0x80, 0x10, 0x93}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x2, 0x0, 0x2, @remote, @mcast1, 0x700, 0x0, 0x3ff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000ac0)={'syztnl0\x00', &(0x7f00000009c0)={'gretap0\x00', 0x0, 0x40, 0x80, 0x3, 0x1000, {{0x2b, 0x4, 0x1, 0x32, 0xac, 0x68, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0x10}, {[@lsrr={0x83, 0x7, 0x85, [@broadcast]}, @noop, @noop, @ssrr={0x89, 0x17, 0x51, [@loopback, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x3f}, @rand_addr=0x64010101]}, @ssrr={0x89, 0x1f, 0x36, [@multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x37}, @multicast2, @local, @private=0xa010100, @remote]}, @ssrr={0x89, 0x13, 0xda, [@loopback, @multicast2, @loopback, @local]}, @lsrr={0x83, 0x1b, 0xb6, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local, @remote, @broadcast]}, @timestamp_addr={0x44, 0x1c, 0x41, 0x1, 0x7, [{@local, 0xfff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x1}]}, @timestamp_prespec={0x44, 0xc, 0xf7, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x22}}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000bc0)={'gretap0\x00', &(0x7f0000000b00)={'syztnl1\x00', 0x0, 0x7800, 0x7, 0x1c, 0x8, {{0x1b, 0x4, 0x3, 0x3, 0x6c, 0x68, 0x0, 0x7, 0x2f, 0x0, @multicast1, @private=0xa010102, {[@cipso={0x86, 0x20, 0x0, [{0x1, 0x12, "5265cd5592c374389c5a699c8411560d"}, {0x2, 0x6, "11044aeb"}, {0x5, 0x2}]}, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x11, "4b49d717d8fbf2dc3f33836e589045"}, @cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x1, 0x9, "1a76dd7a5a1f52"}, {0x1, 0xb, "39a441dc948216b7af"}]}, @generic={0xd1, 0x7, "9e34051825"}]}}}}}) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000c00)={0x0, @initdev, @local}, &(0x7f0000000c40)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000d00)={'ip6gre0\x00', &(0x7f0000000c80)={'ip6tnl0\x00', 0x0, 0x29, 0xf8, 0x3e, 0x10001, 0x9, @private1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8000, 0x10, 0x2, 0xffffffff}}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000e00)={'gre0\x00', &(0x7f0000000d80)={'syztnl1\x00', 0x0, 0x80, 0x20, 0x9, 0x8, {{0xc, 0x4, 0x2, 0x1, 0x30, 0x68, 0x0, 0x9f, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x8d, 0x1, 0x1, [{@remote, 0x7ff}, {@rand_addr=0x64010101, 0x3}, {@remote, 0x37}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000ec0)={'syztnl1\x00', &(0x7f0000000e40)={'ip6tnl0\x00', 0x0, 0x29, 0x66, 0x2, 0x13, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x5, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000f00)={'batadv0\x00', 0x0}) getsockname$packet(r8, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000f80)=0x14) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000fc0)={@local, @empty, 0x0}, &(0x7f0000001000)=0xc) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f0000001280)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001040)={0x1cc, r9, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x44}, 0x48000) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000001540)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001500)={&(0x7f0000001300)={0x200, r9, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$TUNSETCARRIER(r8, 0x400454e2, &(0x7f0000001580)) program did not crash bisect: testing without sub-chunk 3/3 testing program (duration=6m3s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 3, 17, 3, 6, 5, 24, 16, 5, 19, 12, 30] detailed listing: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff020020000000000000000000000001042022eb"], 0xfdef) executing program 4: r0 = socket(0x4, 0x80000, 0xc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'bridge_slave_0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0xf351, 0xfffffff4, 0xa, 0x0, 0x5, 0x0, 0x0, 0x2d70}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000080)=@ethtool_ts_info}) executing program 4: r0 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d80402f000000000000109022d00010000001009040000010300000009211000fd0122050009058103"], 0x0) keyctl$set_reqkey_keyring(0x10, 0xfffffff8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x303001, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r3, 0x0, 0x500) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000400)=0x30) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080)=0x80, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'erspan0\x00'}) write$tun(r1, &(0x7f0000000100)={@void, @void, @mpls={[{0xff000, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x101}, {0x9}, {0x8}, {0x3, 0x0, 0x1}], @ipv4=@igmp={{0x3c, 0x4, 0x1, 0x4, 0x1ce, 0x66, 0x0, 0x5, 0x2, 0x0, @remote, @private=0xa010101, {[@timestamp={0x44, 0x10, 0x68, 0x0, 0xf, [0x81, 0x7, 0x81]}, @timestamp={0x44, 0x2c, 0xc5, 0x0, 0x0, [0x6, 0x7, 0x8, 0x7, 0xc3f, 0xff, 0x2, 0x2, 0x3, 0x7]}, @end, @noop, @cipso={0x86, 0xf, 0x1, [{0x0, 0x9, "20a910a0751863"}]}, @timestamp_addr={0x44, 0x24, 0x4d, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff9b}, {@private=0xa010100, 0x400}, {@private=0xa010101, 0x4}]}, @cipso={0x86, 0x1b, 0xffffffffffffffff, [{0x2, 0xe, "333c1a3d122bdb8b97697e16"}, {0x6, 0x7, "002e283ca4"}]}, @cipso={0x86, 0x29, 0x3, [{0x6, 0xc, "72476f4b64520cc6f3d3"}, {0x7, 0x8, "257cfbf86cff"}, {0x1, 0xf, "0b42e09c5e5b1d6deca1d4ce2a"}]}, @timestamp_addr={0x44, 0x24, 0x7b, 0x1, 0x9, [{@multicast1, 0xe}, {@loopback, 0x9}, {@loopback, 0x3}, {@loopback, 0x7}]}]}}, {0x14, 0x6, 0x0, @multicast2, "5ddcf444cbc8053ab38dffaab94486725ef82e7ca4fb030db3186f4a32a583e393019322a626986c6c707ceeca0d425d1bbba6653a77bf7d07233066954c7ffd5dc094a9e67974933180380ff0fae274d8aea0d42a0881e1dd74375e1131184640342477c2f0aa0c875cfc369c2b8435f67165d7af0da4204cd2cab94e7cfbd4974fdbb5d3eb2c83c7fa29a2e46d26a4ec958312479eafe9ff698cc489eb4d7039d5306a79a1481bcc188c356b9e246ecf6d3e5a695e96676f2611b7948afb3d17fecf31ddb77df115d095a388a21598194a165022eb"}}}}, 0x1e6) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xd90, 0x0, 0x8}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220540000093fbd16a63"], 0x0}, 0x0) executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000b80)=""/227, 0xe3}, {&(0x7f0000001a40)=""/201, 0xc9}, {&(0x7f0000004500)=""/4090, 0xffa}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/122, 0x7a}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f00000004c0)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}, {&(0x7f0000000140)=""/88, 0x58}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc3}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}], 0x7, 0x40000100, 0x0) executing program 4: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0xe851000) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) sendmmsg(0xffffffffffffffff, &(0x7f000000efc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, 0x0, 0xf08}}], 0x1, 0x20040044) ioctl$BLKRRPART(r0, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (fail_nth: 67) executing program 2: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0xe851000) sendmmsg(0xffffffffffffffff, &(0x7f000000efc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, 0x0, 0xf08}}], 0x1, 0x20040044) ioctl$BLKRRPART(r0, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x74390) (fail_nth: 75) executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0xb) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x8880, 0x85) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x14, 0x0, &(0x7f0000000300)) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa1400198077167d6bcfd4fc6a080002", @ANYBLOB="7469837fdee51472f65042efe4dd290009d281cbb9293f80db8e4057853a26619f8669d8d0d4f3a57b8f71d13547f5219f9587983991be4368c69a77823884145878b62a90c934d7ca29432cd5b16792815cdacca59163291feb1435fcc8b66cf7a22a94cbdd46849ad98135fef4804c0e7fcb8fd5c35dced71078a64458d74cd6b6cc56b86da386a3a19280461109fc54371d299d5e4c1d6b3e4227e7b762ea667f8bd376055a1b8e5875d1a519453690cd037f4003e8f66147511aa45fdb96bb7d770114f795aa1bc649a46653a3784340662bcf2380816e737c79f3af67"], 0x44}}, 0x40041) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x4, 0xe0, 0x11, @private1={0xfc, 0x1, '\x00', 0x8}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x80, 0x6, 0xffff}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x2f, 0x24, 0xfc, 0xfbfe, 0x2, @empty, @mcast2, 0x7, 0x80, 0x6, 0x6}}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r6, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r8, &(0x7f00000001c0)={0x1d, r9}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xb8, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_DEBUG_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000895}, 0x40000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x10, &(0x7f0000000100)=0xc, 0x4) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000) executing program 0: r0 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002180), 0xa0002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x44a30c8c58d93834, 0x0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000180)={0x1, 0x0, [{0x80000001, 0x6, 0x100, 0x8000, 0x7}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) (async) landlock_restrict_self(r0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000002180), 0xa0002, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x44a30c8c58d93834, 0x0, 0x0) (async) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000180)={0x1, 0x0, [{0x80000001, 0x6, 0x100, 0x8000, 0x7}]}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) executing program 4: capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x42cd, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000110000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x2402c004) executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r7, &(0x7f0000006240)='-1\x00', 0x3) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x112, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x24, 0x6, @broadcast}, 0x14) timer_gettime(r4, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) open(0x0, 0x0, 0x0) r9 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) setns(r9, 0x80) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x2) executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) (async) writev(r1, &(0x7f0000000cc0)=[{&(0x7f0000000780)="1e", 0x1}], 0x1) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c7766646e6f3dfff6ce097111fcb877f8012e3b137275bd4bec36acb8097912d7a00fba5ed227fa0328b52ea4bafe89a32584642a63652d7cb8c6e7cd58db29aa20ec7a4a5f6e3a7b2a07949e01b81d94055524b824bed62e4cb114ce1f7de45f3e3bf7cd79fe8dc1458aa947a1be34c33d1751718ad0a7bbcacf285562c9acc7823a83988f89a355033ba189dea8002997c99e5330c793eec83f2b2cb1f93c720c1828c740432a6be516913237f6b909386a9f88732ca0ff3773fab46a2872c3f344809bd77a0d2e033a662468466c9945c50599812ae0516617cc0e15c0c207a6607486081890cacf6923cdeded2b0b0d806961e40011b569c5cc9da29f766bdc9e35983ef2ba04a8f461378fc970fa26e9578d393d2ddafbbbb1ba08f1cb8dfaa1f8865d4c8ab715a4", @ANYRESHEX=r5, @ANYBLOB=',debug=0x0000000000000002,afid=0x0000000000000006,k']) executing program 4: io_setup(0x7fff, &(0x7f0000000000)=0x0) r1 = syz_socket_connect_nvme_tcp() r2 = eventfd2(0x7, 0x80800) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) r4 = eventfd2(0x4, 0x801) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x10002, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000380), 0x1000, 0x30000) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) io_submit(r0, 0x5, &(0x7f0000000600)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f0000000040)="b17877d77634c2beb765396102e771affe1b7d7108393eeb5c10174c5560b0451fe84c37df158561bf6f8b98ee9e4e89b34c0ac9acda42f92736096d7f5cd0e008a7e16d4e5eda52be7ee472bd8defd184e96b7e32d83b7357ab7ab1db408e3a3463a2ef62370d031b64a335148405e7ee19e7ac3bb623c92bca006868ba2fe3bfced54272949a5996bc19087f22c2adb61205e9f1e8341b3f6b11f6abb3ec1ef9739a798a08ec9f3c4008e239d1c96985c813e5211c68c910b6a945ea5b5bc69e3e8853", 0xc4, 0x1, 0x0, 0x0, r2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x6, r3, &(0x7f00000001c0)="e150eff5183ed97e4dc7b4326fe8abd5ae4993b35b748e43954235673b578f8ffde297c77f9805c7a9ebec83d0584421e248d09b6e884bac31b71899a485eacbc6caabb8af5092208423c236cef5509b7158", 0x52, 0xad, 0x0, 0x0, r4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x6, r5, &(0x7f00000002c0)="7d40bc5e69c126", 0x7, 0xea27, 0x0, 0x1, r6}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x8000, r7, &(0x7f00000003c0)="b9411b25d3c7454733d35b5868ccd6fd747607711fbd74870c8838b9944a1aac0fe1dc8acd26cf39d046469615de94239135a30df523a161b445f4946780eb993d30dcb88053fb2b867985d496956dd3fae927b417b65bbcb32bead89119", 0x5e, 0x7}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x1, r8, &(0x7f00000004c0)="034d29271214f9c8b1dbbd7b8537a84d33d28fc634ef568ec0f3be05a9703aa633b93cf17696d33d71a2d5fd002132bd849db78fb73056beddbf497668f368d64182f8e82a21158a650b486ecc69cc8663d16ca0aab51e503c700f9ea74a92d64123962aaa77c1b08ebc05234dfdd2778fdc3e39578fe2e719e441d34aa760a67f45a9c4f592baddb5f95571d39e28ab9776afdf14cb460517bbfb60879ee451041bb8f5f7e81080fb27aa14c34c911af265148331d7f5c2abea8e994986ef8c80703a5ac2d0bef7d2dac7a06339e2fc349fb6aea2dc612a4ac9033915ac2247c5450be3", 0xe4, 0x10, 0x0, 0x3}]) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000640)={0x101ff, 0x6, 0xb85d3d53025fa6fb, 0x1000, &(0x7f0000fff000/0x1000)=nil}) syz_open_procfs$pagemap(0x0, &(0x7f0000000680)) ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0xc008ae05, &(0x7f00000006c0)={0x4, 0x0, [{0x80000000, 0x6, 0x1, 0x9, 0x7, 0xe1a, 0x8}, {0x80000008, 0x2, 0x1, 0xc6b6, 0x46, 0x10000, 0x4}, {0x80000008, 0x6, 0x2, 0x7, 0x1, 0x6, 0x8}, {0x2, 0x4, 0x5, 0xffffff7f, 0x2, 0x2, 0x8}]}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000800)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0xd, 0xa50, 0x24, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x10, 0x80, 0x10, 0x93}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x2, 0x0, 0x2, @remote, @mcast1, 0x700, 0x0, 0x3ff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000ac0)={'syztnl0\x00', &(0x7f00000009c0)={'gretap0\x00', 0x0, 0x40, 0x80, 0x3, 0x1000, {{0x2b, 0x4, 0x1, 0x32, 0xac, 0x68, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0x10}, {[@lsrr={0x83, 0x7, 0x85, [@broadcast]}, @noop, @noop, @ssrr={0x89, 0x17, 0x51, [@loopback, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x3f}, @rand_addr=0x64010101]}, @ssrr={0x89, 0x1f, 0x36, [@multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x37}, @multicast2, @local, @private=0xa010100, @remote]}, @ssrr={0x89, 0x13, 0xda, [@loopback, @multicast2, @loopback, @local]}, @lsrr={0x83, 0x1b, 0xb6, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local, @remote, @broadcast]}, @timestamp_addr={0x44, 0x1c, 0x41, 0x1, 0x7, [{@local, 0xfff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x1}]}, @timestamp_prespec={0x44, 0xc, 0xf7, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x22}}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000bc0)={'gretap0\x00', &(0x7f0000000b00)={'syztnl1\x00', 0x0, 0x7800, 0x7, 0x1c, 0x8, {{0x1b, 0x4, 0x3, 0x3, 0x6c, 0x68, 0x0, 0x7, 0x2f, 0x0, @multicast1, @private=0xa010102, {[@cipso={0x86, 0x20, 0x0, [{0x1, 0x12, "5265cd5592c374389c5a699c8411560d"}, {0x2, 0x6, "11044aeb"}, {0x5, 0x2}]}, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x11, "4b49d717d8fbf2dc3f33836e589045"}, @cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x1, 0x9, "1a76dd7a5a1f52"}, {0x1, 0xb, "39a441dc948216b7af"}]}, @generic={0xd1, 0x7, "9e34051825"}]}}}}}) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000c00)={0x0, @initdev, @local}, &(0x7f0000000c40)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000d00)={'ip6gre0\x00', &(0x7f0000000c80)={'ip6tnl0\x00', 0x0, 0x29, 0xf8, 0x3e, 0x10001, 0x9, @private1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8000, 0x10, 0x2, 0xffffffff}}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000e00)={'gre0\x00', &(0x7f0000000d80)={'syztnl1\x00', 0x0, 0x80, 0x20, 0x9, 0x8, {{0xc, 0x4, 0x2, 0x1, 0x30, 0x68, 0x0, 0x9f, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x8d, 0x1, 0x1, [{@remote, 0x7ff}, {@rand_addr=0x64010101, 0x3}, {@remote, 0x37}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000ec0)={'syztnl1\x00', &(0x7f0000000e40)={'ip6tnl0\x00', 0x0, 0x29, 0x66, 0x2, 0x13, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x5, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000f00)={'batadv0\x00', 0x0}) getsockname$packet(r8, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000f80)=0x14) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000fc0)={@local, @empty, 0x0}, &(0x7f0000001000)=0xc) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f0000001280)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001040)={0x1cc, r9, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x44}, 0x48000) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000001540)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001500)={&(0x7f0000001300)={0x200, r9, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$TUNSETCARRIER(r8, 0x400454e2, &(0x7f0000001580)) program crashed: lost connection to test machine bisect: the chunk can be dropped bisect: split chunks (needed=true): <12> bisect: split chunk #0 of len 12 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 16, 5, 19, 12, 30] detailed listing: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0xb) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x8880, 0x85) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x14, 0x0, &(0x7f0000000300)) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa1400198077167d6bcfd4fc6a080002", @ANYBLOB="7469837fdee51472f65042efe4dd290009d281cbb9293f80db8e4057853a26619f8669d8d0d4f3a57b8f71d13547f5219f9587983991be4368c69a77823884145878b62a90c934d7ca29432cd5b16792815cdacca59163291feb1435fcc8b66cf7a22a94cbdd46849ad98135fef4804c0e7fcb8fd5c35dced71078a64458d74cd6b6cc56b86da386a3a19280461109fc54371d299d5e4c1d6b3e4227e7b762ea667f8bd376055a1b8e5875d1a519453690cd037f4003e8f66147511aa45fdb96bb7d770114f795aa1bc649a46653a3784340662bcf2380816e737c79f3af67"], 0x44}}, 0x40041) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x4, 0xe0, 0x11, @private1={0xfc, 0x1, '\x00', 0x8}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x80, 0x6, 0xffff}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x2f, 0x24, 0xfc, 0xfbfe, 0x2, @empty, @mcast2, 0x7, 0x80, 0x6, 0x6}}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r6, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r8, &(0x7f00000001c0)={0x1d, r9}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xb8, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_DEBUG_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000895}, 0x40000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x10, &(0x7f0000000100)=0xc, 0x4) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000) executing program 0: r0 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002180), 0xa0002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x44a30c8c58d93834, 0x0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000180)={0x1, 0x0, [{0x80000001, 0x6, 0x100, 0x8000, 0x7}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) (async) landlock_restrict_self(r0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000002180), 0xa0002, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x44a30c8c58d93834, 0x0, 0x0) (async) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000180)={0x1, 0x0, [{0x80000001, 0x6, 0x100, 0x8000, 0x7}]}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) executing program 4: capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x42cd, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000110000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x2402c004) executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r7, &(0x7f0000006240)='-1\x00', 0x3) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x112, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x24, 0x6, @broadcast}, 0x14) timer_gettime(r4, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) open(0x0, 0x0, 0x0) r9 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) setns(r9, 0x80) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x2) executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) (async) writev(r1, &(0x7f0000000cc0)=[{&(0x7f0000000780)="1e", 0x1}], 0x1) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="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", @ANYRESHEX=r5, @ANYBLOB=',debug=0x0000000000000002,afid=0x0000000000000006,k']) executing program 4: io_setup(0x7fff, &(0x7f0000000000)=0x0) r1 = syz_socket_connect_nvme_tcp() r2 = eventfd2(0x7, 0x80800) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) r4 = eventfd2(0x4, 0x801) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x10002, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000380), 0x1000, 0x30000) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) io_submit(r0, 0x5, &(0x7f0000000600)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f0000000040)="b17877d77634c2beb765396102e771affe1b7d7108393eeb5c10174c5560b0451fe84c37df158561bf6f8b98ee9e4e89b34c0ac9acda42f92736096d7f5cd0e008a7e16d4e5eda52be7ee472bd8defd184e96b7e32d83b7357ab7ab1db408e3a3463a2ef62370d031b64a335148405e7ee19e7ac3bb623c92bca006868ba2fe3bfced54272949a5996bc19087f22c2adb61205e9f1e8341b3f6b11f6abb3ec1ef9739a798a08ec9f3c4008e239d1c96985c813e5211c68c910b6a945ea5b5bc69e3e8853", 0xc4, 0x1, 0x0, 0x0, r2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x6, r3, &(0x7f00000001c0)="e150eff5183ed97e4dc7b4326fe8abd5ae4993b35b748e43954235673b578f8ffde297c77f9805c7a9ebec83d0584421e248d09b6e884bac31b71899a485eacbc6caabb8af5092208423c236cef5509b7158", 0x52, 0xad, 0x0, 0x0, r4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x6, r5, &(0x7f00000002c0)="7d40bc5e69c126", 0x7, 0xea27, 0x0, 0x1, r6}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x8000, r7, &(0x7f00000003c0)="b9411b25d3c7454733d35b5868ccd6fd747607711fbd74870c8838b9944a1aac0fe1dc8acd26cf39d046469615de94239135a30df523a161b445f4946780eb993d30dcb88053fb2b867985d496956dd3fae927b417b65bbcb32bead89119", 0x5e, 0x7}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x1, r8, &(0x7f00000004c0)="034d29271214f9c8b1dbbd7b8537a84d33d28fc634ef568ec0f3be05a9703aa633b93cf17696d33d71a2d5fd002132bd849db78fb73056beddbf497668f368d64182f8e82a21158a650b486ecc69cc8663d16ca0aab51e503c700f9ea74a92d64123962aaa77c1b08ebc05234dfdd2778fdc3e39578fe2e719e441d34aa760a67f45a9c4f592baddb5f95571d39e28ab9776afdf14cb460517bbfb60879ee451041bb8f5f7e81080fb27aa14c34c911af265148331d7f5c2abea8e994986ef8c80703a5ac2d0bef7d2dac7a06339e2fc349fb6aea2dc612a4ac9033915ac2247c5450be3", 0xe4, 0x10, 0x0, 0x3}]) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000640)={0x101ff, 0x6, 0xb85d3d53025fa6fb, 0x1000, &(0x7f0000fff000/0x1000)=nil}) syz_open_procfs$pagemap(0x0, &(0x7f0000000680)) ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0xc008ae05, &(0x7f00000006c0)={0x4, 0x0, [{0x80000000, 0x6, 0x1, 0x9, 0x7, 0xe1a, 0x8}, {0x80000008, 0x2, 0x1, 0xc6b6, 0x46, 0x10000, 0x4}, {0x80000008, 0x6, 0x2, 0x7, 0x1, 0x6, 0x8}, {0x2, 0x4, 0x5, 0xffffff7f, 0x2, 0x2, 0x8}]}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000800)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0xd, 0xa50, 0x24, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x10, 0x80, 0x10, 0x93}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x2, 0x0, 0x2, @remote, @mcast1, 0x700, 0x0, 0x3ff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000ac0)={'syztnl0\x00', &(0x7f00000009c0)={'gretap0\x00', 0x0, 0x40, 0x80, 0x3, 0x1000, {{0x2b, 0x4, 0x1, 0x32, 0xac, 0x68, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0x10}, {[@lsrr={0x83, 0x7, 0x85, [@broadcast]}, @noop, @noop, @ssrr={0x89, 0x17, 0x51, [@loopback, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x3f}, @rand_addr=0x64010101]}, @ssrr={0x89, 0x1f, 0x36, [@multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x37}, @multicast2, @local, @private=0xa010100, @remote]}, @ssrr={0x89, 0x13, 0xda, [@loopback, @multicast2, @loopback, @local]}, @lsrr={0x83, 0x1b, 0xb6, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local, @remote, @broadcast]}, @timestamp_addr={0x44, 0x1c, 0x41, 0x1, 0x7, [{@local, 0xfff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x1}]}, @timestamp_prespec={0x44, 0xc, 0xf7, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x22}}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000bc0)={'gretap0\x00', &(0x7f0000000b00)={'syztnl1\x00', 0x0, 0x7800, 0x7, 0x1c, 0x8, {{0x1b, 0x4, 0x3, 0x3, 0x6c, 0x68, 0x0, 0x7, 0x2f, 0x0, @multicast1, @private=0xa010102, {[@cipso={0x86, 0x20, 0x0, [{0x1, 0x12, "5265cd5592c374389c5a699c8411560d"}, {0x2, 0x6, "11044aeb"}, {0x5, 0x2}]}, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x11, "4b49d717d8fbf2dc3f33836e589045"}, @cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x1, 0x9, "1a76dd7a5a1f52"}, {0x1, 0xb, "39a441dc948216b7af"}]}, @generic={0xd1, 0x7, "9e34051825"}]}}}}}) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000c00)={0x0, @initdev, @local}, &(0x7f0000000c40)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000d00)={'ip6gre0\x00', &(0x7f0000000c80)={'ip6tnl0\x00', 0x0, 0x29, 0xf8, 0x3e, 0x10001, 0x9, @private1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8000, 0x10, 0x2, 0xffffffff}}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000e00)={'gre0\x00', &(0x7f0000000d80)={'syztnl1\x00', 0x0, 0x80, 0x20, 0x9, 0x8, {{0xc, 0x4, 0x2, 0x1, 0x30, 0x68, 0x0, 0x9f, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x8d, 0x1, 0x1, [{@remote, 0x7ff}, {@rand_addr=0x64010101, 0x3}, {@remote, 0x37}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000ec0)={'syztnl1\x00', &(0x7f0000000e40)={'ip6tnl0\x00', 0x0, 0x29, 0x66, 0x2, 0x13, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x5, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000f00)={'batadv0\x00', 0x0}) getsockname$packet(r8, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000f80)=0x14) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000fc0)={@local, @empty, 0x0}, &(0x7f0000001000)=0xc) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f0000001280)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001040)={0x1cc, r9, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x44}, 0x48000) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000001540)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001500)={&(0x7f0000001300)={0x200, r9, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$TUNSETCARRIER(r8, 0x400454e2, &(0x7f0000001580)) program crashed: lost connection to test machine bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <6> bisect: split chunk #0 of len 6 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 12, 30] detailed listing: executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r7, &(0x7f0000006240)='-1\x00', 0x3) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x112, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x24, 0x6, @broadcast}, 0x14) timer_gettime(r4, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) open(0x0, 0x0, 0x0) r9 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) setns(r9, 0x80) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x2) executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) (async) writev(r1, &(0x7f0000000cc0)=[{&(0x7f0000000780)="1e", 0x1}], 0x1) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="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", @ANYRESHEX=r5, @ANYBLOB=',debug=0x0000000000000002,afid=0x0000000000000006,k']) executing program 4: io_setup(0x7fff, &(0x7f0000000000)=0x0) r1 = syz_socket_connect_nvme_tcp() r2 = eventfd2(0x7, 0x80800) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) r4 = eventfd2(0x4, 0x801) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x10002, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000380), 0x1000, 0x30000) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) io_submit(r0, 0x5, &(0x7f0000000600)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f0000000040)="b17877d77634c2beb765396102e771affe1b7d7108393eeb5c10174c5560b0451fe84c37df158561bf6f8b98ee9e4e89b34c0ac9acda42f92736096d7f5cd0e008a7e16d4e5eda52be7ee472bd8defd184e96b7e32d83b7357ab7ab1db408e3a3463a2ef62370d031b64a335148405e7ee19e7ac3bb623c92bca006868ba2fe3bfced54272949a5996bc19087f22c2adb61205e9f1e8341b3f6b11f6abb3ec1ef9739a798a08ec9f3c4008e239d1c96985c813e5211c68c910b6a945ea5b5bc69e3e8853", 0xc4, 0x1, 0x0, 0x0, r2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x6, r3, &(0x7f00000001c0)="e150eff5183ed97e4dc7b4326fe8abd5ae4993b35b748e43954235673b578f8ffde297c77f9805c7a9ebec83d0584421e248d09b6e884bac31b71899a485eacbc6caabb8af5092208423c236cef5509b7158", 0x52, 0xad, 0x0, 0x0, r4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x6, r5, &(0x7f00000002c0)="7d40bc5e69c126", 0x7, 0xea27, 0x0, 0x1, r6}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x8000, r7, &(0x7f00000003c0)="b9411b25d3c7454733d35b5868ccd6fd747607711fbd74870c8838b9944a1aac0fe1dc8acd26cf39d046469615de94239135a30df523a161b445f4946780eb993d30dcb88053fb2b867985d496956dd3fae927b417b65bbcb32bead89119", 0x5e, 0x7}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x1, r8, &(0x7f00000004c0)="034d29271214f9c8b1dbbd7b8537a84d33d28fc634ef568ec0f3be05a9703aa633b93cf17696d33d71a2d5fd002132bd849db78fb73056beddbf497668f368d64182f8e82a21158a650b486ecc69cc8663d16ca0aab51e503c700f9ea74a92d64123962aaa77c1b08ebc05234dfdd2778fdc3e39578fe2e719e441d34aa760a67f45a9c4f592baddb5f95571d39e28ab9776afdf14cb460517bbfb60879ee451041bb8f5f7e81080fb27aa14c34c911af265148331d7f5c2abea8e994986ef8c80703a5ac2d0bef7d2dac7a06339e2fc349fb6aea2dc612a4ac9033915ac2247c5450be3", 0xe4, 0x10, 0x0, 0x3}]) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000640)={0x101ff, 0x6, 0xb85d3d53025fa6fb, 0x1000, &(0x7f0000fff000/0x1000)=nil}) syz_open_procfs$pagemap(0x0, &(0x7f0000000680)) ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0xc008ae05, &(0x7f00000006c0)={0x4, 0x0, [{0x80000000, 0x6, 0x1, 0x9, 0x7, 0xe1a, 0x8}, {0x80000008, 0x2, 0x1, 0xc6b6, 0x46, 0x10000, 0x4}, {0x80000008, 0x6, 0x2, 0x7, 0x1, 0x6, 0x8}, {0x2, 0x4, 0x5, 0xffffff7f, 0x2, 0x2, 0x8}]}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000800)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0xd, 0xa50, 0x24, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x10, 0x80, 0x10, 0x93}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x2, 0x0, 0x2, @remote, @mcast1, 0x700, 0x0, 0x3ff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000ac0)={'syztnl0\x00', &(0x7f00000009c0)={'gretap0\x00', 0x0, 0x40, 0x80, 0x3, 0x1000, {{0x2b, 0x4, 0x1, 0x32, 0xac, 0x68, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0x10}, {[@lsrr={0x83, 0x7, 0x85, [@broadcast]}, @noop, @noop, @ssrr={0x89, 0x17, 0x51, [@loopback, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x3f}, @rand_addr=0x64010101]}, @ssrr={0x89, 0x1f, 0x36, [@multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x37}, @multicast2, @local, @private=0xa010100, @remote]}, @ssrr={0x89, 0x13, 0xda, [@loopback, @multicast2, @loopback, @local]}, @lsrr={0x83, 0x1b, 0xb6, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local, @remote, @broadcast]}, @timestamp_addr={0x44, 0x1c, 0x41, 0x1, 0x7, [{@local, 0xfff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x1}]}, @timestamp_prespec={0x44, 0xc, 0xf7, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x22}}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000bc0)={'gretap0\x00', &(0x7f0000000b00)={'syztnl1\x00', 0x0, 0x7800, 0x7, 0x1c, 0x8, {{0x1b, 0x4, 0x3, 0x3, 0x6c, 0x68, 0x0, 0x7, 0x2f, 0x0, @multicast1, @private=0xa010102, {[@cipso={0x86, 0x20, 0x0, [{0x1, 0x12, "5265cd5592c374389c5a699c8411560d"}, {0x2, 0x6, "11044aeb"}, {0x5, 0x2}]}, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x11, "4b49d717d8fbf2dc3f33836e589045"}, @cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x1, 0x9, "1a76dd7a5a1f52"}, {0x1, 0xb, "39a441dc948216b7af"}]}, @generic={0xd1, 0x7, "9e34051825"}]}}}}}) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000c00)={0x0, @initdev, @local}, &(0x7f0000000c40)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000d00)={'ip6gre0\x00', &(0x7f0000000c80)={'ip6tnl0\x00', 0x0, 0x29, 0xf8, 0x3e, 0x10001, 0x9, @private1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8000, 0x10, 0x2, 0xffffffff}}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000e00)={'gre0\x00', &(0x7f0000000d80)={'syztnl1\x00', 0x0, 0x80, 0x20, 0x9, 0x8, {{0xc, 0x4, 0x2, 0x1, 0x30, 0x68, 0x0, 0x9f, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x8d, 0x1, 0x1, [{@remote, 0x7ff}, {@rand_addr=0x64010101, 0x3}, {@remote, 0x37}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000ec0)={'syztnl1\x00', &(0x7f0000000e40)={'ip6tnl0\x00', 0x0, 0x29, 0x66, 0x2, 0x13, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x5, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000f00)={'batadv0\x00', 0x0}) getsockname$packet(r8, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000f80)=0x14) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000fc0)={@local, @empty, 0x0}, &(0x7f0000001000)=0xc) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f0000001280)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001040)={0x1cc, r9, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x44}, 0x48000) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000001540)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001500)={&(0x7f0000001300)={0x200, r9, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$TUNSETCARRIER(r8, 0x400454e2, &(0x7f0000001580)) program crashed: lost connection to test machine bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <3> bisect: split chunk #0 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-syz_socket_connect_nvme_tcp-eventfd2-syz_open_procfs$pagemap-eventfd2-openat$hwrng-openat$selinux_commit_pending_bools-syz_open_dev$usbfs-openat$selinux_status-io_submit-ioctl$KVM_SET_USER_MEMORY_REGION-syz_open_procfs$pagemap-ioctl$KVM_GET_SUPPORTED_CPUID-syz_genetlink_get_family_id$ethtool-ioctl$ifreq_SIOCGIFINDEX_wireguard-ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGET6RD-ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL-getsockopt$inet_pktinfo-ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL-ioctl$ifreq_SIOCGIFINDEX_team-ioctl$sock_ipv6_tunnel_SIOCGET6RD-ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL-ioctl$ifreq_SIOCGIFINDEX_batadv_mesh-getsockname$packet-getsockopt$inet_mreqn-sendmsg$ETHTOOL_MSG_LINKSTATE_GET-sendmsg$ETHTOOL_MSG_CHANNELS_GET-ioctl$TUNSETCARRIER detailed listing: executing program 4: io_setup(0x7fff, &(0x7f0000000000)=0x0) r1 = syz_socket_connect_nvme_tcp() r2 = eventfd2(0x7, 0x80800) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) r4 = eventfd2(0x4, 0x801) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x10002, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000380), 0x1000, 0x30000) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) io_submit(r0, 0x5, &(0x7f0000000600)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f0000000040)="b17877d77634c2beb765396102e771affe1b7d7108393eeb5c10174c5560b0451fe84c37df158561bf6f8b98ee9e4e89b34c0ac9acda42f92736096d7f5cd0e008a7e16d4e5eda52be7ee472bd8defd184e96b7e32d83b7357ab7ab1db408e3a3463a2ef62370d031b64a335148405e7ee19e7ac3bb623c92bca006868ba2fe3bfced54272949a5996bc19087f22c2adb61205e9f1e8341b3f6b11f6abb3ec1ef9739a798a08ec9f3c4008e239d1c96985c813e5211c68c910b6a945ea5b5bc69e3e8853", 0xc4, 0x1, 0x0, 0x0, r2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x6, r3, &(0x7f00000001c0)="e150eff5183ed97e4dc7b4326fe8abd5ae4993b35b748e43954235673b578f8ffde297c77f9805c7a9ebec83d0584421e248d09b6e884bac31b71899a485eacbc6caabb8af5092208423c236cef5509b7158", 0x52, 0xad, 0x0, 0x0, r4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x6, r5, &(0x7f00000002c0)="7d40bc5e69c126", 0x7, 0xea27, 0x0, 0x1, r6}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x8000, r7, &(0x7f00000003c0)="b9411b25d3c7454733d35b5868ccd6fd747607711fbd74870c8838b9944a1aac0fe1dc8acd26cf39d046469615de94239135a30df523a161b445f4946780eb993d30dcb88053fb2b867985d496956dd3fae927b417b65bbcb32bead89119", 0x5e, 0x7}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x1, r8, &(0x7f00000004c0)="034d29271214f9c8b1dbbd7b8537a84d33d28fc634ef568ec0f3be05a9703aa633b93cf17696d33d71a2d5fd002132bd849db78fb73056beddbf497668f368d64182f8e82a21158a650b486ecc69cc8663d16ca0aab51e503c700f9ea74a92d64123962aaa77c1b08ebc05234dfdd2778fdc3e39578fe2e719e441d34aa760a67f45a9c4f592baddb5f95571d39e28ab9776afdf14cb460517bbfb60879ee451041bb8f5f7e81080fb27aa14c34c911af265148331d7f5c2abea8e994986ef8c80703a5ac2d0bef7d2dac7a06339e2fc349fb6aea2dc612a4ac9033915ac2247c5450be3", 0xe4, 0x10, 0x0, 0x3}]) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000640)={0x101ff, 0x6, 0xb85d3d53025fa6fb, 0x1000, &(0x7f0000fff000/0x1000)=nil}) syz_open_procfs$pagemap(0x0, &(0x7f0000000680)) ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0xc008ae05, &(0x7f00000006c0)={0x4, 0x0, [{0x80000000, 0x6, 0x1, 0x9, 0x7, 0xe1a, 0x8}, {0x80000008, 0x2, 0x1, 0xc6b6, 0x46, 0x10000, 0x4}, {0x80000008, 0x6, 0x2, 0x7, 0x1, 0x6, 0x8}, {0x2, 0x4, 0x5, 0xffffff7f, 0x2, 0x2, 0x8}]}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000800)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0xd, 0xa50, 0x24, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x10, 0x80, 0x10, 0x93}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x2, 0x0, 0x2, @remote, @mcast1, 0x700, 0x0, 0x3ff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000ac0)={'syztnl0\x00', &(0x7f00000009c0)={'gretap0\x00', 0x0, 0x40, 0x80, 0x3, 0x1000, {{0x2b, 0x4, 0x1, 0x32, 0xac, 0x68, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0x10}, {[@lsrr={0x83, 0x7, 0x85, [@broadcast]}, @noop, @noop, @ssrr={0x89, 0x17, 0x51, [@loopback, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x3f}, @rand_addr=0x64010101]}, @ssrr={0x89, 0x1f, 0x36, [@multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x37}, @multicast2, @local, @private=0xa010100, @remote]}, @ssrr={0x89, 0x13, 0xda, [@loopback, @multicast2, @loopback, @local]}, @lsrr={0x83, 0x1b, 0xb6, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local, @remote, @broadcast]}, @timestamp_addr={0x44, 0x1c, 0x41, 0x1, 0x7, [{@local, 0xfff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x1}]}, @timestamp_prespec={0x44, 0xc, 0xf7, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x22}}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000bc0)={'gretap0\x00', &(0x7f0000000b00)={'syztnl1\x00', 0x0, 0x7800, 0x7, 0x1c, 0x8, {{0x1b, 0x4, 0x3, 0x3, 0x6c, 0x68, 0x0, 0x7, 0x2f, 0x0, @multicast1, @private=0xa010102, {[@cipso={0x86, 0x20, 0x0, [{0x1, 0x12, "5265cd5592c374389c5a699c8411560d"}, {0x2, 0x6, "11044aeb"}, {0x5, 0x2}]}, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x11, "4b49d717d8fbf2dc3f33836e589045"}, @cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x1, 0x9, "1a76dd7a5a1f52"}, {0x1, 0xb, "39a441dc948216b7af"}]}, @generic={0xd1, 0x7, "9e34051825"}]}}}}}) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000c00)={0x0, @initdev, @local}, &(0x7f0000000c40)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000d00)={'ip6gre0\x00', &(0x7f0000000c80)={'ip6tnl0\x00', 0x0, 0x29, 0xf8, 0x3e, 0x10001, 0x9, @private1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8000, 0x10, 0x2, 0xffffffff}}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000e00)={'gre0\x00', &(0x7f0000000d80)={'syztnl1\x00', 0x0, 0x80, 0x20, 0x9, 0x8, {{0xc, 0x4, 0x2, 0x1, 0x30, 0x68, 0x0, 0x9f, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x8d, 0x1, 0x1, [{@remote, 0x7ff}, {@rand_addr=0x64010101, 0x3}, {@remote, 0x37}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000ec0)={'syztnl1\x00', &(0x7f0000000e40)={'ip6tnl0\x00', 0x0, 0x29, 0x66, 0x2, 0x13, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x5, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000f00)={'batadv0\x00', 0x0}) getsockname$packet(r8, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000f80)=0x14) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000fc0)={@local, @empty, 0x0}, &(0x7f0000001000)=0xc) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f0000001280)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001040)={0x1cc, r9, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x44}, 0x48000) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000001540)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001500)={&(0x7f0000001300)={0x200, r9, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$TUNSETCARRIER(r8, 0x400454e2, &(0x7f0000001580)) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 12] detailed listing: executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r7, &(0x7f0000006240)='-1\x00', 0x3) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x112, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x24, 0x6, @broadcast}, 0x14) timer_gettime(r4, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) open(0x0, 0x0, 0x0) r9 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) setns(r9, 0x80) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x2) executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) (async) writev(r1, &(0x7f0000000cc0)=[{&(0x7f0000000780)="1e", 0x1}], 0x1) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="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", @ANYRESHEX=r5, @ANYBLOB=',debug=0x0000000000000002,afid=0x0000000000000006,k']) program crashed: lost connection to test machine bisect: the chunk can be dropped bisect: split chunks (needed=true): <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-mprotect-socket$xdp-setsockopt$XDP_RX_RING-mmap-mkdirat-socketpair$unix-setsockopt$sock_int-writev-pipe2$9p-dup-mount$9p_fd detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) (async) writev(r1, &(0x7f0000000cc0)=[{&(0x7f0000000780)="1e", 0x1}], 0x1) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="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", @ANYRESHEX=r5, @ANYBLOB=',debug=0x0000000000000002,afid=0x0000000000000006,k']) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-dup-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-timer_create-socket$packet-syz_init_net_socket$bt_l2cap-openat$selinux_enforce-write$binfmt_format-setsockopt$bt_l2cap_L2CAP_OPTIONS-ioctl$sock_SIOCGIFINDEX-bind$packet-timer_gettime-syz_kvm_setup_cpu$x86-open-open-setns-ioctl$TIOCSETD detailed listing: executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r7, &(0x7f0000006240)='-1\x00', 0x3) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x112, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x24, 0x6, @broadcast}, 0x14) timer_gettime(r4, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) open(0x0, 0x0, 0x0) r9 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) setns(r9, 0x80) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x2) program crashed: lost connection to test machine bisect: the chunk can be dropped bisect: split chunks (needed=true): <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 1 programs left: executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r7, &(0x7f0000006240)='-1\x00', 0x3) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x112, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x24, 0x6, @broadcast}, 0x14) timer_gettime(r4, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) open(0x0, 0x0, 0x0) r9 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) setns(r9, 0x80) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x2) bisect: trying to concatenate bisect: concatenate 1 entries testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-dup-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-timer_create-socket$packet-syz_init_net_socket$bt_l2cap-openat$selinux_enforce-write$binfmt_format-setsockopt$bt_l2cap_L2CAP_OPTIONS-ioctl$sock_SIOCGIFINDEX-bind$packet-timer_gettime-syz_kvm_setup_cpu$x86-open-open-setns-ioctl$TIOCSETD detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r7, &(0x7f0000006240)='-1\x00', 0x3) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x112, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x24, 0x6, @broadcast}, 0x14) timer_gettime(r4, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) open(0x0, 0x0, 0x0) r9 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) setns(r9, 0x80) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x2) program crashed: lost connection to test machine bisect: concatenation succeeded found reproducer with 19 syscalls minimizing guilty program testing program (duration=2m6.831765448s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-dup-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-timer_create-socket$packet-syz_init_net_socket$bt_l2cap-openat$selinux_enforce-write$binfmt_format-setsockopt$bt_l2cap_L2CAP_OPTIONS-ioctl$sock_SIOCGIFINDEX-bind$packet-timer_gettime-syz_kvm_setup_cpu$x86-open-open-setns detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r7, &(0x7f0000006240)='-1\x00', 0x3) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x112, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x24, 0x6, @broadcast}, 0x14) timer_gettime(r4, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) open(0x0, 0x0, 0x0) r9 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) setns(r9, 0x80) program crashed: lost connection to test machine testing program (duration=2m6.831765448s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-dup-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-timer_create-socket$packet-syz_init_net_socket$bt_l2cap-openat$selinux_enforce-write$binfmt_format-setsockopt$bt_l2cap_L2CAP_OPTIONS-ioctl$sock_SIOCGIFINDEX-bind$packet-timer_gettime-syz_kvm_setup_cpu$x86-open-open detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r7, &(0x7f0000006240)='-1\x00', 0x3) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x112, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x24, 0x6, @broadcast}, 0x14) timer_gettime(r4, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) open(0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) program crashed: lost connection to test machine testing program (duration=2m6.831765448s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-dup-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-timer_create-socket$packet-syz_init_net_socket$bt_l2cap-openat$selinux_enforce-write$binfmt_format-setsockopt$bt_l2cap_L2CAP_OPTIONS-ioctl$sock_SIOCGIFINDEX-bind$packet-timer_gettime-syz_kvm_setup_cpu$x86-open detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r7, &(0x7f0000006240)='-1\x00', 0x3) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x112, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x24, 0x6, @broadcast}, 0x14) timer_gettime(r4, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) open(0x0, 0x0, 0x0) program crashed: lost connection to test machine testing program (duration=2m6.831765448s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-dup-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-timer_create-socket$packet-syz_init_net_socket$bt_l2cap-openat$selinux_enforce-write$binfmt_format-setsockopt$bt_l2cap_L2CAP_OPTIONS-ioctl$sock_SIOCGIFINDEX-bind$packet-timer_gettime-syz_kvm_setup_cpu$x86 detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r7, &(0x7f0000006240)='-1\x00', 0x3) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x112, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x24, 0x6, @broadcast}, 0x14) timer_gettime(r4, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) program crashed: lost connection to test machine testing program (duration=2m6.831765448s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-dup-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-timer_create-socket$packet-syz_init_net_socket$bt_l2cap-openat$selinux_enforce-write$binfmt_format-setsockopt$bt_l2cap_L2CAP_OPTIONS-ioctl$sock_SIOCGIFINDEX-bind$packet-timer_gettime detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r6, &(0x7f0000006240)='-1\x00', 0x3) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x112, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x24, 0x6, @broadcast}, 0x14) timer_gettime(r3, &(0x7f0000000100)) program crashed: lost connection to test machine testing program (duration=2m6.831765448s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-dup-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-timer_create-socket$packet-syz_init_net_socket$bt_l2cap-openat$selinux_enforce-write$binfmt_format-setsockopt$bt_l2cap_L2CAP_OPTIONS-ioctl$sock_SIOCGIFINDEX-bind$packet detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)) r3 = socket$packet(0x11, 0x2, 0x300) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r5, &(0x7f0000006240)='-1\x00', 0x3) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x112, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x24, 0x6, @broadcast}, 0x14) program crashed: lost connection to test machine testing program (duration=2m6.831765448s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-dup-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-timer_create-socket$packet-syz_init_net_socket$bt_l2cap-openat$selinux_enforce-write$binfmt_format-setsockopt$bt_l2cap_L2CAP_OPTIONS-ioctl$sock_SIOCGIFINDEX detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)) r3 = socket$packet(0x11, 0x2, 0x300) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r5, &(0x7f0000006240)='-1\x00', 0x3) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x112, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00'}) program crashed: lost connection to test machine testing program (duration=2m6.831765448s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-dup-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-timer_create-socket$packet-syz_init_net_socket$bt_l2cap-openat$selinux_enforce-write$binfmt_format-setsockopt$bt_l2cap_L2CAP_OPTIONS detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)) socket$packet(0x11, 0x2, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r4, &(0x7f0000006240)='-1\x00', 0x3) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x112, 0x1, 0x0, 0x0) program crashed: lost connection to test machine testing program (duration=2m6.831765448s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-dup-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-timer_create-socket$packet-syz_init_net_socket$bt_l2cap-openat$selinux_enforce-write$binfmt_format detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r3, &(0x7f0000006240)='-1\x00', 0x3) program crashed: lost connection to test machine testing program (duration=2m6.831765448s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-dup-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-timer_create-socket$packet-syz_init_net_socket$bt_l2cap-openat$selinux_enforce detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) program did not crash testing program (duration=2m6.831765448s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-dup-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-timer_create-socket$packet-syz_init_net_socket$bt_l2cap-write$binfmt_format detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) write$binfmt_format(0xffffffffffffffff, &(0x7f0000006240)='-1\x00', 0x3) program did not crash testing program (duration=2m6.831765448s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-dup-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-timer_create-socket$packet-openat$selinux_enforce-write$binfmt_format detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)) socket$packet(0x11, 0x2, 0x300) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r3, &(0x7f0000006240)='-1\x00', 0x3) program crashed: lost connection to test machine testing program (duration=2m6.831765448s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-dup-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-timer_create-openat$selinux_enforce-write$binfmt_format detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r3, &(0x7f0000006240)='-1\x00', 0x3) program crashed: lost connection to test machine testing program (duration=2m6.831765448s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-dup-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-openat$selinux_enforce-write$binfmt_format detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r3, &(0x7f0000006240)='-1\x00', 0x3) program crashed: lost connection to test machine testing program (duration=2m6.831765448s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-dup-ioctl$KVM_CREATE_VCPU-openat$selinux_enforce-write$binfmt_format detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r3, &(0x7f0000006240)='-1\x00', 0x3) program crashed: lost connection to test machine testing program (duration=2m6.831765448s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-dup-openat$selinux_enforce-write$binfmt_format detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r2, &(0x7f0000006240)='-1\x00', 0x3) program crashed: lost connection to test machine testing program (duration=2m6.831765448s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-openat$selinux_enforce-write$binfmt_format detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r1, &(0x7f0000006240)='-1\x00', 0x3) program crashed: lost connection to test machine testing program (duration=2m6.831765448s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-openat$selinux_enforce-write$binfmt_format detailed listing: executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r0, &(0x7f0000006240)='-1\x00', 0x3) program crashed: lost connection to test machine testing program (duration=2m6.831765448s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$selinux_enforce-write$binfmt_format detailed listing: executing program 0: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r0, &(0x7f0000006240)='-1\x00', 0x3) program crashed: lost connection to test machine testing program (duration=2m6.831765448s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$selinux_enforce-write$binfmt_format detailed listing: executing program 0: r0 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x68c01, 0x0) write$binfmt_format(r0, &(0x7f0000006240)='-1\x00', 0x3) program did not crash testing program (duration=2m6.831765448s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$selinux_enforce-write$binfmt_format detailed listing: executing program 0: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r0, 0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=2m6.831765448s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$selinux_enforce-write$binfmt_format program did not crash simplifying guilty program options testing program (duration=2m6.831765448s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$selinux_enforce-write$binfmt_format detailed listing: executing program 0: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r0, &(0x7f0000006240)='-1\x00', 0x3) program crashed: lost connection to test machine extracting C reproducer testing compiled C program (duration=2m6.831765448s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$selinux_enforce-write$binfmt_format program did not crash testing program (duration=2m6.831765448s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$selinux_enforce-write$binfmt_format detailed listing: executing program 0: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r0, &(0x7f0000006240)='-1\x00', 0x3) program crashed: lost connection to test machine extracting C reproducer testing compiled C program (duration=2m6.831765448s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$selinux_enforce-write$binfmt_format program did not crash testing program (duration=2m6.831765448s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$selinux_enforce-write$binfmt_format detailed listing: executing program 0: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r0, &(0x7f0000006240)='-1\x00', 0x3) program crashed: lost connection to test machine validation run: crashed=true testing program (duration=2m6.831765448s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$selinux_enforce-write$binfmt_format detailed listing: executing program 0: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r0, &(0x7f0000006240)='-1\x00', 0x3) program crashed: lost connection to test machine validation run: crashed=true testing program (duration=2m6.831765448s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$selinux_enforce-write$binfmt_format detailed listing: executing program 0: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r0, &(0x7f0000006240)='-1\x00', 0x3) program crashed: lost connection to test machine validation run: crashed=true reproducing took 2h5m4.741547909s repro crashed as (corrupted=false): final repro crashed as (corrupted=false):