Extracting prog: 9m38.313710386s
Minimizing prog: 3h25m6.332171965s
Simplifying prog options: 14m5.305379871s
Extracting C: 5m27.943183469s
Simplifying C: 0s


extracting reproducer from 32 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-mkdir-mkdirat-mkdir-getpid-syz_pidfd_open-setns-openat-lseek-mount$overlay-mmap-mremap-mlock2-remap_file_pages-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind-umount2-openat$tun-close-openat$ppp-syz_init_net_socket$nfc_llcp-bind$bt_hci-ioctl$TUNGETVNETLE
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r3, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
umount2(&(0x7f00000001c0)='./file0/file0/file0\x00', 0x2)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0)
close(r5)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x169900, 0x0)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r6, &(0x7f0000000000)={0x27, 0x2, 0x2}, 0x6)
ioctl$TUNGETVNETLE(r5, 0x40047440, 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 32 programs with base timeout 30s
testing program (duration=38s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 13, 26, 2, 5, 21, 21, 29, 30, 13, 11, 8, 30, 11, 10, 2, 20, 30, 29, 20, 11, 29, 24, 2, 10, 25, 29, 40, 7, 30, 15, 29]
detailed listing:
executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vlan0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000005f40)="a630ce5088a83e54fa6b090879a96f", 0xf, 0x40000c4, &(0x7f00000006c0)={0x11, 0x0, r2, 0x1, 0xff, 0x6, @broadcast}, 0x14)
executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000c80000/0x3000)=nil, 0x3000, 0x6)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vlan0\x00', <r2=>0x0})
r3 = socket(0x10, 0x803, 0x0)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f000000a000)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)=""/220, 0xdc}, {&(0x7f0000001a40)=""/214, 0xd6}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000001880)=""/147, 0x93}, {&(0x7f00000000c0)=""/144, 0x90}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000000240)=""/154, 0x9a}, {&(0x7f0000002d80)=""/254, 0xfe}], 0x8}, 0x10}, {{0x0, 0x0, 0x0}, 0xe}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x100007}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x401}], 0x7, 0x40000000, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x1, 0xfffffffd}}, 0x10)
bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10)
sendto$packet(r0, 0xfffffffffffffffd, 0x0, 0x40000c4, &(0x7f00000006c0)={0x11, 0x0, r2, 0x1, 0xff, 0x6, @broadcast}, 0x14)
executing program 2:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
pipe2(0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
pipe2$9p(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, 0x0)
r4 = socket$inet6(0xa, 0x802, 0x88)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7})
sendto$inet6(r4, 0x0, 0x0, 0x40000, 0x0, 0x0)
mmap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2, 0x13, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x3)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, 0x0, 0x0)
setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000000)={0x2ff, [0x10005, 0x400], 0x7}, 0x10)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000}, 0x4040)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x3, 0xb, 0x6)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e457bae75"], 0x15)
r6 = dup(r2)
write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18)
write$FUSE_INIT(r6, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff8, 0x4, 0x0, 0x2, 0x0, 0x0, 0x20, 0x4}}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}})
pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb)
executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00200000000000", @ANYRES32=0x0, @ANYRESOCT], 0xb8}}, 0x400000000000000)
executing program 2:
ioctl$VHOST_VDPA_SET_VRING_ENABLE(0xffffffffffffffff, 0x4008af75, &(0x7f0000000000)={0x2, 0x5f9})
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x20602, 0x0)
write$vga_arbiter(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='trylock '], 0xc)
write$rfkill(r0, &(0x7f0000000180)={0x2023, 0x4, 0x2, 0x1, 0x1}, 0x8)
executing program 2:
sched_setscheduler(0x0, 0x1, 0x0)
unshare(0x2040400)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
r3 = socket$inet6(0xa, 0x3, 0x38)
setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4)
connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x41200003, @loopback, 0x7}, 0x1c)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1)
mount$9p_fd(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid}]}})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000008)
read(r4, &(0x7f0000000040)=""/12, 0xc)
r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
sendfile(r5, r0, 0x0, 0x80000000)
executing program 32:
sched_setscheduler(0x0, 0x1, 0x0)
unshare(0x2040400)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
r3 = socket$inet6(0xa, 0x3, 0x38)
setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4)
connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x41200003, @loopback, 0x7}, 0x1c)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1)
mount$9p_fd(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid}]}})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000008)
read(r4, &(0x7f0000000040)=""/12, 0xc)
r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
sendfile(r5, r0, 0x0, 0x80000000)
executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r3, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
umount2(&(0x7f00000001c0)='./file0/file0/file0\x00', 0x2)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0)
close(r5)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x169900, 0x0)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r6, &(0x7f0000000000)={0x27, 0x2, 0x2}, 0x6)
ioctl$TUNGETVNETLE(r5, 0x40047440, 0x0)
executing program 1:
syz_usb_connect(0x0, 0x5a, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, &(0x7f0000000080)})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000140)="46ae460f01cbc4a3616ac100410f01ca4e0fc72c2e8f6878c22200450f20452e66430fd129b97e0a0000b882000000ba000000000f30f6ed", 0x38}], 0x1, 0x10, 0x0, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000280)={[0x4d, 0x1, 0xfffffffffffffffc, 0x10000, 0x6cb, 0xffffffffffff8001, 0x44d, 0x5, 0x1, 0x2, 0x9, 0x2, 0x9731, 0x3, 0xffffffffffffffff, 0x200000010001], 0x1000, 0x280})
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x60)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0)
fcntl$setlease(r6, 0x400, 0x1)
ioctl$KVM_NMI(r4, 0xae9a)
readv(r1, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/57, 0x39}, {&(0x7f0000000340)=""/235, 0xeb}, {&(0x7f0000000540)=""/223, 0xdf}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f0000000640)=""/112, 0x70}], 0x5)
ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYRES32=r4])
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f00000004c0)="170000000a0001000003be8c5ee17688a20032000203000a0292000098fc5ad90a00bb6a880000d6c8db0000dba67e06020000e28900000200df018002000000fc0607bdff59100ac45761547a681f009cee4a5a2d8f89814bc6c252674f00c88ebb01005033bf79ac2dfc060115003901000000000000ea0000000000000800b59bd2b8e50ce5af649a702202ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5a1b47b6806323deb3", 0xb8)
pipe(&(0x7f0000019480)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
vmsplice(r9, &(0x7f0000000500)=[{&(0x7f00000007c0)="09a2374f2c830532f3c9badd512ac947adf1773b4d97f6ab4b5601a82ff3f7980821de85b230d7ca131720aa5c699843bb1d", 0x32}, {&(0x7f0000000100)="768102", 0x3}, {&(0x7f0000000480)="eb", 0x1}, {&(0x7f00000004c0)='&', 0x1}, {&(0x7f00000001c0)="ca", 0x1}, {&(0x7f00000011c0)="b488", 0x2}, {&(0x7f0000001440)='4', 0x1}], 0x7, 0x3)
close(r9)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r10, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4)
connect$inet(r6, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r10, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000780)="92", 0x1}, {&(0x7f0000000940)="a6", 0x1}, {&(0x7f00000009c0)="e3", 0x1}, {&(0x7f0000000b80)='a', 0x1}, {&(0x7f0000000740)='_\r', 0x2}], 0x5}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000008c0)='f', 0x1}, {&(0x7f0000001f40)="2ae0a79f886ac8fd105493a2585ebcaf5142ac47ae6624d854c0126b1229c57735ceeffa23ad416df2d58615e69565387f3847c32160cdd68811ccf2e3e56c2457a07581d6a5bd7d1a756e13c4c86874df9a65e724f9480162cbd8864919a3658311e3738d1a558df6766a845840e4b903d84ed5ae604e47dedf8b5ba991d7b910a80eab67a9f8a77e8e7b893cda1733a543566b27a1178767d1cc01cc9efe17ebad47d8640d0fb3788ddafe8cdcf47cdfa6c4b4c061712fd454cdfd05fe54cc33", 0xc1}, {&(0x7f00000012c0)="74c140", 0x3}, {&(0x7f0000000d80)="dd", 0x1}, {&(0x7f0000001dc0)="81", 0x1}], 0x5}}], 0x2, 0x4008400)
splice(r8, 0x0, r9, 0x0, 0x10500, 0x0)
executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x14, r2}) (async)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000004c40)={@private0={0xfc, 0x0, '\x00', 0x1}, r2}, 0x14) (async, rerun: 32)
r3 = epoll_create(0x6) (rerun: 32)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x12, r2}) (async)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000100)) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r0, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
epoll_create1(0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0) (async)
r2 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000480)={0x0, "237b61d575a0802ad4be1c8e369df41d90bd42a3df371fa430a6b4f71e65b13b30f8ddcaf2420eb1fb875c3d75c91d9886e2080f1d4b9bc3385a37f7db5534ed", 0x34}, 0x48, 0xfffffffffffffffb)
request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000c40)='\x00', r2)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @local}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffd}}}, 0x108) (async)
close_range(r0, 0xffffffffffffffff, 0x0)
executing program 1:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
r2 = socket$inet6(0xa, 0x800, 0x8f7f)
preadv2(r2, &(0x7f0000001480)=[{&(0x7f0000000080)=""/33, 0x21}, {&(0x7f00000000c0)=""/166, 0xa6}, {&(0x7f0000000180)=""/218, 0xda}, {&(0x7f0000000280)=""/233, 0xe9}, {&(0x7f0000000380)=""/231, 0xe7}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x6, 0x7f, 0x5, 0x11) (async)
r3 = accept4$inet6(r2, &(0x7f0000001500)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f0000001540)=0x1c, 0x80800)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001580), 0x50041, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000015c0)=0x80) (async)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001640)={0x4, &(0x7f0000001600)=[{0x40, 0x9, 0x7, 0x8}, {0x6, 0x0, 0x4, 0xef1}, {0x4, 0xfd, 0x10, 0x94}, {0x8, 0x4, 0x1, 0x5}]})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000001680)={r0, 0x0, r3, 0xffa}) (async)
sched_setaffinity(r1, 0x8, &(0x7f00000016c0)=0x3) (async)
ioctl$BLKRRPART(r4, 0x125f, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000001700)) (async)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r4, 0xf502, 0x0) (async)
fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000001740), &(0x7f0000001780), 0x2, 0x3) (async)
io_setup(0x5, &(0x7f00000017c0)=<r6=>0x0) (async)
r7 = eventfd(0x7) (async)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000018c0)='/sys/kernel/uevent_helper', 0x22080, 0x90)
io_submit(r6, 0x3, &(0x7f0000001a40)=[&(0x7f0000001840)={0x0, 0x0, 0x0, 0x1, 0xe92, 0xffffffffffffffff, &(0x7f0000001800)="0fc11bbf49524ebd93ac1af72926eaee1c9ee2a8aa999d9e01e3601a10065209565171ee6a80df76f0da5db2528bae809dcf443478", 0x35, 0xffffffffffffff09, 0x0, 0x2, r7}, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x3, 0x1, r5, &(0x7f0000001880)="46cdc80843eb277057695add332249995771ebd8829d76224cfa8442c58926751d6ed2", 0x23, 0x1, 0x0, 0x2, r8}, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x4, 0x5, r2, &(0x7f0000001940)="8fc08d73131b18babfbc2b637e1421bfc5e7bbb4d6b24b51ba07a36a9de616978d5b74fc4c4cf128a9872feaecd4dfe3ef6391394399f67c87f363f2596ca04b81ecadfaf8056e2840263ab5f4bacf8fa89324f58bd63cf04338b0c2d05d98fbd4ca35efad42de2c24e1ce025ebc6eeb18988526f0e0968cff1bf85661119074df453f0cb5bd6edf8d7d678209d350c24839b612f409986de3606d41251502295540164685d1", 0xa6, 0x4}]) (async)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001a80), 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000001ac0)={0xfffffffd, 0x5, 0x9c, 0x800, 0x9})
ioctl$EXT4_IOC_SWAP_BOOT(r9, 0x6611) (async)
ioctl$FS_IOC_SETFSLABEL(r9, 0x41009432, &(0x7f0000001b00)="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") (async)
r10 = syz_open_dev$mouse(&(0x7f0000001c00), 0x865c, 0x400) (async)
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0)
link(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)='./file0\x00') (async)
io_setup(0x5742, &(0x7f0000001cc0)=<r11=>0x0)
io_submit(r11, 0x3, &(0x7f0000001ec0)=[&(0x7f0000001d80)={0x0, 0x0, 0x0, 0x3, 0xc, r10, &(0x7f0000001d00)="7d9810d0581f4ed1fff82bd51cb13873beabc433c2038996c1b38f55740c9246ff187fd707a02bd17104f50af854267d4cd182da9f16bd593df865e74c49ec71542bd12ac635d0ab26b8339f52595d71faec0575035de535eda3784b0cb1bdb6466a25293cd1676c65cd1a33fbeb1bbbef377cc74859d592a0", 0x79, 0x1, 0x0, 0x6, r10}, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x8, 0x6, r7, &(0x7f0000001dc0)="cf7467ac1bdadfbd5bd4f8e1", 0xc, 0x7}, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x6, 0x5, r8, &(0x7f0000001e40)="7a0f29c4845dbd67f7be186f75befb1dceaaf9c3d0c088adbb3f999c8b545971d84c0b", 0x23, 0xfffffffffffff96b, 0x0, 0x2, r10}])
setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f0000001f00), 0x4)
r12 = fsmount(r8, 0x0, 0xc)
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000001f40)={0x80000000, 0xf000, 0x2, r12, 0x8}) (async)
timer_create(0x5, &(0x7f0000001f80)={0x0, 0x19, 0x1, @tid=r1}, &(0x7f0000001fc0))
executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r0, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x4)
r2 = syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, 0x0)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e1b4e0004fcff", 0x58}], 0x1)
executing program 4:
unshare(0x62040200)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68)
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xbf, 0x172f, 0x501, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x80, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x9, 0xbc, 0x1, {0x22, 0x375}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x76, 0x8, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x68, 0x9, 0x5, 0x6}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x3, 0x9, 0x1, 0x8, 0x1f}, 0xc7, &(0x7f0000000180)={0x5, 0xf, 0xc7, 0x3, [@generic={0xb4, 0x10, 0x4, "e73d732e37560310aa7ed6d8727d793652510679d769715c41f21f0e590fbb153f89f2a9a1eecc2462ed2b944a9b24c3dcee88e53403e74664700ec83713deb346c443e684006fbab2b8ad416040421e86be14d284de83723d542a23f93750d2b039ac71799e487db8a40aa87b4f7e98743894b1e1a2cf3faa7b92f551d38d88ca5484d84244bbdf88128a87fd586255bd798b6eb99b1afebca6780a0e94ab72e38a7ad69a360dd8fcc1f8eb19a6508794"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x12, 0xb, 0x9, 0x51, 0x50}, @ptm_cap={0x3}]}, 0x6, [{0x10, &(0x7f0000000280)=@string={0x10, 0x3, "5b382801ab65b9d9b03ef49d1a10"}}, {0x22, &(0x7f00000002c0)=@string={0x22, 0x3, "607bd15380e4d216fd65d2345d5679508ca88fbd2d200983d48e5d9f9a97b1db"}}, {0x6e, &(0x7f0000000300)=@string={0x6e, 0x3, "3996c991f70b1b6a93b94453810f039083606fca52432b92d583df11d70e06346a39ca172623a573662d68a8df4d4978b31ae88525a8aacb65ea8519185371990f13340bbdbf829c803251cd1dc7347d7d23a73b976ba7e2ab966ad647e584c17428bfa3aab43cebd306e600"}}, {0x5d, &(0x7f0000000380)=@string={0x5d, 0x3, "b01683f1ac84479e587a1f0b088fb498d6950b07f93a399ff0be8d16308dfc0e3c0ec0bd0557ba07a38ab292a5f4f6200f69d29397aec62dfe880b9b50250fda7ef5e9d6e597ae698717c3e47fa9ff4f501fdcde04f07d77980fbb"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x44f}}]})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4)
recvmmsg(r5, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x1b20cfe5}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/197, 0xc5}, {&(0x7f0000000080)=""/45, 0x2d}, {&(0x7f00000015c0)=""/77, 0x4d}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000001640)=""/94, 0x5e}], 0x5}, 0x2}], 0x4, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
write(r4, &(0x7f0000000380)="5e799f8fcc4bc4f6", 0x8)
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"])
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000080)={0x1000, 0x14000, 0x8})
executing program 1:
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000b0000040"])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044094)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x29d})
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_GET_MSRS(r6, 0xc008ae88, &(0x7f0000000040))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r7=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', <r8=>r5, 0x2f, 0xa, 0x1, 0x80, 0x1, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x8000, 0x4c1, 0x80000001}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6gre0\x00', <r9=>r7, 0x2f, 0x7, 0x6, 0x3, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x41, 0x8, 0x7fffffff, 0x90}})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)={0x198, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x4}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4880}, 0x4000014)
r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
personality(0x5400004)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r10, 0x99b33000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r11 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x2, 0x0, 0x6109, 0xc2}, 0x20)
close(r11)
socket$netlink(0x10, 0x3, 0xa)
r12 = syz_usb_connect$uac1(0x5, 0x87, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x80, 0x70, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x81}, [@mixer_unit={0x5, 0x24, 0x4, 0x1, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x0, 0x2, 0x10, 0xc7, '@'}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x8, 0x2, 0xc8, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0xd, 0x7f, {0x7, 0x25, 0x1, 0x1, 0x3, 0x606b}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0x1, 0xa, {0x7, 0x25, 0x1, 0x2, 0x7, 0x100}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x1, 0x4, 0x9, 0x8, 0xa}, 0x52, &(0x7f00000002c0)={0x5, 0xf, 0x52, 0x5, [@wireless={0xb, 0x10, 0x1, 0x0, 0x8, 0x6, 0x8, 0x9, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "90ce1b870151f343cf9fbb32e6f4dcad"}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x7fffffc, 0x1ef00, 0x7f, [0xc0, 0x3f30, 0x3f00, 0xffc0, 0xc0]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x8, 0x5c, 0x7, 0xd}]}, 0x4, [{0xee, &(0x7f0000000440)=@string={0xee, 0x3, "bc2b202e58c0d10fac7cb05d89565f4147d715347596fb1dda82a48ffc6a317a8af4ed050be83ffc615d506e0a7856cfff1e55c7de2c287b1fb12cbf39ed3452d8e1a48b46b8cd0a5b202e99d3a6ca4dd52c03b0df4fc544e0c8ba1071b0a52e8b3aa9bf889f05d350b46c7ba049baa5955c60d6fe8a983f37bc586bb982ee058fd85da1d251c28f3b753c1a9c3eaca321e683e442d061819908c9616a7172f984d3ba3b0c01cb9f8e576546b61259428ad136ad8e6b4684b02453a6bf09847edb4ae4b72eb847df69094290491dd1bb670d0b179cb1e32a423c7aa615dc3da9f80de487830f34821a9f7453"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1401}}]})
syz_usb_control_io$uac1(r12, &(0x7f00000006c0)={0x14, &(0x7f00000005c0)={0x40, 0x31, 0xc2, {0xc2, 0xf, "3d897edbe1ba91ec8ed3330613aed89c01b1a18718cc5e21992470d9bd44f9634d06c8f988d285a6cef52844ac8bf5a9b4e6e266daf04516dd40b1cc93cb8b5d5e98492048fb6f37e7646dbe1188c9d09108c242682774676dd3c20839f6534a6292619a88711b173aa532f4cafd416cab22d3bcbca70e0aef8e4f7e8610fe6ca5d94adf96ce287363a30a060a8c319eb92b50b70b200a919af1623d124502cd4d0fd3f75769825066c64ad928602154fa64ba9151d586ca25f69ba1fcbb8f99"}}, &(0x7f0000000240)={0x0, 0x3, 0x10, @string={0x10, 0x3, "859143e23c60a15a2340f10b795e"}}}, &(0x7f0000000940)={0x44, &(0x7f00000009c0)=ANY=[@ANYBLOB="000f5100000054c07174ea485efa66793b408da031bdf141e6c327a02146ee378f849ecd71ef5d626b8d144ac8c3aefb3bea5c2b21c6883c995b181ce31d38115acb5f8cb3edde616bb447a4e7f3a2d24424a40febfd453eaa44c624175943784c577b6844b39deef89d2196564883efd4c244eac439df6f45301c4a7a25c45f1ed9fb3ff3e3679e6a2b2519447420b547cb4da49be0a8c7d2"], &(0x7f0000000780)={0x0, 0xa, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0xa2}, &(0x7f0000000800)={0x20, 0x81, 0x3, "7a92d4"}, &(0x7f0000000840)={0x20, 0x82, 0x1, '\b'}, &(0x7f0000000880)={0x20, 0x83, 0x1, "fa"}, &(0x7f00000008c0)={0x20, 0x84, 0x4, "f69df858"}, &(0x7f0000000900)={0x20, 0x85, 0x3, "b49627"}})
mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x810000, &(0x7f0000000340)={[{}], [{@fowner_gt}]})
r13 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r13, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10)
syz_clone(0x8000800, 0x0, 0x0, 0x0, 0x0, 0x0)
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r3, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
umount2(&(0x7f00000001c0)='./file0/file0/file0\x00', 0x2)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0)
close(r5)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x169900, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff7)
ioctl$TUNGETVNETLE(r5, 0x40047440, 0x0)
executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006240), 0x42, 0x0) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3)
socket$netlink(0x10, 0x3, 0x4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008800}, 0x2000)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) (async)
syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_fuse_handle_req(r1, &(0x7f000000a380)="95e13d85c59f17c273a48804f4fa5621ebc377f7c9005456ffb98e034b0f6648b9ac38a99dab91278ba6d92b621822519710402e3b63e3504e8fb37039fa20bdd28aba7c2633848a85877aa436f24e4c6f9946c06027d888c0541ec0ae96ad307679cbc1d31423d74b2e61cbc9fa203a96a87f6f2f005989bd8d4bd7dac344fc5659d6127a199fc3e9949f109df9e00e2edb2096f145aa31f4b3ef4ffc1d1a07b7525e147156841e8b2cbd7f10e77dc346a043ac2f6cfce4c81bc6ddbe61ce9774dd2a50765ba2acb202542e8b2b0c415ca32a924d67d5363deb4a7546b293eda15d207eeef028bcad386a5a466ef4cf67cb3dd139cfd5d8e3011f8fcb7c5704c0f45e42b980cd1709cc941fa38cc8307220553eb0d242a00049d98fdfa92e178cc93698516804af484a0ec301daaaa8a9c43119a289449f51412aed17d02597d419bb4ce6641188e91992455bf52924b1a22809ef04dc4a6d0ee35adf4fad015e308e4322d6fabfa58ff2d683079c316d9223bebaf5ed7d2915e42d6eed3ce6a5f1a995362ede83649bd70ca21b73a40d9ea43fb81ada91b53b7c1f4281d933886d31f79236db7bceddc7d1d970b052fa2a632d49f3564379b55efe7366d5a1caaa64049150445d49661ac680954d5f5040ef0553be94c137d83c834e4442855a4cbb1531a3b14ca56a629d2c73da3b7da71333a6dd106a026d64159e68bc776f81f32705a2ff4d9112d5ba5f4b7c85995503955ac4fa5f69ccbebcb37c097240bcc9e3313d0caa25fa5762ed31b939ba5f72e73488ab2be4b30f7456a78fa56d02d954e086871044f624527f2174f57229ca4ab7ea8f0516f104be95df1dbf06ef28eea907c650eff613d755367098c4d6275844772df97833923de6ea5055dea53cc06a4c1d782403414645903ed3f6e61fe5f8197f2c12180b1006c2d9452ec71bca723ca55f192fdfb21191cd49cccf2d911e6abe9cd0ed9e756886a026cbc5eb36426dcba171db8027f993a16c4a49199405eada02ea953df58ac591a4b92653691ff3827d56d7e8d97d2e5371617be2ac5adcd5a5ff94ba5fbb477b918edbbb85892bfb9b96c0ed74fc1b2c0318b22e22930186c76957f0931c2ee3f063c4a579f0fd70ac62bdfa4ae8c0be66156b4f164a06744a95706f9e15811f5b97dbde60d85c4458634e0e56e24b76f770aad31323b65e6a116485efced72635e9d06b84cb850199d2aa11a84a5d0f90df5c2ed8c1eba7c79ac886f280844dfd61fa6f79c04826764386f794189092f91a0fbede4aaeeb6eb94ff158176b2813edb13305490aa16846a45d67062fe78ae857d10ace4f87136efc8abf02be922c7a5b1250681829642bc2c3227d04b80db9ee83a62c2febf5b75608ee14357a475df3df50c2e36d3f9dc2a1df10fd699f435d660c84f98537b9d2f62b5b5761dbdf927275e33657a383c76693cf6b9975bcf1090579df6e7550f4be60dbd1bdf6ad7cb7bf73d85fd02d841e70296a8d333152c9f93885bfa8859e41488f2b4519b3d08080bafb5319b5f80d9c11efbd9c03ab0e853de8c647c6c863acbf9fc2e67864d2d9b52203f07de71fe53a4a5cc08bed66c548c5e46a659067c52554d0504da83f5f16ce95cdc2f22a74233abd085dd3e2a3016c740a2953fa4e3ba73600fbf3639f64d1bf3065dea1707a8c609a3cb8fceaf0d80fb85a4b63f34624eeed7a10457b1295a0760a82d3dff573575703a2b357c89611a298bd00a90ccd5996b3f6afeef249a810f8f89c4e7f5309702d7cd8d769410f8057a9d3a7a1e94397665e27d94929599e66988508bd28a02eaa0d2490dfa2d22890223cce1a7092653ba8284c734481e050d01cb7f47d3e0740c710bdaa4eda49656a79a835ba0e475a85bce8edbb0215806d78be77e29ca794967ddb5c8fa152ae6f58c9e38d804b77be3098b039845d07b33d5fc8eba2da99a68765da3ce96c486d7b3c131d3bbf84306757c3b972472860da5085e4bbe6bb9cbf8a668a182b3d31903ff5439554e33b34ba0046c5d85937a9dd99b29ea6abcf078655c33bd194ebcd7047a1c14a6ba83cc870f172e1636bf3ad5155b5ce4aa8e80767ba5d3a3f907454644370b851731b749fee0c55288f51183a9fc673a672d4f99ddeb8625fe951b4b9a766f722608222e20baa5525b511d9d788742cef3869f628d03cc89bf15887c750551a89bd5d8da90906fdeb5445b9d2d27d4b54bf4e547c5e39383658bf30ed6ec49bfb1f17d3a0188d780c074a8aa69e5a52a4c09140e172f2bce77799d315d8bd7b3a060b6111b433251a140327347d033c3d81c4a9771faed451c514193185e250575065fa3d3a0d16f066dda4a6a0506c114d2aa0dc8262f7e669a9697bcbfd6eb63b1c7a86b9a4cd244bcda22fb2df9800f2c071a2c78d8ba0bce4697c5c98170a7da8bda859b3b8b8b4d007bba3614c37d16d858e555cd872ca30190221a602768907ffd5fd871f2c6a04988e214bce8c34171de013f936a923de8dc0709fc267091139ca5c0e1e40015acc401a42a2b01e4b72fbf1c305a088a857fec676ee3c34b37b8bc947464a6ed04dfa1fa758bd3d142523bbab9ebbebfd51872c69314103ad419e246f3230d3a63f84f7dff118d4f78115b099e522dfaeeb74ea36c1b0cb99db6a3b1159556c7f56fcb60768895e97eb03e3dcc34756e31d98c7e23ee465cd38eef9fffea56e7d08966f8d2317670d1049188372816a0f135fb5e7abf1cd36175bde97e2655f28204c1772920434177809270c523d7c14b12faffd5757308a71aa2724943fde1bac541f3731bd92e383f992c6fb2534f0e325f663e67d9f29313e009c84384c1ab6fdbd07619e36136e89ee28c551bda9f9db24762f09c0ee1763a5eb536e5301773f5f174b916e9066fd052ea3090e71a16d0264ae4aece6bb646dd226719436faadb394c096253c1b35e80387d7bfc334906ad7f9cbd8b1b4143010d42e0d0438f14da00fa316fc4a1f5687ce1c828760e6eaef01519bf6d98cbf05be9b33b88674e81625f919c1c2aca603ac4aadf347a652d09025e6ec40f509e1c7178c0fb5ef161337fd33b9499727313656649e6b775a0b88422f3aae28d7908f7acbf4b6b1b9078c6c830d178a4d9a7f59ff323ef90993ac990f95282d3c4c266740a4492e32ec3ad91cda029058fb765a53f74d32376f8e82238c21bd06a8b76203d8968476627434a83f05b3a1f883eee2b69681fb2cbe9dbab099272dbb4d101e5fd9acbbbc7721ca3291def0318c0f52bc7dd4d77622c83a2b39bfb0bee758d9162c45cf4f9c80b8727410c04544f1a2ae391b53b50b4a9e241118bd0830f1db575256dc38642de2f591c70e66baf80d9ac4a991100719b450c7a72e74c8cf764ec87a298d9f209d0ef1cb4fc5a647448ab74cebd7535aad944d8bf3ed4d1b1bfbee664eab8ece3a0c0ffba0a89db315de96e25947543aab74586e0659620afda32263564b245c3ab04f5ec1bcb26f28b668a0e87ab757065e78529ca6efecd9562ff400721c0b30fb990c0900947c4a5d3c101171d1a0a654c8fb9057a0e4d85c8ebcbf5a87f69033d639417929217216384b6c2154426ac09ae34b835ee2160302adf38d30f2b433bac13380f9c925d08f88aa1314a7ab3bddb80285706a2bff119d0b0934b4abbd25cb86ace41b48bc3b22a8b6cc3ba9eab175ad457e910c58acf722b454425e0caeff418259ee9bd53376cd0b42251bfa5837b361d40df984da24c1dca276a91b4dcdd5d27ed74117bccadfd7d88c0758725f9e76363b7e3e376ae0ac6e7897c8ca368f7ac40cdf508c583e4777667fee20400c75d7abb84ecfe48268ea6b37f594aff6d475e4915d8a0d52589dbf53143c0f648057e527af2b51b60e74d019c80a1e5649f19de020fd81c5919703f771f0a3eed118218c004d5224486e055af0ebf02cc7ae058244d3e8c8489db6303e5cadc9d1f3f51528c8f253f88dd850824ae77ecbdd5e1555fd0c41a0274088dd60f70e59e7396e6efec275e5ec3082adcc35b378e0c4627831480c998c5841cc7b2b743d0ee7f4df41b1851dea747aae9e526e30336148a2daa723e1520ff3f834dcbb8e92784e7481ef33442d0c57add849683f7027ca7758b29ae4a4dca2e3dbfd8bbd2a57ed6d5d8c197b5791fe7c6933a4e367d8e9b8598b20ecf60c9da8e1873ec06ca06431a66891a2745a5c11b62ea7c76de4457cf860f589819ebbfe9dc324bfa4ec335ad8b49af1793acd44df8cd40bc89c70dffb1728096822656654fe0ca3650c98ce864b2c535fd20f076d914c8b852dff23e2a69a78831a79b25ff14a8ed1aba8a5a72a34eca5d866809d1e697b401cac7ec8b16d0a4f9337c8d5e78e6eb7b6b54449fe7e5eab583c21ea6af8a2d63297aa7f1033478593844ba85d8d545cb820f035f1a2938f1c8b1706bca59e5e80fe2c2badd3da6054341592ead6cd124a644b50cd3554d40742adb9675cb457b748ddfd2b0247ecd8483465dbcfd9aa9c26db1464bbcf98509ac8af61aa70d8721428900642e6b7007baff216782374733196af7c40742e54194ca8220a97ae077598a77474d4c89054b54969907bd4676920a1b93d97002bba09cc7395a296e604f025b78b737d809340a47d030b4646daa84adcc3968200eb309ce479d1b0445c2427c593a4badfc030477a0623373d7ccf08640f84e4bb100d6156c6c073630933b3f982d2acf8eca38f019ec16168cbd7cf7ebfe1db695c41e72b307f0c97d6b2c60e901662a2ca2cc4d83c10c46332e5fda358a24cdf84703cd5243b59dffdf4d9fd3a4049c05be8c4cf8d989374a8c61f7ea560b3b0d77ffd10b5b32c279f6158926d5c955ce4a3a5c8c144eec526479f7210ef776f86146a1954af9d0d14582320fe4827da1d15f3239eb958cd5156da16242c5b32af19026146ac84bd160b3dd35d9283214c4d2864b09d0ffc7bf787dab9a1e0203e2dfeb1a900a29fdec2d23c9de174a30e95065730bffa8353617c3e33e3047cfdfc7448606ae430ff34336ac8b9a320a8ccb7daa4e5711575038cb96808fe16f0765fee4273087cba7430fdee9023a0baadd086156baca7bde2e74debfb0d7a3dcc30640c675dd147c7eff888280341d0b040f3cf968ca4665dfef362efe871a937bd1064c13dc387148c971cdbbcc692e4628664f6e70285a41e0eeadf18b040f8062e4aceb53ff371788c89f5f4ea79ac678c7f6d69e16ce860d7f019b5d17ecf0d9d6a98768570a657d3b99683fcba2f72f76eb168befe4a49c6b48d64b3f223d299c2fd3a56fa7c03adf0848190474103d82e58f6e80966d973273299c6cf06b58519085457da78238a22a57a2954a308ce8b539dc97af2268d0b36320f6bbdf6b1c809320face467be25eae47f2cf012ed6bd5de15c7aeb073dff70ebd6c51eec27253ede7ae1d77018d309952cb39e0ef6a17db729c5b2d6d95eebbdda986216628ab51b097e29a73c0697ca0bae14a337053ad387991a3b28e0b28ee716c94b9c580dae8c88d2391971ccfa9a2f1b2c4349bfeba938f789b1c0197cdd3f43a2947d759f136389ea1e196d80553d0faa5f0ab368017c2f0376d645e512c60d7980c8b04409332f7f0ee52bb7ffd43a749ae2efba86a6e49af760675076df6049633c89065b3d7488307fd4ec09bb6f360325671e31d19fba80ea33458104452b98b5a7f964a61f847d0bc8e7e6a75ce77c907cd7b9f7aeb337a9915013dbfbd5d7d2860b2219e1324d5331050255fe1956a20d7846586fa8ceb801c93992e515899f093f42004820e0663185b0b94b69f5f814f69df36f731a36e50d77fcaeb89f00db6b9346f97cb4f0a91c973b0dd5126232ea5121321cd56c4e57a9c2f2aab9e5484ad6cacfc6c6c322bd1bb2947399f379550eb55468b9a9532c02002dff4383d18b82ec38d662b3fa1517aa47a4f95f47e17d31e868a9dee1015d18335070c4d7d7d4806bb785f71a52f026c54a62e98306a9d912659e0d6c465b7bb540c0becf282bcf706668b32cc08ebcf7d688c1acb160ad2e632631fae8fb9a2e53d2ee795645495a5849e038eae0477d0d226f43bec7eaa39e960858e0d4d7813390f408d3e21f64da5c9fd96cf30b0b72b0ee5e75efc6b64c7b23ae60373f7f8a392a477d1016834eb106d1064d59d0680b190d89c5bf978a940a029e861c019cfa7b3d92ae202c01ad61d97a57b889876dd8dd630ac5bfca3018119fc876a61a65b5932db8a7ad246b83b44126aaf1c96817d694c5b1d20db637aef9722a9ebb98c8d1e436d6357d3bb33e8fefa00f1490b13afb5145b302355e71d4ad79b0ba3fae6a416f96e9146f31a8fcbf71cb7a55bba86f60febb949838760179c962619260880f8f8c023bd76af806756697f89a809a685123592226722ffa0fc25f9c540e60c014ea873c8c93b24025fb447d5e96468ad2744cd13e9fd54ba0edc0fdc5d2a34cf1e769b273b1b048c51f5c1c1680be9f8ad6ba6c3ab3f0504c63546eaf49f4b9b3645ef6bc500fb82b966572af9048794ebfc11428f45c620a9275691db312623fe53414866cf1e935d2f37e3d7752f78a4cd353bb3ec1ed56438e6159f3d3ff8cec07fd2d612d23e5b68ffcbc632dd97628406bec7d5cfde40bc07b58614718a50dd2b273e7cd6fa2bd9494a3bdcf6fe796594fa410c0a68c8e58ae257c2cce424ac277f2de6b190fbb5ed31c6298cb7291b3be80bd9952cfa21c755fae067f2a30b58257cae591b40e3d0c651bc586c4e3e4cbd53a86fa069355eb8c6c1c2d4489f9bbe6109747a4577748eb9bffde01fd43211b7da51f68595bb532366e2b0b3e2bc2c858f2c562663823d758e95d26145d07bfe0080bb47a502cdad5a8da5efb3d131f67848f1d4449ed305bfb5556d1d78528b7490b4249fa485118f68db2a9180af451df3ca987af97c86171da4ce373ca1cef4dd6b0b7069472464b3506ef273ff394abb4f851c64f4fb879c3c633387320dbc164536540c92703d03df00966f162bd839a47b473cb9465eb0cd84c9876cc7686437bb45a8f0fe1406d8003a7f6b17d8b185f1605c67702df2783f214f290147e338fa5c5b488bf9041631fc62f42350eb00db17b748d2642cc30fc4e7bba06b467bc52b9d5d5370ffc6cfa51108f13ba669a15b7f6acb7577d73078c3f1a57f544b16501b6f755ed5f74eb01b262b46a548123d3b170ea95df19c6c2c40b4e5a6c8ed4d7ca946f5878d938503462a7e67d625c72eabd753e09fdb81d63954f6184516cd09deba11c004fee1e5418eb076f0696b748eea7a3c9020f7a46aad99d701a6a75757a7bae63b1b695e78bdd2802e61cd31d1520d5d61bc15b61e3f3f4f8284cb0658934722d381529f4d33093ecfac8d7e0596f7d2efdb12d8fe5bf1f8e3cbd1d818ea6c82af20c511ee3ce5fcc267f22980652d8daba63676335736ad16bed776fba5af25c039bff4253cd3853fa1fa28217b6891669b37ba29c9f22e2cbce3cd3e5c44ee7da03beb2638766672550e76d939496e792b639f5314fba46f4f2b3dd62c975a9c8357f8f0d8560f4f000382e2980115ff1289982700c172a06ad99235f7759b00fdf492a8ee0d01e6acbd13ce659f62d5ccdf4256ef9a1fd00c847ff56c9a28293f77403843c8715dbd8b5bc29eb7f1e0d831f29d1bdfa6fb8524bf98f5cc2af072dc2429f9d9effd6429e5cce53d8d4881ebe45d783d8ec8d4639bdf2cdfb34c148e47ac97883023c6229f0c17499c90f0f9a52ac1c3be626f51139095fed3fc805cc21e1c4fbc905dc54d5f2f071150e65d66e0e31a510832d03a4de5197efc9d1936af7e1386323223cb728342ec88f4c0f102e25219bc93ad8c985f7f4892fd0b4de5010396a973f99c139c0d11734628a8b28e9dae21b7fefe74ee40226eb4aaceb72cc68195cfac92ad041f1099bed281f937bc8f09ab5c4c0ddb9d1846fb747ebc77ecc14eb82222659a2438abc5e4af32143489c7124a1a663e6565317bdee734929604c02b8cee4b6be47158a20268e5b7971487aed8fbd02073af4090f4581ee3c128b939c13ccd4153bec65d9f1dd90f9fa2dd4ae1d22cc26ccb20cd84320edbe014b490020e72320c7f8eceebc79ba3afcd47f0d0015a1dd84d9b71d63b33da37b327cee3e0fd0ad28ef3f424c66fb8f3516338b41cf51916432cb945d523b36448b3d564a28c5b427a3a11533876eecd950bfe397b5fb9a5156edb930e250b2122c54912b32290316e24a4d50aa9d7fae6627b4c1186801fbd32385816e5988a5f1514e17e64a27bebc8a42add26eed9dc3f6c46a8385d2ae04959b2f8bdccbdfb3003d47ec7766d04b37db69e47afa6187d3185607ea989a1d9e6b00ae8a87aa6dfd5882354b0acde90951a31fb2f360553ec69631be2c580f4b09af3403cc6e6158b30ba94d23573c2c9291b58df56629292cbf73443dd54bbbaef470ce710854e9a5eaf37cb244297ff10da21a9fbb1213810f87b0c5a36bf050f230a64140d8ad34c939f120fb826cc647456138133394c8e7bd6c935c201d0194ec048a7f1b68c1e810232a65fc4189ea24e61412c1c167143ce6c0e8f8fc85800cffe1ff05c2e9e4593a95535066880bdd0e8ca8491175da24821642eee8166f426f8938b4327c9ab418d9170a38f9f38f9ffea9292e64e2f637d217789e1dada5b39740c0f6238b82b7a49b3d40a4bb5da0fe57a8fdd906ddd46beff01becb9b9f4a46508c77cd99fd8cbbfce8018f639985569b5eddd4fc1194d21a933b64d25dc1b1cbd5ff7f16683af35f3ec731932bfcccd09271d83e9632eb7c6f3648e69344a0a41ab5b43091587b8819a06a225c4171d79799b5c5ee9c3155bd75e6446db7adbcddae275b635f7db3d8c26ef4daa1799cbb62ce1db313c14f491a248357183b3a6cfa885cbd2988fc20a0eef25d5feb853c975e4a436efdc72c484aad7e2f76f5bd1f24e376dbeb9c5e7a90f4a47ecc66e12d2ff8636cf6f0a7dda3b398089cf15275f85aad1ab058221348d5ac194af6c4f844bec558d0be2ae965c3eb5d489d68f688da8aa6f75b89dc1950c929cf7f0b48de9871d18fb88e671970c1fc32abc3a190b2fd0fb5e3a3d7c975729a30a8cbd88953191c49ed35411874fc24e56caf405b399f8d809abfbe198ac0379ef1381ba7b773921a3db8f1bfef60e9f8fcd466f0a0b403369efa25d58f95395d1ed5a01533da1afa556fc9ab53cbd7e850ad20bd0a759a7bc2ebd8a7e274a4bc00a84611423e28e0726373b5af31a0888e27ec1d62efe986831973367d62ae7acecc38f1bd9f9a7d43b610e8fad96ee53a1f9a47961667b095c63c236c567ae0972ece18a0efd111aba26d9d9b59b88b56392dc0ce0a73241dbd0b51fac6193cd63de1f0ce24e2ddb1293c62081e540a0083e27946f16cb795d6c88cb4252d8a64b4d93a574698368624e1dde94fe8192cadaa8e7241c70795200f25e9598b80c3c32144d9d4623da3640accef6e062574d09484cae1aa8ced7dd57a1274e7b77753fe6fbfb6c004097c9a9875c43544ad5370d3d331bd46ef4803a79aff456387da64d3cde67302385dc5c075d9db89e995a23912c09517e357ff2d44d82272462d821dcf9f48b50ffd4faa04a425709200275d797d32871f399507e1abfe711a00002ab395da66f5ba6159cac103539483816983151b2396e42132443b4a467dd3d55f353347bd6d0aad8190230336bd46552a7b006d84ea6d1062773dd25546b9084a74e2ccc36e37e28fa9120253a9d0c63daef7acdefe52172ebf6709d94797e22cbdb4ee33e4dd21750be39b234884d9bdb03332359400b4d681671b4ffa59dda2f2de38b7ae73c3c3bdf2f67cd238bb7cf1f484ba60b7acdf7809b8fde96d14524923b168b6d7e2986570bc841f6edcd8fa65ad1c8de696ea629e93b54ff6320944a4c175d5566173689631f127296b16d1dc9c57a610263b330f0a8355c11ef6522f09834d246f742969be8f228788bbbc5c1fe374cd16d96b3c4216a8ada8ded10c986f4011f98467caa4fa4581f0a0dfb6cb79601b8ff1ee031f22283499b5449d107093608f75fe1b239af39d90dfd5d0af09a846b18ff534e004de04579868a4e0dfe85d23bf9418c5617d32d66b3a5e684fdde16e5ff1578cd120e1c283dc4975f0950e3a11082e4c43f9e1df7842256583fa21008dcc85c33351169c79ad8245ddd7029d4f303af371882719acad65035575bac4be8ad72eccbab42989a0d4d235e39c19b4fecc13b880cce65a43b6db473f7f6396be93fb2139f9a9331e929b34406fc47f3a4bb7bf62fa84a44a0bab5796e47b4bcdf417f4b4486d44ea341a40bbb0dc16a93a357e54e946e9d7fdbcf700229e82e8102035e221f647717c61295f0e668c9da080f06a19807b108e5287b743b89484ad2e2bd5a955be8753b904d725db04cac98d08b8cb6eac75dab5f4c7928dd44d208e6ac876ba5f7e1d85be06f7f0b6331aa472050661d1159a2c00197d64046b9289e0617d5d8a0014c45e093e3a3821f5aa2155a24b4599f86c0cd4b7417f4c5374ca17ce4115ac8ae2d38ea7a291b1d0bb8179a74018791a062f4ae864158c028f3a2b91728d8e7929718d57496dd08c2ad79c81f1d7814db3d087facbd91c08a55b5063f9a40f32eabf2460f56e7959b644a612b75a6751c83035f54645e7559ab218409d778383c359ca59a7393dc370ea2d70c45f396fee7af76790541f62371feb683c900d896672cee2bb04f3a49540a4bef9f0ad1f98ef10f5f9c82a3155d0e69d22c51fd10427de18b7212bb59f555540c0279b23aa5f15fe610f14d54de3cad6c1c1db7f5d02183706b73d0bafb1f1503176bb9e00f98b1dd15bf276314d20aee533ddae0a6c111302ccce0f8dce61511d3c41cc8e24799930293c4018d356ee578fe2aa68006c642c3f9b70ee6767a7ae16e65b938b19403797c692d59a86d13fa9bc5afaee8d6da8f82e52630c6d02fcacecf7c90652fbb73bc55d5e4bb95e05ce20f73e49dfc20bd407684c9e3c30dc3bc974b6e4e025eec1f33d8d085a428b64dcac2ea032d3447680dac722da32ec4adc86d939148e1731106b8f2b9e56fa65340ba4d217101c8f21331ab8ebd2c38046e8d0a5f231797998eec5ce3a4df218834954d95ed4753313e2f0b8ca6b416cd1ca289a0c5964841542aa539dc385ab5bb5636510f1140b4a4a54a1cc10c098be97765d24b7b9efc75e4191d2e898a3f31cc75f08f2a96ffb73679b66a129f5c23035c1afcaa8877afd3b6278b70fa490fad0654a559efaf2ca48d09ec49acd69989e3093fa397a5f2adab6dd21072c336b199a830af66bb26b04dba0e8a25544e95a146cf271138bb732c589ca8dfcc1b056d3448c33d8316f7fb3ed04a39ec78d031201204158277b32636d7e4688c6ac48458c83b69f92afbf07b09b5b057ee2dc798897e8d1790f14f3b34cc07ac405f766915dfce8be3b432cad902e7bb2e8dc2ccce3ea3897c78e6b1be577d2b231a8f406e7a0f3d34f326be0", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x18, 0xffffffffffffffda, 0xe, {0xbd7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async)
close(r1) (async)
close_range(r0, 0xffffffffffffffff, 0x0)
executing program 4:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r0, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r3, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
umount2(&(0x7f00000001c0)='./file0/file0/file0\x00', 0x2)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0)
close(r5)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x169900, 0x0)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r6, &(0x7f0000000000)={0x27, 0x2, 0x2}, 0x6)
ioctl$TUNGETVNETLE(r5, 0x40047440, 0x0)
executing program 3:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x0) (async)
unshare(0x62040200) (async)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100000000) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
getsockopt(0xffffffffffffffff, 0x200, 0x2, 0x0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000006c0)=@req3={0xd, 0x9, 0x0, 0x4, 0x0, 0x4, 0x1}, 0x1c) (async)
r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, 0x0}) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$vga_arbiter(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="ec6f636b20"], 0xa)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) (async)
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) (async)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r5 = socket(0xa, 0x2400000001, 0x0)
getsockopt$inet6_buf(r5, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @private=0xa010100}, 0x10, 0x0}, 0x4044) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)={0xb8, 0x0, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x2, 0x3, 0x4d, 0x6]}, @CTA_NAT_SRC={0x28, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x42}}]}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x4, 0xffff, 0x1, 0x5, 0x401, 0x5]}, @CTA_FILTER={0x4c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x10}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x124}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x280}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x80}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x121}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x400}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x249}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x10}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0xc080}, 0x40)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r6, &(0x7f0000000000)={0x24, @short={0x2, 0x3}}, 0x14) (async)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="9c94"]) (async)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x8000000000, {0xffffffffffffff83, 0xfffffffc, 0x0, {0x0, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x3fc, 0x800, 0x1ff, 0x200000, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r5, &(0x7f0000000780)={0x40002000}) (async)
syz_fuse_handle_req(r7, &(0x7f0000000dc0)="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", 0x2000, &(0x7f0000003340)={&(0x7f00000000c0)={0x50, 0x0, 0xfffffffffffffff2, {0x7, 0x2b, 0x8000, 0x4, 0x5, 0x8, 0x8, 0x4, 0x0, 0x0, 0x8, 0x9}}, &(0x7f0000000180)={0x18, 0xfffffffffffffff5, 0x1ff}, &(0x7f00000001c0)={0x18, 0xffffffffffffffda, 0x0, {0xb}}, &(0x7f0000000200)={0x18, 0xffffffffffffffda, 0x40, {0x1}}, 0x0, &(0x7f00000003c0)={0x28, 0x0, 0xffffffff, {{0x8, 0x6}}}, &(0x7f0000000440)={0x60, 0x0, 0x40, {{0xfffffffffffffffa, 0x47, 0x59061c5a, 0x8001, 0x25ff, 0x7, 0x8, 0x2}}}, &(0x7f00000004c0)={0x18, 0x0, 0x7, {0x6}}, &(0x7f0000000700)=ANY=[@ANYRES32=r2, @ANYRESHEX=r2, @ANYBLOB="6451398793f2d1cf9df1b12092dac071b5b3f7ab390e1bb7bac3452ab36170466913392ce988e0f22d8bc38e1ce98c00408d", @ANYRES8=r0, @ANYRES8, @ANYRESHEX=r4], &(0x7f0000000540)={0x20, 0xffffffffffffffda, 0xa, {0x0, 0x9}}, &(0x7f00000007c0)={0x78, 0x2f, 0xf, {0x7ffe, 0x10001, 0x0, {0x4, 0x200, 0x3, 0x10000000000006, 0x8, 0x6, 0xffffffff, 0xe7, 0x6, 0x8000, 0x2008f3, 0x0, 0x0, 0x15, 0x8}}}, &(0x7f0000000900)={0x90, 0xffffffffffffffda, 0xac, {0x2, 0x2, 0xffffffffffffffff, 0x3, 0xfffffffc, 0x10, {0x0, 0x5230, 0xffffffffffffffff, 0x2, 0x80000000, 0x4, 0x3, 0x31a7, 0x3, 0x4000, 0x6, 0x0, 0x0, 0x6, 0x10}}}, 0x0, &(0x7f0000000680)={0x10, 0xfffffffffffffffe, 0x2}, 0x0, &(0x7f00000031c0)={0x20, 0x0, 0x20000000000, {0xe, 0x0, 0x3, 0x3}}, &(0x7f0000003200)={0x130, 0x0, 0x2, {0x11f, 0x3, 0x0, '\x00', {0x8, 0x8001, 0x3, 0xf, 0x0, 0x0, 0x2000, '\x00', 0x0, 0x101, 0x78bcd207, 0xa344, {0x8000000000000001, 0x7}, {0xea, 0x4}, {0x7fffffff, 0x3eb}, {0x2, 0x3}, 0x4, 0xf, 0x80, 0x76a9}}}})
executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e28880004fcff", 0x58}], 0x1)
executing program 4:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0xeff, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'p'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0xd6, 0x2, 0xe0000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x60}, 0x1, 0x7}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x92)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_on}, {@uuid_auto}]})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
syz_usb_connect$cdc_ecm(0x3, 0x121, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109020f010101000000090400001602020000052414"], 0x0)
lseek(r1, 0x10001, 0x0)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x58, 0x8, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0x40000)
executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4)
sendmmsg$inet(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000006c0)="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", 0x241}], 0x1}}], 0x1, 0x80)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r2, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
setreuid(0x0, 0x0)
syz_clone(0xf41a0400, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x7, 0x0, 0x0)
r4 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r3, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
umount2(&(0x7f00000001c0)='./file0/file0/file0\x00', 0x2)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0)
close(r5)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x169900, 0x0)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r6, &(0x7f0000000000)={0x27, 0x2, 0x2}, 0x6)
ioctl$TUNGETVNETLE(r5, 0x40047440, 0x0)
executing program 3:
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8)
setreuid(0xee00, r1) (async)
setreuid(0xee00, r1)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
getpeername(r2, &(0x7f0000000140)=@generic, &(0x7f00000001c0)=0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'ip6erspan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'ip6erspan0\x00', <r5=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'tunl0\x00', &(0x7f00000002c0)={'ip_vti0\x00', r0, 0x0, 0x10, 0x5, 0xfffff800, {{0x2a, 0x4, 0x3, 0x3d, 0xa8, 0x65, 0x0, 0xa0, 0x4, 0x0, @loopback, @remote, {[@timestamp_addr={0x44, 0x14, 0xa3, 0x1, 0xf, [{@rand_addr=0x64010100, 0x2}, {@empty, 0x7}]}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_addr={0x44, 0x1c, 0x9f, 0x1, 0x7, [{@multicast2, 0x10000}, {@multicast1, 0x4}, {@loopback, 0x5}]}, @ra={0x94, 0x4}, @rr={0x7, 0xf, 0x7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback]}, @noop, @ssrr={0x89, 0x27, 0x19, [@loopback, @broadcast, @broadcast, @multicast1, @local, @loopback, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x13, 0xe7, [@empty, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @timestamp={0x44, 0x10, 0x34, 0x0, 0x7, [0x5, 0x2, 0x7fffffff]}]}}}}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'tunl0\x00', &(0x7f00000002c0)={'ip_vti0\x00', <r6=>r0, 0x0, 0x10, 0x5, 0xfffff800, {{0x2a, 0x4, 0x3, 0x3d, 0xa8, 0x65, 0x0, 0xa0, 0x4, 0x0, @loopback, @remote, {[@timestamp_addr={0x44, 0x14, 0xa3, 0x1, 0xf, [{@rand_addr=0x64010100, 0x2}, {@empty, 0x7}]}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_addr={0x44, 0x1c, 0x9f, 0x1, 0x7, [{@multicast2, 0x10000}, {@multicast1, 0x4}, {@loopback, 0x5}]}, @ra={0x94, 0x4}, @rr={0x7, 0xf, 0x7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback]}, @noop, @ssrr={0x89, 0x27, 0x19, [@loopback, @broadcast, @broadcast, @multicast1, @local, @loopback, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x13, 0xe7, [@empty, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @timestamp={0x44, 0x10, 0x34, 0x0, 0x7, [0x5, 0x2, 0x7fffffff]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r7=>0x0})
getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000440)={@initdev}, &(0x7f0000000480)=0xc) (async)
getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000440)={@initdev, @rand_addr, <r8=>0x0}, &(0x7f0000000480)=0xc)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x138, r4, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x40}, 0x804) (async)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x138, r4, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x40}, 0x804)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async)
r9 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000780)={'ip6tnl0\x00', &(0x7f0000000700)={'syztnl2\x00', <r10=>r7, 0x0, 0xe1, 0x1, 0x9, 0x61, @local, @mcast1, 0x7, 0x7807, 0x0, 0x7f}})
getsockname$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, <r11=>0x0}, &(0x7f0000000800)=0x14)
sendmsg$TEAM_CMD_OPTIONS_GET(r9, &(0x7f0000000c80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000840)={0x3c4, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x4}}, {{0x8, 0x1, r6}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r6}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}]}}, {{0x8, 0x1, r0}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r6}, {0x1e0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1f2}}}]}}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000cc0)=0x8, 0x4)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000dc0)={&(0x7f0000000d00)=""/189, 0xbd}) (async)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000dc0)={&(0x7f0000000d00)=""/189, 0xbd})
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
getpeername$packet(r9, &(0x7f0000000e00)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000e40)=0x14)
setsockopt$inet6_IPV6_PKTINFO(r12, 0x29, 0x32, &(0x7f0000000e80)={@private0={0xfc, 0x0, '\x00', 0x1}, r13}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000f40)={'ip6tnl0\x00', &(0x7f0000000ec0)={'ip6tnl0\x00', <r14=>r7, 0x29, 0x5, 0x9b, 0x0, 0x29, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x32, 0x200}})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000fc0)) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000fc0)={'\x00', <r15=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000001000)={'team0\x00', <r16=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000001040)={'team0\x00', <r17=>0x0})
getsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000001080)={@local, <r18=>0x0}, &(0x7f00000010c0)=0x14)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r9, &(0x7f00000012c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001280)={&(0x7f0000001100)={0x158, r4, 0x1, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x4008884}, 0x1)
r19 = openat$cgroup_ro(r9, &(0x7f0000001300)='memory.numa_stat\x00', 0x0, 0x0)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r9, 0x80047213, &(0x7f0000001340))
read$FUSE(r19, &(0x7f0000001380)={0x2020}, 0x2020)
setsockopt$inet_mreqn(r19, 0x0, 0x24, &(0x7f00000033c0)={@local, @broadcast, r14}, 0xc)
executing program 3:
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000100)) (async)
setxattr$incfs_size(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=0xffffffffdfffff02, 0x8, 0x1) (async)
ioprio_set$pid(0x1, 0x0, 0x0) (async)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
sendfile(r0, r0, 0x0, 0x7ffff000) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
executing program 3:
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000280)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]})
r1 = getpid()
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$inet(r2, 0x0, 0x4000014)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, 0x0, 0x0)
r3 = syz_pidfd_open(r1, 0x0)
futex(0x0, 0xa, 0x1, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
mount$incfs(0x0, 0x0, 0x0, 0x1004000, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)={0x2, 0x100}, 0x18)
chdir(&(0x7f0000000140)='./bus\x00')
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x400, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
mount$fuseblk(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x200c40f, &(0x7f00000003c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x1000}})
mount$fuseblk(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x200840c, 0x0)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x24020000)
umount2(&(0x7f0000000000)='./file0/file0\x00', 0xf)
umount2(&(0x7f0000000040)='.\x00', 0x2)
setns(r3, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20)
syz_open_procfs(r1, 0x0)
ioprio_set$pid(0x1, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, <r8=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x24, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r8}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}]}, 0x24}], 0x1}, 0x0)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x7ffff000)
executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x400000)
ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f00000005c0)={{0x1, 0x2, 0x3, 0x3, 0x4, 0x2}, 0x171, [0x1, 0x40, 0x8001, 0x5, 0xb0, 0x0, 0x6f72, 0x6, 0xffff, 0x0, 0x0, 0x7, 0x1, 0x40, 0x5, 0x7fffffff, 0x8e, 0x3, 0x8000, 0x8, 0x3, 0x5, 0x85, 0x65, 0x0, 0xfff, 0x367, 0x8, 0x6, 0x8, 0x0, 0x81, 0x0, 0x10, 0x6, 0x2, 0x7, 0x7, 0x2, 0x1, 0xbe44, 0x80000001, 0x5, 0x2, 0x0, 0xd4c, 0x9, 0x1, 0x0, 0x3, 0x4, 0x8000, 0x9, 0x7fffffff, 0x3, 0xece1, 0x7, 0x1, 0x1, 0x2, 0x7, 0x1, 0x4, 0x9, 0x6, 0x5, 0x899, 0x2, 0x4, 0x6, 0x6, 0x4, 0x7, 0x8, 0x10000, 0x6, 0x8000, 0x0, 0x5, 0xffffffff, 0xfffffff7, 0x2, 0x8, 0x10, 0xfad, 0xd, 0x4f11, 0x6, 0x1172, 0x200, 0x10000, 0x81, 0x9, 0xf9dd, 0x0, 0x2, 0x9, 0x38, 0x9, 0x4, 0x0, 0x6, 0x4, 0x8000, 0x2, 0x8, 0x5, 0xc, 0x5, 0x400, 0x4, 0xa, 0x9, 0x4, 0xfffff000, 0x40, 0x2, 0x3, 0x3ff, 0x1, 0x101, 0x7, 0x5, 0x1, 0x8, 0x5, 0x200, 0x5, 0x8000, 0xa55, 0x1, 0x3, 0x8, 0x8, 0x3, 0x4, 0x8000, 0x7, 0x7, 0x6, 0x9, 0x8, 0x86b0, 0x2, 0x8001, 0xfffeffff, 0x6, 0x0, 0x200, 0x0, 0x6f9, 0xde57, 0x6, 0x2, 0x4, 0x10000, 0x100, 0x1000, 0x1, 0x6, 0x56d0, 0x7f, 0x6, 0x101, 0x2, 0xe107, 0x5, 0x9, 0xf9, 0x8, 0x5, 0x2f2, 0xfffffffb, 0x0, 0x80, 0xf171, 0x5, 0x8, 0xc, 0xffff5085, 0x4, 0x6, 0x3, 0x7fffffff, 0x3, 0xfff, 0x4, 0x6, 0x1, 0x3, 0xc, 0x9, 0xc, 0x9, 0x14, 0xa, 0x1000, 0x7fffffff, 0x3, 0x8001, 0x9, 0x7, 0x1ff, 0x4, 0x6, 0x1, 0x8, 0x0, 0x2f, 0x3, 0x37413303, 0x6, 0x2, 0x5, 0x55, 0x77e, 0x3, 0x7, 0x5, 0xf30, 0x10cf, 0x6, 0x5, 0x2, 0xfa, 0x1ff, 0x1, 0x1, 0x5, 0x9, 0x7, 0x5, 0x1, 0x8, 0x10001, 0x5, 0x1, 0x1, 0xffff0001, 0xff68, 0x46, 0x4, 0x2, 0xd, 0x0, 0x6, 0x9, 0x277c, 0x0, 0x7, 0xd, 0x4, 0xed, 0x9, 0x8, 0x3, 0x1000, 0x9, 0x7de1, 0x0, 0x6, 0x1, 0x84c00000, 0x7f, 0xd, 0x9, 0x0, 0x5, 0xcdef, 0xfffffffc, 0x7, 0x6, 0x9, 0x8, 0x200, 0x80000000, 0xffffff74, 0x1, 0x8, 0x8, 0x8001, 0x101, 0x10, 0x9, 0x2, 0x9e, 0x80000001, 0x7ff, 0x7, 0x1, 0x1b70, 0x3, 0xff, 0x2, 0x7, 0x0, 0x23b8, 0x9, 0x0, 0x7, 0x0, 0x426, 0x0, 0x80000001, 0x10001, 0x1000000, 0x7fff, 0x0, 0xffffffff, 0x7fff, 0x12e, 0x2, 0x4, 0x6, 0x7fffffff, 0xd, 0x1, 0x9, 0x100, 0x0, 0x1, 0x38, 0x1000, 0x161, 0xf, 0x7303, 0x7, 0x1, 0x19e3, 0x6, 0x4, 0x1, 0xffffff01, 0x5, 0x3, 0x6, 0x2, 0xfffffffd, 0x3, 0x0, 0x80000001, 0xff, 0x7, 0x3, 0xffff, 0x2, 0x1000, 0x6, 0x6, 0x80000000, 0x9, 0x0, 0x1, 0x52, 0xad5e, 0x8, 0x9, 0x6, 0x7fffffff, 0xc, 0x2, 0xed4b, 0x2, 0x3, 0x9, 0x3, 0xffff0001, 0x80000001, 0x5, 0x1, 0x80, 0x7, 0x5, 0x5, 0x6, 0x8, 0x4ed, 0x1ff, 0x9, 0x4, 0x3, 0x6, 0x8, 0x6, 0x2, 0x40, 0x10, 0x10001, 0x3, 0x4, 0x8, 0x7, 0x9, 0x401, 0xc2, 0xb, 0xffffff81, 0x9, 0x244, 0xb, 0x10000, 0x7, 0xffff50e3, 0x6, 0x2, 0xfffffa4b, 0x0, 0x8, 0x6, 0x674e, 0x3, 0x2, 0xda2c, 0x2, 0x800, 0x2, 0x2, 0x4, 0x3dc2a2f5, 0x2, 0x6, 0x4, 0x3, 0x4, 0x4, 0xeee7, 0x3, 0x10000, 0x83, 0x0, 0x0, 0xfffffffc, 0x5, 0x8001, 0x1000, 0x200, 0x8, 0xe571, 0x609f, 0x1, 0x298, 0x6, 0x4c, 0x7, 0x800, 0x7fffffff, 0x1, 0x3, 0x2, 0x6, 0x7, 0xffffffff, 0x9342, 0x93, 0x6, 0xa5, 0xd170, 0x2, 0x7fffffff, 0x2, 0x6, 0xa2, 0x401, 0x8, 0x2, 0x6, 0x4, 0x7, 0x9, 0x0, 0x5, 0x80, 0xf, 0x81, 0xe740, 0x1, 0x1, 0x2, 0x81, 0xf, 0xe, 0x3, 0x6c3c, 0x4, 0x8663, 0x9, 0x2b49, 0x9, 0x0, 0xc, 0xff, 0xd4, 0x1ff, 0x1, 0x0, 0x686c, 0x6, 0xc, 0x2, 0x62, 0x5, 0x1ff, 0xdc5b, 0x3, 0x3, 0x5, 0x4661, 0x1, 0x8, 0xb, 0x400000, 0x7, 0x0, 0x28c, 0x8001, 0x80, 0x8, 0xff, 0x4, 0x4, 0x4, 0x5, 0x4, 0x7fffffff, 0x9, 0x71, 0x7, 0x0, 0x1ff, 0x4, 0x4, 0xfffffffe, 0x2, 0x7, 0xd28, 0x76, 0xfff, 0x50, 0x8, 0x50, 0x9, 0xf885, 0xab5, 0x9, 0xe7, 0xffffe64e, 0x7, 0x0, 0x5, 0x7, 0x3, 0x4d68, 0x81, 0x3, 0x0, 0x9, 0x225, 0x883, 0x7f, 0x0, 0x5, 0x0, 0x4, 0x6acd, 0x7, 0x401, 0x8000, 0xf, 0x3, 0x4, 0x0, 0xffff, 0x9, 0x8, 0x5, 0x80, 0xffff, 0x80, 0x0, 0x7, 0x1, 0x3, 0xcb3, 0xfff, 0x1, 0x8, 0x3, 0x2, 0x6, 0x6, 0x7, 0xfffffff7, 0xbda9, 0x7, 0x2, 0x5, 0x1, 0xd, 0x5, 0xffffffff, 0xcc9, 0xa3, 0xffff, 0x3, 0x3, 0x1, 0xf, 0x7, 0x7fff, 0xeb, 0xeeb9, 0x7, 0x8e5, 0x7, 0x2, 0x7, 0x2, 0xf, 0xffffffff, 0x4, 0x5a09, 0x6, 0x40, 0x43, 0x6, 0x401, 0x9, 0x0, 0xfffffff7, 0x4, 0x5, 0x889, 0x1, 0x7fffffff, 0x7, 0x3986, 0x800, 0xe, 0x3, 0x10001, 0x5, 0x7, 0x134c5750, 0x3, 0x1, 0x5, 0x500, 0x10001, 0x0, 0x8000, 0x9, 0x3, 0x4, 0x0, 0x4, 0x5, 0x8, 0x2, 0x8, 0xd5, 0x2, 0xd2, 0xffff7fff, 0xa00, 0xfffff000, 0x4, 0xff, 0x5f, 0x68, 0xfffffffb, 0x2, 0x6e9c, 0x3, 0xb4f, 0xfffffff7, 0x7, 0xffff0001, 0x8, 0x0, 0x1, 0x9, 0x6, 0x0, 0x6, 0xc, 0x81, 0x9, 0x4, 0x8, 0x1da, 0x55036c8c, 0x5, 0x8, 0xfffffff9, 0x9, 0xfff, 0x7, 0x505, 0x7, 0x6, 0x50de, 0xb9d, 0x7fff, 0xd27c, 0x9, 0x800, 0x13, 0x98, 0x8, 0x4, 0x0, 0x81, 0x4, 0x5, 0x4, 0x6, 0x6c7, 0x4, 0x6, 0x200, 0xa, 0x9f, 0x1, 0x6, 0x3, 0x7, 0x2, 0xcbec, 0x8, 0xe0, 0x0, 0x8, 0x3ff, 0x10, 0x8001, 0x8, 0x2, 0x0, 0x10, 0xd, 0x5, 0x8, 0xc, 0x7ff, 0x1, 0x5, 0x1, 0x8000, 0x8001, 0x40, 0x2, 0x81, 0x6488, 0x9, 0x2, 0x7, 0x7, 0x6, 0xc434, 0x1000, 0x2c1, 0xe51, 0x88, 0xc, 0x2, 0x0, 0x1, 0x40f1679f, 0x2, 0x3, 0x0, 0x1, 0x7, 0x3ff, 0x1, 0x100, 0x58, 0x4, 0x1, 0x5, 0x5, 0x9, 0x3, 0x8, 0x0, 0x7, 0x4a, 0x3ca, 0xffffffff, 0x4, 0x2abc9a2f, 0x8001, 0x5, 0xd, 0x200, 0x311, 0x80000000, 0x2, 0x5, 0x6, 0xfa, 0x400, 0x1, 0x80000000, 0xd, 0xc, 0x0, 0x2, 0x3, 0x1, 0x7fffffff, 0x7, 0x9, 0x8, 0x8, 0x3, 0x19d, 0x0, 0x2, 0x0, 0x2, 0x4, 0x5, 0xf3c7, 0xff, 0x0, 0x4, 0x4983, 0xffffffff, 0x4ee, 0x7ff, 0x10001, 0x3, 0x7ff, 0x5, 0x10001, 0x2, 0x3ff, 0x1, 0x3, 0xffffffff, 0x4, 0x10, 0x3c14, 0xff, 0x1, 0x6, 0xcc2, 0x9, 0x4, 0x1, 0x0, 0x1, 0x4, 0x7c, 0x4, 0x1, 0xc, 0xf, 0x200, 0x9, 0x9, 0x2, 0x2, 0x7f, 0x4, 0x3, 0x7f, 0x5, 0x5, 0x8000, 0xd712, 0x6, 0x101, 0x4, 0x4, 0x5, 0x4, 0x7ff, 0x7, 0x100, 0xffff, 0x40, 0x2, 0x7, 0xc68, 0xff, 0xc, 0x3ff, 0x0, 0x8, 0x5, 0xffffffff, 0x3, 0x4, 0x44, 0x8630, 0xff, 0x3, 0x5, 0xf, 0xb4, 0x8, 0x4, 0x2, 0xffffffff, 0xffffffff, 0x0, 0xeae4, 0x80000000, 0x6, 0x20, 0x8, 0x2, 0x4, 0x4, 0x5, 0x7fff, 0x1, 0xc83a, 0xec1b, 0x2, 0x4, 0xf, 0xb1ac, 0x7fffffff, 0x3064, 0xfffffff8, 0x9, 0x4, 0xcb, 0x2eba, 0xfffffffc, 0xffffffd2, 0xb6, 0x4f, 0xfb3, 0x752, 0x7f, 0x6, 0xfd5, 0x8, 0x1fe0, 0x9, 0xffffff80, 0x20, 0x400, 0xee, 0x6, 0x2fbe, 0x9, 0x58, 0x5, 0x8, 0x5, 0x5, 0x746b3413, 0x0, 0x6, 0x9, 0x2, 0x0, 0x7, 0x7fffffff, 0x1, 0x1, 0x5, 0x0, 0xffffffff, 0x994, 0x1e, 0x6, 0x40, 0xffffffff, 0x1, 0x8e6, 0x2, 0x8, 0x1, 0x60c, 0x9, 0xffffe0cd, 0x6, 0x24d, 0x3993, 0x9, 0xfffffffb, 0x7, 0x1, 0x7, 0x7, 0x847c, 0x5, 0x50, 0x6, 0x4, 0xcf7, 0x93, 0x6, 0x9, 0xe03, 0x743e, 0x6, 0x1, 0x4, 0xfffffb9f, 0xbd, 0xa, 0x1, 0xffff, 0x7, 0x8, 0xffff41c6, 0x7, 0xc2a3ad7, 0x9, 0x2, 0xffffff16, 0x6, 0x7, 0xcc, 0x1, 0x7fffffff]})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0)
r2 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r3)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
write$uinput_user_dev(r3, &(0x7f0000001600)={'syz0\x00', {0x4, 0x5, 0x4, 0x10}, 0x19, [0x6, 0xd, 0x0, 0x5, 0x5, 0x0, 0x0, 0x7f, 0xf, 0x2, 0xe20c165, 0x9, 0x800, 0x5, 0x3d, 0x80000000, 0x9, 0x80000000, 0xfff, 0x6, 0xff, 0x4, 0xdecd, 0x0, 0x8, 0x67, 0x8, 0x8e6238e, 0x6, 0x9, 0x80000000, 0x4d72ce62, 0x5732, 0x1000, 0x4100000, 0x8, 0x3, 0x9, 0x8001, 0x86, 0x0, 0x10, 0xfffffff8, 0x5, 0x0, 0x1, 0x68c, 0x0, 0x6, 0x10000, 0x6, 0x3, 0x4, 0x5, 0x6, 0xfffffffa, 0x3, 0x1, 0x2, 0x9, 0xf, 0x2, 0x83a, 0x7ff], [0xfffffff0, 0x0, 0x6f, 0x19, 0xb2c1, 0x1, 0xc1, 0x3, 0x2, 0x9, 0x1323647d, 0x1, 0x0, 0x400, 0xb3, 0x6, 0x4, 0x1, 0x7fffffff, 0x9, 0x6, 0x58, 0x10000, 0xcb, 0x9, 0x6c7, 0x6, 0x0, 0x0, 0xb1, 0x17f1a6d2, 0x3ff, 0x0, 0x5, 0x9, 0x1, 0x4, 0xd161, 0x8, 0x3, 0x0, 0x40, 0x2, 0x1, 0x80, 0x3ff, 0x5, 0xdfa6, 0xffffff29, 0x6, 0x1, 0x4, 0x0, 0x1, 0x3, 0x9, 0x2, 0x1b8, 0x2, 0x1, 0x80, 0xe20, 0x7, 0x8bd9], [0x1, 0xfffffc01, 0x4, 0x0, 0xc, 0x7, 0x6, 0xd0, 0x1, 0xd, 0x49ed, 0x1, 0xc, 0xd90c, 0x2, 0x7, 0x200, 0x4, 0x0, 0x1, 0x3, 0x3, 0x8, 0x6, 0xa6, 0x80000001, 0x7182, 0x0, 0xbb, 0x8, 0xf, 0x9, 0x9, 0x7, 0x4, 0xfffffc00, 0x7, 0x0, 0x101, 0x1f, 0x3, 0x6, 0x4, 0x1, 0x80000001, 0x2, 0xa2c, 0x3, 0x6, 0x5, 0x5, 0x80, 0xff, 0x0, 0xc0, 0x9, 0x291d, 0x7, 0x4000000, 0x7fffffff, 0x8, 0x4, 0xfffffff8, 0xfffffff9], [0xffffff41, 0x3, 0x6, 0x7f, 0xd, 0x63, 0x7, 0x5, 0x0, 0x3, 0x80000000, 0x8, 0x0, 0x5, 0xffffffff, 0x8, 0x10001, 0x7fff, 0x3, 0x40, 0xfffffff9, 0xba4, 0x9, 0x49, 0xc4, 0x52000000, 0x5, 0x9, 0x3, 0x200, 0x1, 0x80000000, 0x2, 0x7, 0x1, 0x5, 0x0, 0xff, 0x2, 0x9, 0x169, 0x6a15, 0xd, 0x80, 0x101, 0x10000, 0x2, 0x401, 0x401, 0x2, 0x6, 0x1, 0x7f, 0x9, 0x7, 0xc8, 0x0, 0x3, 0x40000000, 0x4, 0x9, 0x6, 0x25, 0xffffffc0]}, 0x45c)
syz_open_procfs(r2, &(0x7f0000000580)='fd/3\x00')
ioctl$TIOCSBRK(r0, 0x5427)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0)
ptrace$setregset(0x4205, r2, 0x4, &(0x7f0000000280)={&(0x7f0000000240)="44f56859dce98fb34e02fd4a3bc2d719be5a65c3429e5e6d955f67aacd891ff902af81efd5b5180deebc6ef1", 0x2c})
setxattr$security_capability(&(0x7f0000000140)='./cgroup\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v1={0x1000000, [{0x4, 0x9}]}, 0xc, 0x3)
executing program 33:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r3, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
umount2(&(0x7f00000001c0)='./file0/file0/file0\x00', 0x2)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0)
close(r5)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x169900, 0x0)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r6, &(0x7f0000000000)={0x27, 0x2, 0x2}, 0x6)
ioctl$TUNGETVNETLE(r5, 0x40047440, 0x0)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-mkdir-mkdirat-mkdir-getpid-syz_pidfd_open-setns-openat-lseek-mount$overlay-mmap-mremap-mlock2-remap_file_pages-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind-umount2-openat$tun-close-openat$ppp-syz_init_net_socket$nfc_llcp-bind$bt_hci-ioctl$TUNGETVNETLE
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r3, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
umount2(&(0x7f00000001c0)='./file0/file0/file0\x00', 0x2)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0)
close(r5)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x169900, 0x0)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r6, &(0x7f0000000000)={0x27, 0x2, 0x2}, 0x6)
ioctl$TUNGETVNETLE(r5, 0x40047440, 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 32 programs with base timeout 1m40s
testing program (duration=1m48s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 13, 26, 2, 5, 21, 21, 29, 30, 13, 11, 8, 30, 11, 10, 2, 20, 30, 29, 20, 11, 29, 24, 2, 10, 25, 29, 40, 7, 30, 15, 29]
detailed listing:
executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vlan0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000005f40)="a630ce5088a83e54fa6b090879a96f", 0xf, 0x40000c4, &(0x7f00000006c0)={0x11, 0x0, r2, 0x1, 0xff, 0x6, @broadcast}, 0x14)
executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000c80000/0x3000)=nil, 0x3000, 0x6)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vlan0\x00', <r2=>0x0})
r3 = socket(0x10, 0x803, 0x0)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f000000a000)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)=""/220, 0xdc}, {&(0x7f0000001a40)=""/214, 0xd6}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000001880)=""/147, 0x93}, {&(0x7f00000000c0)=""/144, 0x90}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000000240)=""/154, 0x9a}, {&(0x7f0000002d80)=""/254, 0xfe}], 0x8}, 0x10}, {{0x0, 0x0, 0x0}, 0xe}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x100007}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x401}], 0x7, 0x40000000, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x1, 0xfffffffd}}, 0x10)
bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10)
sendto$packet(r0, 0xfffffffffffffffd, 0x0, 0x40000c4, &(0x7f00000006c0)={0x11, 0x0, r2, 0x1, 0xff, 0x6, @broadcast}, 0x14)
executing program 2:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
pipe2(0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
pipe2$9p(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, 0x0)
r4 = socket$inet6(0xa, 0x802, 0x88)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7})
sendto$inet6(r4, 0x0, 0x0, 0x40000, 0x0, 0x0)
mmap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2, 0x13, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x3)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, 0x0, 0x0)
setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000000)={0x2ff, [0x10005, 0x400], 0x7}, 0x10)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000}, 0x4040)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x3, 0xb, 0x6)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e457bae75"], 0x15)
r6 = dup(r2)
write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18)
write$FUSE_INIT(r6, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff8, 0x4, 0x0, 0x2, 0x0, 0x0, 0x20, 0x4}}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}})
pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb)
executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00200000000000", @ANYRES32=0x0, @ANYRESOCT], 0xb8}}, 0x400000000000000)
executing program 2:
ioctl$VHOST_VDPA_SET_VRING_ENABLE(0xffffffffffffffff, 0x4008af75, &(0x7f0000000000)={0x2, 0x5f9})
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x20602, 0x0)
write$vga_arbiter(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='trylock '], 0xc)
write$rfkill(r0, &(0x7f0000000180)={0x2023, 0x4, 0x2, 0x1, 0x1}, 0x8)
executing program 2:
sched_setscheduler(0x0, 0x1, 0x0)
unshare(0x2040400)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
r3 = socket$inet6(0xa, 0x3, 0x38)
setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4)
connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x41200003, @loopback, 0x7}, 0x1c)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1)
mount$9p_fd(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid}]}})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000008)
read(r4, &(0x7f0000000040)=""/12, 0xc)
r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
sendfile(r5, r0, 0x0, 0x80000000)
executing program 32:
sched_setscheduler(0x0, 0x1, 0x0)
unshare(0x2040400)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
r3 = socket$inet6(0xa, 0x3, 0x38)
setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4)
connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x41200003, @loopback, 0x7}, 0x1c)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1)
mount$9p_fd(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid}]}})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000008)
read(r4, &(0x7f0000000040)=""/12, 0xc)
r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
sendfile(r5, r0, 0x0, 0x80000000)
executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r3, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
umount2(&(0x7f00000001c0)='./file0/file0/file0\x00', 0x2)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0)
close(r5)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x169900, 0x0)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r6, &(0x7f0000000000)={0x27, 0x2, 0x2}, 0x6)
ioctl$TUNGETVNETLE(r5, 0x40047440, 0x0)
executing program 1:
syz_usb_connect(0x0, 0x5a, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, &(0x7f0000000080)})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000140)="46ae460f01cbc4a3616ac100410f01ca4e0fc72c2e8f6878c22200450f20452e66430fd129b97e0a0000b882000000ba000000000f30f6ed", 0x38}], 0x1, 0x10, 0x0, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000280)={[0x4d, 0x1, 0xfffffffffffffffc, 0x10000, 0x6cb, 0xffffffffffff8001, 0x44d, 0x5, 0x1, 0x2, 0x9, 0x2, 0x9731, 0x3, 0xffffffffffffffff, 0x200000010001], 0x1000, 0x280})
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x60)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0)
fcntl$setlease(r6, 0x400, 0x1)
ioctl$KVM_NMI(r4, 0xae9a)
readv(r1, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/57, 0x39}, {&(0x7f0000000340)=""/235, 0xeb}, {&(0x7f0000000540)=""/223, 0xdf}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f0000000640)=""/112, 0x70}], 0x5)
ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYRES32=r4])
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f00000004c0)="170000000a0001000003be8c5ee17688a20032000203000a0292000098fc5ad90a00bb6a880000d6c8db0000dba67e06020000e28900000200df018002000000fc0607bdff59100ac45761547a681f009cee4a5a2d8f89814bc6c252674f00c88ebb01005033bf79ac2dfc060115003901000000000000ea0000000000000800b59bd2b8e50ce5af649a702202ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5a1b47b6806323deb3", 0xb8)
pipe(&(0x7f0000019480)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
vmsplice(r9, &(0x7f0000000500)=[{&(0x7f00000007c0)="09a2374f2c830532f3c9badd512ac947adf1773b4d97f6ab4b5601a82ff3f7980821de85b230d7ca131720aa5c699843bb1d", 0x32}, {&(0x7f0000000100)="768102", 0x3}, {&(0x7f0000000480)="eb", 0x1}, {&(0x7f00000004c0)='&', 0x1}, {&(0x7f00000001c0)="ca", 0x1}, {&(0x7f00000011c0)="b488", 0x2}, {&(0x7f0000001440)='4', 0x1}], 0x7, 0x3)
close(r9)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r10, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4)
connect$inet(r6, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r10, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000780)="92", 0x1}, {&(0x7f0000000940)="a6", 0x1}, {&(0x7f00000009c0)="e3", 0x1}, {&(0x7f0000000b80)='a', 0x1}, {&(0x7f0000000740)='_\r', 0x2}], 0x5}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000008c0)='f', 0x1}, {&(0x7f0000001f40)="2ae0a79f886ac8fd105493a2585ebcaf5142ac47ae6624d854c0126b1229c57735ceeffa23ad416df2d58615e69565387f3847c32160cdd68811ccf2e3e56c2457a07581d6a5bd7d1a756e13c4c86874df9a65e724f9480162cbd8864919a3658311e3738d1a558df6766a845840e4b903d84ed5ae604e47dedf8b5ba991d7b910a80eab67a9f8a77e8e7b893cda1733a543566b27a1178767d1cc01cc9efe17ebad47d8640d0fb3788ddafe8cdcf47cdfa6c4b4c061712fd454cdfd05fe54cc33", 0xc1}, {&(0x7f00000012c0)="74c140", 0x3}, {&(0x7f0000000d80)="dd", 0x1}, {&(0x7f0000001dc0)="81", 0x1}], 0x5}}], 0x2, 0x4008400)
splice(r8, 0x0, r9, 0x0, 0x10500, 0x0)
executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x14, r2}) (async)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000004c40)={@private0={0xfc, 0x0, '\x00', 0x1}, r2}, 0x14) (async, rerun: 32)
r3 = epoll_create(0x6) (rerun: 32)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x12, r2}) (async)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000100)) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r0, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
epoll_create1(0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0) (async)
r2 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000480)={0x0, "237b61d575a0802ad4be1c8e369df41d90bd42a3df371fa430a6b4f71e65b13b30f8ddcaf2420eb1fb875c3d75c91d9886e2080f1d4b9bc3385a37f7db5534ed", 0x34}, 0x48, 0xfffffffffffffffb)
request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000c40)='\x00', r2)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @local}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffd}}}, 0x108) (async)
close_range(r0, 0xffffffffffffffff, 0x0)
executing program 1:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
r2 = socket$inet6(0xa, 0x800, 0x8f7f)
preadv2(r2, &(0x7f0000001480)=[{&(0x7f0000000080)=""/33, 0x21}, {&(0x7f00000000c0)=""/166, 0xa6}, {&(0x7f0000000180)=""/218, 0xda}, {&(0x7f0000000280)=""/233, 0xe9}, {&(0x7f0000000380)=""/231, 0xe7}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x6, 0x7f, 0x5, 0x11) (async)
r3 = accept4$inet6(r2, &(0x7f0000001500)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f0000001540)=0x1c, 0x80800)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001580), 0x50041, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000015c0)=0x80) (async)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001640)={0x4, &(0x7f0000001600)=[{0x40, 0x9, 0x7, 0x8}, {0x6, 0x0, 0x4, 0xef1}, {0x4, 0xfd, 0x10, 0x94}, {0x8, 0x4, 0x1, 0x5}]})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000001680)={r0, 0x0, r3, 0xffa}) (async)
sched_setaffinity(r1, 0x8, &(0x7f00000016c0)=0x3) (async)
ioctl$BLKRRPART(r4, 0x125f, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000001700)) (async)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r4, 0xf502, 0x0) (async)
fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000001740), &(0x7f0000001780), 0x2, 0x3) (async)
io_setup(0x5, &(0x7f00000017c0)=<r6=>0x0) (async)
r7 = eventfd(0x7) (async)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000018c0)='/sys/kernel/uevent_helper', 0x22080, 0x90)
io_submit(r6, 0x3, &(0x7f0000001a40)=[&(0x7f0000001840)={0x0, 0x0, 0x0, 0x1, 0xe92, 0xffffffffffffffff, &(0x7f0000001800)="0fc11bbf49524ebd93ac1af72926eaee1c9ee2a8aa999d9e01e3601a10065209565171ee6a80df76f0da5db2528bae809dcf443478", 0x35, 0xffffffffffffff09, 0x0, 0x2, r7}, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x3, 0x1, r5, &(0x7f0000001880)="46cdc80843eb277057695add332249995771ebd8829d76224cfa8442c58926751d6ed2", 0x23, 0x1, 0x0, 0x2, r8}, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x4, 0x5, r2, &(0x7f0000001940)="8fc08d73131b18babfbc2b637e1421bfc5e7bbb4d6b24b51ba07a36a9de616978d5b74fc4c4cf128a9872feaecd4dfe3ef6391394399f67c87f363f2596ca04b81ecadfaf8056e2840263ab5f4bacf8fa89324f58bd63cf04338b0c2d05d98fbd4ca35efad42de2c24e1ce025ebc6eeb18988526f0e0968cff1bf85661119074df453f0cb5bd6edf8d7d678209d350c24839b612f409986de3606d41251502295540164685d1", 0xa6, 0x4}]) (async)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001a80), 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000001ac0)={0xfffffffd, 0x5, 0x9c, 0x800, 0x9})
ioctl$EXT4_IOC_SWAP_BOOT(r9, 0x6611) (async)
ioctl$FS_IOC_SETFSLABEL(r9, 0x41009432, &(0x7f0000001b00)="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") (async)
r10 = syz_open_dev$mouse(&(0x7f0000001c00), 0x865c, 0x400) (async)
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0)
link(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)='./file0\x00') (async)
io_setup(0x5742, &(0x7f0000001cc0)=<r11=>0x0)
io_submit(r11, 0x3, &(0x7f0000001ec0)=[&(0x7f0000001d80)={0x0, 0x0, 0x0, 0x3, 0xc, r10, &(0x7f0000001d00)="7d9810d0581f4ed1fff82bd51cb13873beabc433c2038996c1b38f55740c9246ff187fd707a02bd17104f50af854267d4cd182da9f16bd593df865e74c49ec71542bd12ac635d0ab26b8339f52595d71faec0575035de535eda3784b0cb1bdb6466a25293cd1676c65cd1a33fbeb1bbbef377cc74859d592a0", 0x79, 0x1, 0x0, 0x6, r10}, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x8, 0x6, r7, &(0x7f0000001dc0)="cf7467ac1bdadfbd5bd4f8e1", 0xc, 0x7}, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x6, 0x5, r8, &(0x7f0000001e40)="7a0f29c4845dbd67f7be186f75befb1dceaaf9c3d0c088adbb3f999c8b545971d84c0b", 0x23, 0xfffffffffffff96b, 0x0, 0x2, r10}])
setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f0000001f00), 0x4)
r12 = fsmount(r8, 0x0, 0xc)
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000001f40)={0x80000000, 0xf000, 0x2, r12, 0x8}) (async)
timer_create(0x5, &(0x7f0000001f80)={0x0, 0x19, 0x1, @tid=r1}, &(0x7f0000001fc0))
executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r0, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x4)
r2 = syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, 0x0)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e1b4e0004fcff", 0x58}], 0x1)
executing program 4:
unshare(0x62040200)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68)
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xbf, 0x172f, 0x501, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x80, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x9, 0xbc, 0x1, {0x22, 0x375}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x76, 0x8, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x68, 0x9, 0x5, 0x6}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x3, 0x9, 0x1, 0x8, 0x1f}, 0xc7, &(0x7f0000000180)={0x5, 0xf, 0xc7, 0x3, [@generic={0xb4, 0x10, 0x4, "e73d732e37560310aa7ed6d8727d793652510679d769715c41f21f0e590fbb153f89f2a9a1eecc2462ed2b944a9b24c3dcee88e53403e74664700ec83713deb346c443e684006fbab2b8ad416040421e86be14d284de83723d542a23f93750d2b039ac71799e487db8a40aa87b4f7e98743894b1e1a2cf3faa7b92f551d38d88ca5484d84244bbdf88128a87fd586255bd798b6eb99b1afebca6780a0e94ab72e38a7ad69a360dd8fcc1f8eb19a6508794"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x12, 0xb, 0x9, 0x51, 0x50}, @ptm_cap={0x3}]}, 0x6, [{0x10, &(0x7f0000000280)=@string={0x10, 0x3, "5b382801ab65b9d9b03ef49d1a10"}}, {0x22, &(0x7f00000002c0)=@string={0x22, 0x3, "607bd15380e4d216fd65d2345d5679508ca88fbd2d200983d48e5d9f9a97b1db"}}, {0x6e, &(0x7f0000000300)=@string={0x6e, 0x3, "3996c991f70b1b6a93b94453810f039083606fca52432b92d583df11d70e06346a39ca172623a573662d68a8df4d4978b31ae88525a8aacb65ea8519185371990f13340bbdbf829c803251cd1dc7347d7d23a73b976ba7e2ab966ad647e584c17428bfa3aab43cebd306e600"}}, {0x5d, &(0x7f0000000380)=@string={0x5d, 0x3, "b01683f1ac84479e587a1f0b088fb498d6950b07f93a399ff0be8d16308dfc0e3c0ec0bd0557ba07a38ab292a5f4f6200f69d29397aec62dfe880b9b50250fda7ef5e9d6e597ae698717c3e47fa9ff4f501fdcde04f07d77980fbb"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x44f}}]})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4)
recvmmsg(r5, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x1b20cfe5}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/197, 0xc5}, {&(0x7f0000000080)=""/45, 0x2d}, {&(0x7f00000015c0)=""/77, 0x4d}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000001640)=""/94, 0x5e}], 0x5}, 0x2}], 0x4, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
write(r4, &(0x7f0000000380)="5e799f8fcc4bc4f6", 0x8)
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"])
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000080)={0x1000, 0x14000, 0x8})
executing program 1:
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000b0000040"])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044094)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x29d})
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_GET_MSRS(r6, 0xc008ae88, &(0x7f0000000040))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r7=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', <r8=>r5, 0x2f, 0xa, 0x1, 0x80, 0x1, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x8000, 0x4c1, 0x80000001}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6gre0\x00', <r9=>r7, 0x2f, 0x7, 0x6, 0x3, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x41, 0x8, 0x7fffffff, 0x90}})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)={0x198, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x4}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4880}, 0x4000014)
r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
personality(0x5400004)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r10, 0x99b33000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r11 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x2, 0x0, 0x6109, 0xc2}, 0x20)
close(r11)
socket$netlink(0x10, 0x3, 0xa)
r12 = syz_usb_connect$uac1(0x5, 0x87, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x80, 0x70, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x81}, [@mixer_unit={0x5, 0x24, 0x4, 0x1, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x0, 0x2, 0x10, 0xc7, '@'}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x8, 0x2, 0xc8, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0xd, 0x7f, {0x7, 0x25, 0x1, 0x1, 0x3, 0x606b}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0x1, 0xa, {0x7, 0x25, 0x1, 0x2, 0x7, 0x100}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x1, 0x4, 0x9, 0x8, 0xa}, 0x52, &(0x7f00000002c0)={0x5, 0xf, 0x52, 0x5, [@wireless={0xb, 0x10, 0x1, 0x0, 0x8, 0x6, 0x8, 0x9, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "90ce1b870151f343cf9fbb32e6f4dcad"}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x7fffffc, 0x1ef00, 0x7f, [0xc0, 0x3f30, 0x3f00, 0xffc0, 0xc0]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x8, 0x5c, 0x7, 0xd}]}, 0x4, [{0xee, &(0x7f0000000440)=@string={0xee, 0x3, "bc2b202e58c0d10fac7cb05d89565f4147d715347596fb1dda82a48ffc6a317a8af4ed050be83ffc615d506e0a7856cfff1e55c7de2c287b1fb12cbf39ed3452d8e1a48b46b8cd0a5b202e99d3a6ca4dd52c03b0df4fc544e0c8ba1071b0a52e8b3aa9bf889f05d350b46c7ba049baa5955c60d6fe8a983f37bc586bb982ee058fd85da1d251c28f3b753c1a9c3eaca321e683e442d061819908c9616a7172f984d3ba3b0c01cb9f8e576546b61259428ad136ad8e6b4684b02453a6bf09847edb4ae4b72eb847df69094290491dd1bb670d0b179cb1e32a423c7aa615dc3da9f80de487830f34821a9f7453"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1401}}]})
syz_usb_control_io$uac1(r12, &(0x7f00000006c0)={0x14, &(0x7f00000005c0)={0x40, 0x31, 0xc2, {0xc2, 0xf, "3d897edbe1ba91ec8ed3330613aed89c01b1a18718cc5e21992470d9bd44f9634d06c8f988d285a6cef52844ac8bf5a9b4e6e266daf04516dd40b1cc93cb8b5d5e98492048fb6f37e7646dbe1188c9d09108c242682774676dd3c20839f6534a6292619a88711b173aa532f4cafd416cab22d3bcbca70e0aef8e4f7e8610fe6ca5d94adf96ce287363a30a060a8c319eb92b50b70b200a919af1623d124502cd4d0fd3f75769825066c64ad928602154fa64ba9151d586ca25f69ba1fcbb8f99"}}, &(0x7f0000000240)={0x0, 0x3, 0x10, @string={0x10, 0x3, "859143e23c60a15a2340f10b795e"}}}, &(0x7f0000000940)={0x44, &(0x7f00000009c0)=ANY=[@ANYBLOB="000f5100000054c07174ea485efa66793b408da031bdf141e6c327a02146ee378f849ecd71ef5d626b8d144ac8c3aefb3bea5c2b21c6883c995b181ce31d38115acb5f8cb3edde616bb447a4e7f3a2d24424a40febfd453eaa44c624175943784c577b6844b39deef89d2196564883efd4c244eac439df6f45301c4a7a25c45f1ed9fb3ff3e3679e6a2b2519447420b547cb4da49be0a8c7d2"], &(0x7f0000000780)={0x0, 0xa, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0xa2}, &(0x7f0000000800)={0x20, 0x81, 0x3, "7a92d4"}, &(0x7f0000000840)={0x20, 0x82, 0x1, '\b'}, &(0x7f0000000880)={0x20, 0x83, 0x1, "fa"}, &(0x7f00000008c0)={0x20, 0x84, 0x4, "f69df858"}, &(0x7f0000000900)={0x20, 0x85, 0x3, "b49627"}})
mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x810000, &(0x7f0000000340)={[{}], [{@fowner_gt}]})
r13 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r13, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10)
syz_clone(0x8000800, 0x0, 0x0, 0x0, 0x0, 0x0)
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r3, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
umount2(&(0x7f00000001c0)='./file0/file0/file0\x00', 0x2)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0)
close(r5)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x169900, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff7)
ioctl$TUNGETVNETLE(r5, 0x40047440, 0x0)
executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006240), 0x42, 0x0) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3)
socket$netlink(0x10, 0x3, 0x4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008800}, 0x2000)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) (async)
syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_fuse_handle_req(r1, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x18, 0xffffffffffffffda, 0xe, {0xbd7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async)
close(r1) (async)
close_range(r0, 0xffffffffffffffff, 0x0)
executing program 4:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r0, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r3, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
umount2(&(0x7f00000001c0)='./file0/file0/file0\x00', 0x2)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0)
close(r5)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x169900, 0x0)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r6, &(0x7f0000000000)={0x27, 0x2, 0x2}, 0x6)
ioctl$TUNGETVNETLE(r5, 0x40047440, 0x0)
executing program 3:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x0) (async)
unshare(0x62040200) (async)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100000000) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
getsockopt(0xffffffffffffffff, 0x200, 0x2, 0x0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000006c0)=@req3={0xd, 0x9, 0x0, 0x4, 0x0, 0x4, 0x1}, 0x1c) (async)
r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, 0x0}) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$vga_arbiter(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="ec6f636b20"], 0xa)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) (async)
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) (async)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r5 = socket(0xa, 0x2400000001, 0x0)
getsockopt$inet6_buf(r5, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @private=0xa010100}, 0x10, 0x0}, 0x4044) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)={0xb8, 0x0, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x2, 0x3, 0x4d, 0x6]}, @CTA_NAT_SRC={0x28, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x42}}]}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x4, 0xffff, 0x1, 0x5, 0x401, 0x5]}, @CTA_FILTER={0x4c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x10}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x124}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x280}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x80}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x121}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x400}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x249}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x10}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0xc080}, 0x40)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r6, &(0x7f0000000000)={0x24, @short={0x2, 0x3}}, 0x14) (async)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="9c94"]) (async)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x8000000000, {0xffffffffffffff83, 0xfffffffc, 0x0, {0x0, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x3fc, 0x800, 0x1ff, 0x200000, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r5, &(0x7f0000000780)={0x40002000}) (async)
syz_fuse_handle_req(r7, &(0x7f0000000dc0)="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", 0x2000, &(0x7f0000003340)={&(0x7f00000000c0)={0x50, 0x0, 0xfffffffffffffff2, {0x7, 0x2b, 0x8000, 0x4, 0x5, 0x8, 0x8, 0x4, 0x0, 0x0, 0x8, 0x9}}, &(0x7f0000000180)={0x18, 0xfffffffffffffff5, 0x1ff}, &(0x7f00000001c0)={0x18, 0xffffffffffffffda, 0x0, {0xb}}, &(0x7f0000000200)={0x18, 0xffffffffffffffda, 0x40, {0x1}}, 0x0, &(0x7f00000003c0)={0x28, 0x0, 0xffffffff, {{0x8, 0x6}}}, &(0x7f0000000440)={0x60, 0x0, 0x40, {{0xfffffffffffffffa, 0x47, 0x59061c5a, 0x8001, 0x25ff, 0x7, 0x8, 0x2}}}, &(0x7f00000004c0)={0x18, 0x0, 0x7, {0x6}}, &(0x7f0000000700)=ANY=[@ANYRES32=r2, @ANYRESHEX=r2, @ANYBLOB="6451398793f2d1cf9df1b12092dac071b5b3f7ab390e1bb7bac3452ab36170466913392ce988e0f22d8bc38e1ce98c00408d", @ANYRES8=r0, @ANYRES8, @ANYRESHEX=r4], &(0x7f0000000540)={0x20, 0xffffffffffffffda, 0xa, {0x0, 0x9}}, &(0x7f00000007c0)={0x78, 0x2f, 0xf, {0x7ffe, 0x10001, 0x0, {0x4, 0x200, 0x3, 0x10000000000006, 0x8, 0x6, 0xffffffff, 0xe7, 0x6, 0x8000, 0x2008f3, 0x0, 0x0, 0x15, 0x8}}}, &(0x7f0000000900)={0x90, 0xffffffffffffffda, 0xac, {0x2, 0x2, 0xffffffffffffffff, 0x3, 0xfffffffc, 0x10, {0x0, 0x5230, 0xffffffffffffffff, 0x2, 0x80000000, 0x4, 0x3, 0x31a7, 0x3, 0x4000, 0x6, 0x0, 0x0, 0x6, 0x10}}}, 0x0, &(0x7f0000000680)={0x10, 0xfffffffffffffffe, 0x2}, 0x0, &(0x7f00000031c0)={0x20, 0x0, 0x20000000000, {0xe, 0x0, 0x3, 0x3}}, &(0x7f0000003200)={0x130, 0x0, 0x2, {0x11f, 0x3, 0x0, '\x00', {0x8, 0x8001, 0x3, 0xf, 0x0, 0x0, 0x2000, '\x00', 0x0, 0x101, 0x78bcd207, 0xa344, {0x8000000000000001, 0x7}, {0xea, 0x4}, {0x7fffffff, 0x3eb}, {0x2, 0x3}, 0x4, 0xf, 0x80, 0x76a9}}}})
executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e28880004fcff", 0x58}], 0x1)
executing program 4:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0xeff, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'p'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0xd6, 0x2, 0xe0000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x60}, 0x1, 0x7}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x92)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_on}, {@uuid_auto}]})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
syz_usb_connect$cdc_ecm(0x3, 0x121, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109020f010101000000090400001602020000052414"], 0x0)
lseek(r1, 0x10001, 0x0)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x58, 0x8, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0x40000)
executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4)
sendmmsg$inet(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000006c0)="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", 0x241}], 0x1}}], 0x1, 0x80)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r2, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
setreuid(0x0, 0x0)
syz_clone(0xf41a0400, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x7, 0x0, 0x0)
r4 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r3, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
umount2(&(0x7f00000001c0)='./file0/file0/file0\x00', 0x2)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0)
close(r5)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x169900, 0x0)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r6, &(0x7f0000000000)={0x27, 0x2, 0x2}, 0x6)
ioctl$TUNGETVNETLE(r5, 0x40047440, 0x0)
executing program 3:
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8)
setreuid(0xee00, r1) (async)
setreuid(0xee00, r1)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
getpeername(r2, &(0x7f0000000140)=@generic, &(0x7f00000001c0)=0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'ip6erspan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'ip6erspan0\x00', <r5=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'tunl0\x00', &(0x7f00000002c0)={'ip_vti0\x00', r0, 0x0, 0x10, 0x5, 0xfffff800, {{0x2a, 0x4, 0x3, 0x3d, 0xa8, 0x65, 0x0, 0xa0, 0x4, 0x0, @loopback, @remote, {[@timestamp_addr={0x44, 0x14, 0xa3, 0x1, 0xf, [{@rand_addr=0x64010100, 0x2}, {@empty, 0x7}]}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_addr={0x44, 0x1c, 0x9f, 0x1, 0x7, [{@multicast2, 0x10000}, {@multicast1, 0x4}, {@loopback, 0x5}]}, @ra={0x94, 0x4}, @rr={0x7, 0xf, 0x7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback]}, @noop, @ssrr={0x89, 0x27, 0x19, [@loopback, @broadcast, @broadcast, @multicast1, @local, @loopback, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x13, 0xe7, [@empty, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @timestamp={0x44, 0x10, 0x34, 0x0, 0x7, [0x5, 0x2, 0x7fffffff]}]}}}}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'tunl0\x00', &(0x7f00000002c0)={'ip_vti0\x00', <r6=>r0, 0x0, 0x10, 0x5, 0xfffff800, {{0x2a, 0x4, 0x3, 0x3d, 0xa8, 0x65, 0x0, 0xa0, 0x4, 0x0, @loopback, @remote, {[@timestamp_addr={0x44, 0x14, 0xa3, 0x1, 0xf, [{@rand_addr=0x64010100, 0x2}, {@empty, 0x7}]}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_addr={0x44, 0x1c, 0x9f, 0x1, 0x7, [{@multicast2, 0x10000}, {@multicast1, 0x4}, {@loopback, 0x5}]}, @ra={0x94, 0x4}, @rr={0x7, 0xf, 0x7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback]}, @noop, @ssrr={0x89, 0x27, 0x19, [@loopback, @broadcast, @broadcast, @multicast1, @local, @loopback, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x13, 0xe7, [@empty, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @timestamp={0x44, 0x10, 0x34, 0x0, 0x7, [0x5, 0x2, 0x7fffffff]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r7=>0x0})
getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000440)={@initdev}, &(0x7f0000000480)=0xc) (async)
getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000440)={@initdev, @rand_addr, <r8=>0x0}, &(0x7f0000000480)=0xc)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x138, r4, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x40}, 0x804) (async)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x138, r4, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x40}, 0x804)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async)
r9 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000780)={'ip6tnl0\x00', &(0x7f0000000700)={'syztnl2\x00', <r10=>r7, 0x0, 0xe1, 0x1, 0x9, 0x61, @local, @mcast1, 0x7, 0x7807, 0x0, 0x7f}})
getsockname$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, <r11=>0x0}, &(0x7f0000000800)=0x14)
sendmsg$TEAM_CMD_OPTIONS_GET(r9, &(0x7f0000000c80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000840)={0x3c4, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x4}}, {{0x8, 0x1, r6}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r6}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}]}}, {{0x8, 0x1, r0}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r6}, {0x1e0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1f2}}}]}}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000cc0)=0x8, 0x4)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000dc0)={&(0x7f0000000d00)=""/189, 0xbd}) (async)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000dc0)={&(0x7f0000000d00)=""/189, 0xbd})
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
getpeername$packet(r9, &(0x7f0000000e00)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000e40)=0x14)
setsockopt$inet6_IPV6_PKTINFO(r12, 0x29, 0x32, &(0x7f0000000e80)={@private0={0xfc, 0x0, '\x00', 0x1}, r13}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000f40)={'ip6tnl0\x00', &(0x7f0000000ec0)={'ip6tnl0\x00', <r14=>r7, 0x29, 0x5, 0x9b, 0x0, 0x29, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x32, 0x200}})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000fc0)) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000fc0)={'\x00', <r15=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000001000)={'team0\x00', <r16=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000001040)={'team0\x00', <r17=>0x0})
getsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000001080)={@local, <r18=>0x0}, &(0x7f00000010c0)=0x14)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r9, &(0x7f00000012c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001280)={&(0x7f0000001100)={0x158, r4, 0x1, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x4008884}, 0x1)
r19 = openat$cgroup_ro(r9, &(0x7f0000001300)='memory.numa_stat\x00', 0x0, 0x0)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r9, 0x80047213, &(0x7f0000001340))
read$FUSE(r19, &(0x7f0000001380)={0x2020}, 0x2020)
setsockopt$inet_mreqn(r19, 0x0, 0x24, &(0x7f00000033c0)={@local, @broadcast, r14}, 0xc)
executing program 3:
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000100)) (async)
setxattr$incfs_size(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=0xffffffffdfffff02, 0x8, 0x1) (async)
ioprio_set$pid(0x1, 0x0, 0x0) (async)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
sendfile(r0, r0, 0x0, 0x7ffff000) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
executing program 3:
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000280)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]})
r1 = getpid()
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$inet(r2, 0x0, 0x4000014)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, 0x0, 0x0)
r3 = syz_pidfd_open(r1, 0x0)
futex(0x0, 0xa, 0x1, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
mount$incfs(0x0, 0x0, 0x0, 0x1004000, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)={0x2, 0x100}, 0x18)
chdir(&(0x7f0000000140)='./bus\x00')
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x400, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
mount$fuseblk(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x200c40f, &(0x7f00000003c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x1000}})
mount$fuseblk(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x200840c, 0x0)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x24020000)
umount2(&(0x7f0000000000)='./file0/file0\x00', 0xf)
umount2(&(0x7f0000000040)='.\x00', 0x2)
setns(r3, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20)
syz_open_procfs(r1, 0x0)
ioprio_set$pid(0x1, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, <r8=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x24, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r8}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}]}, 0x24}], 0x1}, 0x0)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x7ffff000)
executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x400000)
ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f00000005c0)={{0x1, 0x2, 0x3, 0x3, 0x4, 0x2}, 0x171, [0x1, 0x40, 0x8001, 0x5, 0xb0, 0x0, 0x6f72, 0x6, 0xffff, 0x0, 0x0, 0x7, 0x1, 0x40, 0x5, 0x7fffffff, 0x8e, 0x3, 0x8000, 0x8, 0x3, 0x5, 0x85, 0x65, 0x0, 0xfff, 0x367, 0x8, 0x6, 0x8, 0x0, 0x81, 0x0, 0x10, 0x6, 0x2, 0x7, 0x7, 0x2, 0x1, 0xbe44, 0x80000001, 0x5, 0x2, 0x0, 0xd4c, 0x9, 0x1, 0x0, 0x3, 0x4, 0x8000, 0x9, 0x7fffffff, 0x3, 0xece1, 0x7, 0x1, 0x1, 0x2, 0x7, 0x1, 0x4, 0x9, 0x6, 0x5, 0x899, 0x2, 0x4, 0x6, 0x6, 0x4, 0x7, 0x8, 0x10000, 0x6, 0x8000, 0x0, 0x5, 0xffffffff, 0xfffffff7, 0x2, 0x8, 0x10, 0xfad, 0xd, 0x4f11, 0x6, 0x1172, 0x200, 0x10000, 0x81, 0x9, 0xf9dd, 0x0, 0x2, 0x9, 0x38, 0x9, 0x4, 0x0, 0x6, 0x4, 0x8000, 0x2, 0x8, 0x5, 0xc, 0x5, 0x400, 0x4, 0xa, 0x9, 0x4, 0xfffff000, 0x40, 0x2, 0x3, 0x3ff, 0x1, 0x101, 0x7, 0x5, 0x1, 0x8, 0x5, 0x200, 0x5, 0x8000, 0xa55, 0x1, 0x3, 0x8, 0x8, 0x3, 0x4, 0x8000, 0x7, 0x7, 0x6, 0x9, 0x8, 0x86b0, 0x2, 0x8001, 0xfffeffff, 0x6, 0x0, 0x200, 0x0, 0x6f9, 0xde57, 0x6, 0x2, 0x4, 0x10000, 0x100, 0x1000, 0x1, 0x6, 0x56d0, 0x7f, 0x6, 0x101, 0x2, 0xe107, 0x5, 0x9, 0xf9, 0x8, 0x5, 0x2f2, 0xfffffffb, 0x0, 0x80, 0xf171, 0x5, 0x8, 0xc, 0xffff5085, 0x4, 0x6, 0x3, 0x7fffffff, 0x3, 0xfff, 0x4, 0x6, 0x1, 0x3, 0xc, 0x9, 0xc, 0x9, 0x14, 0xa, 0x1000, 0x7fffffff, 0x3, 0x8001, 0x9, 0x7, 0x1ff, 0x4, 0x6, 0x1, 0x8, 0x0, 0x2f, 0x3, 0x37413303, 0x6, 0x2, 0x5, 0x55, 0x77e, 0x3, 0x7, 0x5, 0xf30, 0x10cf, 0x6, 0x5, 0x2, 0xfa, 0x1ff, 0x1, 0x1, 0x5, 0x9, 0x7, 0x5, 0x1, 0x8, 0x10001, 0x5, 0x1, 0x1, 0xffff0001, 0xff68, 0x46, 0x4, 0x2, 0xd, 0x0, 0x6, 0x9, 0x277c, 0x0, 0x7, 0xd, 0x4, 0xed, 0x9, 0x8, 0x3, 0x1000, 0x9, 0x7de1, 0x0, 0x6, 0x1, 0x84c00000, 0x7f, 0xd, 0x9, 0x0, 0x5, 0xcdef, 0xfffffffc, 0x7, 0x6, 0x9, 0x8, 0x200, 0x80000000, 0xffffff74, 0x1, 0x8, 0x8, 0x8001, 0x101, 0x10, 0x9, 0x2, 0x9e, 0x80000001, 0x7ff, 0x7, 0x1, 0x1b70, 0x3, 0xff, 0x2, 0x7, 0x0, 0x23b8, 0x9, 0x0, 0x7, 0x0, 0x426, 0x0, 0x80000001, 0x10001, 0x1000000, 0x7fff, 0x0, 0xffffffff, 0x7fff, 0x12e, 0x2, 0x4, 0x6, 0x7fffffff, 0xd, 0x1, 0x9, 0x100, 0x0, 0x1, 0x38, 0x1000, 0x161, 0xf, 0x7303, 0x7, 0x1, 0x19e3, 0x6, 0x4, 0x1, 0xffffff01, 0x5, 0x3, 0x6, 0x2, 0xfffffffd, 0x3, 0x0, 0x80000001, 0xff, 0x7, 0x3, 0xffff, 0x2, 0x1000, 0x6, 0x6, 0x80000000, 0x9, 0x0, 0x1, 0x52, 0xad5e, 0x8, 0x9, 0x6, 0x7fffffff, 0xc, 0x2, 0xed4b, 0x2, 0x3, 0x9, 0x3, 0xffff0001, 0x80000001, 0x5, 0x1, 0x80, 0x7, 0x5, 0x5, 0x6, 0x8, 0x4ed, 0x1ff, 0x9, 0x4, 0x3, 0x6, 0x8, 0x6, 0x2, 0x40, 0x10, 0x10001, 0x3, 0x4, 0x8, 0x7, 0x9, 0x401, 0xc2, 0xb, 0xffffff81, 0x9, 0x244, 0xb, 0x10000, 0x7, 0xffff50e3, 0x6, 0x2, 0xfffffa4b, 0x0, 0x8, 0x6, 0x674e, 0x3, 0x2, 0xda2c, 0x2, 0x800, 0x2, 0x2, 0x4, 0x3dc2a2f5, 0x2, 0x6, 0x4, 0x3, 0x4, 0x4, 0xeee7, 0x3, 0x10000, 0x83, 0x0, 0x0, 0xfffffffc, 0x5, 0x8001, 0x1000, 0x200, 0x8, 0xe571, 0x609f, 0x1, 0x298, 0x6, 0x4c, 0x7, 0x800, 0x7fffffff, 0x1, 0x3, 0x2, 0x6, 0x7, 0xffffffff, 0x9342, 0x93, 0x6, 0xa5, 0xd170, 0x2, 0x7fffffff, 0x2, 0x6, 0xa2, 0x401, 0x8, 0x2, 0x6, 0x4, 0x7, 0x9, 0x0, 0x5, 0x80, 0xf, 0x81, 0xe740, 0x1, 0x1, 0x2, 0x81, 0xf, 0xe, 0x3, 0x6c3c, 0x4, 0x8663, 0x9, 0x2b49, 0x9, 0x0, 0xc, 0xff, 0xd4, 0x1ff, 0x1, 0x0, 0x686c, 0x6, 0xc, 0x2, 0x62, 0x5, 0x1ff, 0xdc5b, 0x3, 0x3, 0x5, 0x4661, 0x1, 0x8, 0xb, 0x400000, 0x7, 0x0, 0x28c, 0x8001, 0x80, 0x8, 0xff, 0x4, 0x4, 0x4, 0x5, 0x4, 0x7fffffff, 0x9, 0x71, 0x7, 0x0, 0x1ff, 0x4, 0x4, 0xfffffffe, 0x2, 0x7, 0xd28, 0x76, 0xfff, 0x50, 0x8, 0x50, 0x9, 0xf885, 0xab5, 0x9, 0xe7, 0xffffe64e, 0x7, 0x0, 0x5, 0x7, 0x3, 0x4d68, 0x81, 0x3, 0x0, 0x9, 0x225, 0x883, 0x7f, 0x0, 0x5, 0x0, 0x4, 0x6acd, 0x7, 0x401, 0x8000, 0xf, 0x3, 0x4, 0x0, 0xffff, 0x9, 0x8, 0x5, 0x80, 0xffff, 0x80, 0x0, 0x7, 0x1, 0x3, 0xcb3, 0xfff, 0x1, 0x8, 0x3, 0x2, 0x6, 0x6, 0x7, 0xfffffff7, 0xbda9, 0x7, 0x2, 0x5, 0x1, 0xd, 0x5, 0xffffffff, 0xcc9, 0xa3, 0xffff, 0x3, 0x3, 0x1, 0xf, 0x7, 0x7fff, 0xeb, 0xeeb9, 0x7, 0x8e5, 0x7, 0x2, 0x7, 0x2, 0xf, 0xffffffff, 0x4, 0x5a09, 0x6, 0x40, 0x43, 0x6, 0x401, 0x9, 0x0, 0xfffffff7, 0x4, 0x5, 0x889, 0x1, 0x7fffffff, 0x7, 0x3986, 0x800, 0xe, 0x3, 0x10001, 0x5, 0x7, 0x134c5750, 0x3, 0x1, 0x5, 0x500, 0x10001, 0x0, 0x8000, 0x9, 0x3, 0x4, 0x0, 0x4, 0x5, 0x8, 0x2, 0x8, 0xd5, 0x2, 0xd2, 0xffff7fff, 0xa00, 0xfffff000, 0x4, 0xff, 0x5f, 0x68, 0xfffffffb, 0x2, 0x6e9c, 0x3, 0xb4f, 0xfffffff7, 0x7, 0xffff0001, 0x8, 0x0, 0x1, 0x9, 0x6, 0x0, 0x6, 0xc, 0x81, 0x9, 0x4, 0x8, 0x1da, 0x55036c8c, 0x5, 0x8, 0xfffffff9, 0x9, 0xfff, 0x7, 0x505, 0x7, 0x6, 0x50de, 0xb9d, 0x7fff, 0xd27c, 0x9, 0x800, 0x13, 0x98, 0x8, 0x4, 0x0, 0x81, 0x4, 0x5, 0x4, 0x6, 0x6c7, 0x4, 0x6, 0x200, 0xa, 0x9f, 0x1, 0x6, 0x3, 0x7, 0x2, 0xcbec, 0x8, 0xe0, 0x0, 0x8, 0x3ff, 0x10, 0x8001, 0x8, 0x2, 0x0, 0x10, 0xd, 0x5, 0x8, 0xc, 0x7ff, 0x1, 0x5, 0x1, 0x8000, 0x8001, 0x40, 0x2, 0x81, 0x6488, 0x9, 0x2, 0x7, 0x7, 0x6, 0xc434, 0x1000, 0x2c1, 0xe51, 0x88, 0xc, 0x2, 0x0, 0x1, 0x40f1679f, 0x2, 0x3, 0x0, 0x1, 0x7, 0x3ff, 0x1, 0x100, 0x58, 0x4, 0x1, 0x5, 0x5, 0x9, 0x3, 0x8, 0x0, 0x7, 0x4a, 0x3ca, 0xffffffff, 0x4, 0x2abc9a2f, 0x8001, 0x5, 0xd, 0x200, 0x311, 0x80000000, 0x2, 0x5, 0x6, 0xfa, 0x400, 0x1, 0x80000000, 0xd, 0xc, 0x0, 0x2, 0x3, 0x1, 0x7fffffff, 0x7, 0x9, 0x8, 0x8, 0x3, 0x19d, 0x0, 0x2, 0x0, 0x2, 0x4, 0x5, 0xf3c7, 0xff, 0x0, 0x4, 0x4983, 0xffffffff, 0x4ee, 0x7ff, 0x10001, 0x3, 0x7ff, 0x5, 0x10001, 0x2, 0x3ff, 0x1, 0x3, 0xffffffff, 0x4, 0x10, 0x3c14, 0xff, 0x1, 0x6, 0xcc2, 0x9, 0x4, 0x1, 0x0, 0x1, 0x4, 0x7c, 0x4, 0x1, 0xc, 0xf, 0x200, 0x9, 0x9, 0x2, 0x2, 0x7f, 0x4, 0x3, 0x7f, 0x5, 0x5, 0x8000, 0xd712, 0x6, 0x101, 0x4, 0x4, 0x5, 0x4, 0x7ff, 0x7, 0x100, 0xffff, 0x40, 0x2, 0x7, 0xc68, 0xff, 0xc, 0x3ff, 0x0, 0x8, 0x5, 0xffffffff, 0x3, 0x4, 0x44, 0x8630, 0xff, 0x3, 0x5, 0xf, 0xb4, 0x8, 0x4, 0x2, 0xffffffff, 0xffffffff, 0x0, 0xeae4, 0x80000000, 0x6, 0x20, 0x8, 0x2, 0x4, 0x4, 0x5, 0x7fff, 0x1, 0xc83a, 0xec1b, 0x2, 0x4, 0xf, 0xb1ac, 0x7fffffff, 0x3064, 0xfffffff8, 0x9, 0x4, 0xcb, 0x2eba, 0xfffffffc, 0xffffffd2, 0xb6, 0x4f, 0xfb3, 0x752, 0x7f, 0x6, 0xfd5, 0x8, 0x1fe0, 0x9, 0xffffff80, 0x20, 0x400, 0xee, 0x6, 0x2fbe, 0x9, 0x58, 0x5, 0x8, 0x5, 0x5, 0x746b3413, 0x0, 0x6, 0x9, 0x2, 0x0, 0x7, 0x7fffffff, 0x1, 0x1, 0x5, 0x0, 0xffffffff, 0x994, 0x1e, 0x6, 0x40, 0xffffffff, 0x1, 0x8e6, 0x2, 0x8, 0x1, 0x60c, 0x9, 0xffffe0cd, 0x6, 0x24d, 0x3993, 0x9, 0xfffffffb, 0x7, 0x1, 0x7, 0x7, 0x847c, 0x5, 0x50, 0x6, 0x4, 0xcf7, 0x93, 0x6, 0x9, 0xe03, 0x743e, 0x6, 0x1, 0x4, 0xfffffb9f, 0xbd, 0xa, 0x1, 0xffff, 0x7, 0x8, 0xffff41c6, 0x7, 0xc2a3ad7, 0x9, 0x2, 0xffffff16, 0x6, 0x7, 0xcc, 0x1, 0x7fffffff]})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0)
r2 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r3)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
write$uinput_user_dev(r3, &(0x7f0000001600)={'syz0\x00', {0x4, 0x5, 0x4, 0x10}, 0x19, [0x6, 0xd, 0x0, 0x5, 0x5, 0x0, 0x0, 0x7f, 0xf, 0x2, 0xe20c165, 0x9, 0x800, 0x5, 0x3d, 0x80000000, 0x9, 0x80000000, 0xfff, 0x6, 0xff, 0x4, 0xdecd, 0x0, 0x8, 0x67, 0x8, 0x8e6238e, 0x6, 0x9, 0x80000000, 0x4d72ce62, 0x5732, 0x1000, 0x4100000, 0x8, 0x3, 0x9, 0x8001, 0x86, 0x0, 0x10, 0xfffffff8, 0x5, 0x0, 0x1, 0x68c, 0x0, 0x6, 0x10000, 0x6, 0x3, 0x4, 0x5, 0x6, 0xfffffffa, 0x3, 0x1, 0x2, 0x9, 0xf, 0x2, 0x83a, 0x7ff], [0xfffffff0, 0x0, 0x6f, 0x19, 0xb2c1, 0x1, 0xc1, 0x3, 0x2, 0x9, 0x1323647d, 0x1, 0x0, 0x400, 0xb3, 0x6, 0x4, 0x1, 0x7fffffff, 0x9, 0x6, 0x58, 0x10000, 0xcb, 0x9, 0x6c7, 0x6, 0x0, 0x0, 0xb1, 0x17f1a6d2, 0x3ff, 0x0, 0x5, 0x9, 0x1, 0x4, 0xd161, 0x8, 0x3, 0x0, 0x40, 0x2, 0x1, 0x80, 0x3ff, 0x5, 0xdfa6, 0xffffff29, 0x6, 0x1, 0x4, 0x0, 0x1, 0x3, 0x9, 0x2, 0x1b8, 0x2, 0x1, 0x80, 0xe20, 0x7, 0x8bd9], [0x1, 0xfffffc01, 0x4, 0x0, 0xc, 0x7, 0x6, 0xd0, 0x1, 0xd, 0x49ed, 0x1, 0xc, 0xd90c, 0x2, 0x7, 0x200, 0x4, 0x0, 0x1, 0x3, 0x3, 0x8, 0x6, 0xa6, 0x80000001, 0x7182, 0x0, 0xbb, 0x8, 0xf, 0x9, 0x9, 0x7, 0x4, 0xfffffc00, 0x7, 0x0, 0x101, 0x1f, 0x3, 0x6, 0x4, 0x1, 0x80000001, 0x2, 0xa2c, 0x3, 0x6, 0x5, 0x5, 0x80, 0xff, 0x0, 0xc0, 0x9, 0x291d, 0x7, 0x4000000, 0x7fffffff, 0x8, 0x4, 0xfffffff8, 0xfffffff9], [0xffffff41, 0x3, 0x6, 0x7f, 0xd, 0x63, 0x7, 0x5, 0x0, 0x3, 0x80000000, 0x8, 0x0, 0x5, 0xffffffff, 0x8, 0x10001, 0x7fff, 0x3, 0x40, 0xfffffff9, 0xba4, 0x9, 0x49, 0xc4, 0x52000000, 0x5, 0x9, 0x3, 0x200, 0x1, 0x80000000, 0x2, 0x7, 0x1, 0x5, 0x0, 0xff, 0x2, 0x9, 0x169, 0x6a15, 0xd, 0x80, 0x101, 0x10000, 0x2, 0x401, 0x401, 0x2, 0x6, 0x1, 0x7f, 0x9, 0x7, 0xc8, 0x0, 0x3, 0x40000000, 0x4, 0x9, 0x6, 0x25, 0xffffffc0]}, 0x45c)
syz_open_procfs(r2, &(0x7f0000000580)='fd/3\x00')
ioctl$TIOCSBRK(r0, 0x5427)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0)
ptrace$setregset(0x4205, r2, 0x4, &(0x7f0000000280)={&(0x7f0000000240)="44f56859dce98fb34e02fd4a3bc2d719be5a65c3429e5e6d955f67aacd891ff902af81efd5b5180deebc6ef1", 0x2c})
setxattr$security_capability(&(0x7f0000000140)='./cgroup\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v1={0x1000000, [{0x4, 0x9}]}, 0xc, 0x3)
executing program 33:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r3, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
umount2(&(0x7f00000001c0)='./file0/file0/file0\x00', 0x2)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0)
close(r5)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x169900, 0x0)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r6, &(0x7f0000000000)={0x27, 0x2, 0x2}, 0x6)
ioctl$TUNGETVNETLE(r5, 0x40047440, 0x0)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-mkdir-mkdirat-mkdir-getpid-syz_pidfd_open-setns-openat-lseek-mount$overlay-mmap-mremap-mlock2-remap_file_pages-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind-umount2-openat$tun-close-openat$ppp-syz_init_net_socket$nfc_llcp-bind$bt_hci-ioctl$TUNGETVNETLE
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r3, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
umount2(&(0x7f00000001c0)='./file0/file0/file0\x00', 0x2)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0)
close(r5)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x169900, 0x0)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r6, &(0x7f0000000000)={0x27, 0x2, 0x2}, 0x6)
ioctl$TUNGETVNETLE(r5, 0x40047440, 0x0)

program crashed: INFO: task hung in dissolve_on_fput
single: successfully extracted reproducer
found reproducer with 29 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-mkdir-mkdirat-mkdir-getpid-syz_pidfd_open-setns-openat-lseek-mount$overlay-mmap-mremap-mlock2-remap_file_pages-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind-umount2-openat$tun-close-openat$ppp-syz_init_net_socket$nfc_llcp-bind$bt_hci
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r3, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
umount2(&(0x7f00000001c0)='./file0/file0/file0\x00', 0x2)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0)
close(r5)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x169900, 0x0)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r6, &(0x7f0000000000)={0x27, 0x2, 0x2}, 0x6)

program crashed: INFO: task hung in open_tree
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-mkdir-mkdirat-mkdir-getpid-syz_pidfd_open-setns-openat-lseek-mount$overlay-mmap-mremap-mlock2-remap_file_pages-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind-umount2-openat$tun-close-openat$ppp-syz_init_net_socket$nfc_llcp
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r3, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
umount2(&(0x7f00000001c0)='./file0/file0/file0\x00', 0x2)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0)
close(r5)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x169900, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)

program crashed: INFO: task hung in do_loopback
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-mkdir-mkdirat-mkdir-getpid-syz_pidfd_open-setns-openat-lseek-mount$overlay-mmap-mremap-mlock2-remap_file_pages-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind-umount2-openat$tun-close-openat$ppp
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r3, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
umount2(&(0x7f00000001c0)='./file0/file0/file0\x00', 0x2)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0)
close(r5)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x169900, 0x0)

program crashed: BUG: soft lockup in x64_sys_call
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-mkdir-mkdirat-mkdir-getpid-syz_pidfd_open-setns-openat-lseek-mount$overlay-mmap-mremap-mlock2-remap_file_pages-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind-umount2-openat$tun-close
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r3, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
umount2(&(0x7f00000001c0)='./file0/file0/file0\x00', 0x2)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0)
close(r5)

program crashed: INFO: task hung in put_mnt_ns
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-mkdir-mkdirat-mkdir-getpid-syz_pidfd_open-setns-openat-lseek-mount$overlay-mmap-mremap-mlock2-remap_file_pages-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind-umount2-openat$tun
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r3, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
umount2(&(0x7f00000001c0)='./file0/file0/file0\x00', 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0)

program crashed: INFO: rcu detected stall in corrupted
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-mkdir-mkdirat-mkdir-getpid-syz_pidfd_open-setns-openat-lseek-mount$overlay-mmap-mremap-mlock2-remap_file_pages-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind-umount2
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r3, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
umount2(&(0x7f00000001c0)='./file0/file0/file0\x00', 0x2)

program crashed: INFO: task hung in dissolve_on_fput
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-mkdir-mkdirat-mkdir-getpid-syz_pidfd_open-setns-openat-lseek-mount$overlay-mmap-mremap-mlock2-remap_file_pages-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r3, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program crashed: INFO: task hung in dissolve_on_fput
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-mkdir-mkdirat-mkdir-getpid-syz_pidfd_open-setns-openat-lseek-mount$overlay-mmap-mremap-mlock2-remap_file_pages-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r3, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-mkdir-mkdirat-mkdir-getpid-syz_pidfd_open-setns-openat-lseek-mount$overlay-mmap-mremap-mlock2-remap_file_pages-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r3, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-mkdir-mkdirat-mkdir-getpid-syz_pidfd_open-setns-openat-lseek-mount$overlay-mmap-mremap-mlock2-remap_file_pages-mkdirat-mount$bind-mount$bind-open_tree-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r3, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-mkdir-mkdirat-mkdir-getpid-syz_pidfd_open-setns-openat-lseek-mount$overlay-mmap-mremap-mlock2-remap_file_pages-mkdirat-mount$bind-mount$bind-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r3, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-mkdir-mkdirat-mkdir-getpid-syz_pidfd_open-setns-openat-lseek-mount$overlay-mmap-mremap-mlock2-remap_file_pages-mkdirat-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r3, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-mkdir-mkdirat-mkdir-getpid-syz_pidfd_open-setns-openat-lseek-mount$overlay-mmap-mremap-mlock2-remap_file_pages-mkdirat-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r3, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-mkdir-mkdirat-mkdir-getpid-syz_pidfd_open-setns-openat-lseek-mount$overlay-mmap-mremap-mlock2-remap_file_pages-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r3, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-mkdir-mkdirat-mkdir-getpid-syz_pidfd_open-setns-openat-lseek-mount$overlay-mmap-mremap-mlock2-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r3, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program crashed: INFO: task hung in do_loopback
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-mkdir-mkdirat-mkdir-getpid-syz_pidfd_open-setns-openat-lseek-mount$overlay-mmap-mremap-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r3, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program crashed: BUG: soft lockup in x64_sys_call
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-mkdir-mkdirat-mkdir-getpid-syz_pidfd_open-setns-openat-lseek-mount$overlay-mmap-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r3, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program crashed: INFO: rcu detected stall in x64_sys_call
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-mkdir-mkdirat-mkdir-getpid-syz_pidfd_open-setns-openat-lseek-mount$overlay-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r3, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program crashed: INFO: task hung in dissolve_on_fput
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-mkdir-mkdirat-mkdir-getpid-syz_pidfd_open-setns-openat-lseek-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
lseek(r3, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program crashed: INFO: task hung in dissolve_on_fput
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-mkdir-mkdirat-mkdir-getpid-syz_pidfd_open-setns-openat-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program crashed: INFO: task hung in dissolve_on_fput
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-mkdir-mkdirat-mkdir-getpid-syz_pidfd_open-setns-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-mkdir-mkdirat-mkdir-getpid-syz_pidfd_open-openat-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = getpid()
syz_pidfd_open(r1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-mkdir-mkdirat-mkdir-getpid-setns-openat-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
getpid()
setns(0xffffffffffffffff, 0x24020000)
openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-mkdir-mkdirat-mkdir-syz_pidfd_open-setns-openat-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = syz_pidfd_open(0x0, 0x0)
setns(r1, 0x24020000)
openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-mkdir-mkdirat-getpid-syz_pidfd_open-setns-openat-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program crashed: INFO: task hung in dissolve_on_fput
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-mkdir-getpid-syz_pidfd_open-setns-openat-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program crashed: INFO: task hung in dissolve_on_fput
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-getpid-syz_pidfd_open-setns-openat-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program crashed: INFO: task hung in dissolve_on_fput
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-getpid-syz_pidfd_open-setns-openat-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$SNDRV_TIMER_IOCTL_PAUSE-getpid-syz_pidfd_open-setns-openat-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-getpid-syz_pidfd_open-setns-openat-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program crashed: INFO: task hung in open_tree
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-getpid-syz_pidfd_open-setns-openat-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program crashed: INFO: task hung in dissolve_on_fput
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-getpid-syz_pidfd_open-setns-openat-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-getpid-syz_pidfd_open-setns-openat-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-getpid-syz_pidfd_open-setns-openat-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-getpid-syz_pidfd_open-setns-openat-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-getpid-syz_pidfd_open-setns-openat-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-getpid-syz_pidfd_open-setns-openat-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-getpid-syz_pidfd_open-setns-openat-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-getpid-syz_pidfd_open-setns-openat-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-getpid-syz_pidfd_open-setns-openat-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-getpid-syz_pidfd_open-setns-openat-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-getpid-syz_pidfd_open-setns-openat-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', 0x0, 0x0, 0x80700a, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-getpid-syz_pidfd_open-setns-openat-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
simplifying guilty program options
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-getpid-syz_pidfd_open-setns-openat-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-getpid-syz_pidfd_open-setns-openat-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-getpid-syz_pidfd_open-setns-openat-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program did not crash
validation run: crashed=false
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-getpid-syz_pidfd_open-setns-openat-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program crashed: INFO: task hung in dissolve_on_fput
validation run: crashed=true
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-getpid-syz_pidfd_open-setns-openat-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program crashed: INFO: task hung in dissolve_on_fput
validation run: crashed=true
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PAUSE-getpid-syz_pidfd_open-setns-openat-mkdirat-mount$bind-mount$bind-open_tree-move_mount-mount$bind-mount$bind
detailed listing:
executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

program crashed: INFO: task hung in dissolve_on_fput
validation run: crashed=true
reproducing took 4h12m26.354504993s
repro crashed as (corrupted=false):
INFO: task syz.5.89:748 blocked for more than 122 seconds.
      Not tainted 6.12.30-syzkaller-g2e58e85c038f #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.5.89        state:D stack:0     pid:748   tgid:737   ppid:677    flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5945 [inline]
 __schedule+0x132b/0x1e00 kernel/sched/core.c:7789
 __schedule_loop kernel/sched/core.c:7870 [inline]
 schedule+0xc6/0x240 kernel/sched/core.c:7885
 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7942
 rwsem_down_write_slowpath+0x9e8/0x1b90 kernel/locking/rwsem.c:1227
 __down_write_common kernel/locking/rwsem.c:1371 [inline]
 __down_write kernel/locking/rwsem.c:1380 [inline]
 down_write+0x152/0x2a0 kernel/locking/rwsem.c:1647
 namespace_lock fs/namespace.c:1714 [inline]
 dissolve_on_fput+0x2d/0x110 fs/namespace.c:2211
 __fput+0x867/0xa00 fs/file_table.c:441
 ____fput+0x20/0x30 fs/file_table.c:459
 task_work_run+0x1e3/0x250 kernel/task_work.c:240
 exit_task_work include/linux/task_work.h:43 [inline]
 do_exit+0x9b4/0x2630 kernel/exit.c:944
 do_group_exit+0x22a/0x300 kernel/exit.c:1094
 get_signal+0x139d/0x14f0 kernel/signal.c:2934
 arch_do_signal_or_restart+0x96/0x720 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x58/0xb0 kernel/entry/common.c:218
 do_syscall_64+0x64/0xf0 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f5ec898e9a9
RSP: 002b:00007f5ec9732038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: fffffffffffffffe RBX: 00007f5ec8bb6320 RCX: 00007f5ec898e9a9
RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000240
RBP: 00007f5ec8a10d69 R08: 0000000000000000 R09: 0000000000000000
R10: 000000000080700a R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 00007f5ec8bb6320 R15: 00007ffe570918a8
 </TASK>
INFO: task syz.4.91:752 blocked for more than 125 seconds.
      Not tainted 6.12.30-syzkaller-g2e58e85c038f #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.91        state:D stack:0     pid:752   tgid:751   ppid:673    flags:0x00000004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5945 [inline]
 __schedule+0x132b/0x1e00 kernel/sched/core.c:7789
 __schedule_loop kernel/sched/core.c:7870 [inline]
 schedule+0xc6/0x240 kernel/sched/core.c:7885
 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7942
 rwsem_down_write_slowpath+0x9e8/0x1b90 kernel/locking/rwsem.c:1227
 __down_write_common kernel/locking/rwsem.c:1371 [inline]
 __down_write kernel/locking/rwsem.c:1380 [inline]
 down_write+0x152/0x2a0 kernel/locking/rwsem.c:1647
 namespace_lock fs/namespace.c:1714 [inline]
 do_lock_mount+0x20d/0x520 fs/namespace.c:2618
 lock_mount fs/namespace.c:2662 [inline]
 do_loopback+0x256/0x4b0 fs/namespace.c:2782
 path_mount+0x582/0x1050 fs/namespace.c:3840
 do_mount fs/namespace.c:3859 [inline]
 __do_sys_mount fs/namespace.c:4069 [inline]
 __se_sys_mount+0x2bd/0x480 fs/namespace.c:4046
 __x64_sys_mount+0xc3/0xf0 fs/namespace.c:4046
 x64_sys_call+0x2021/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:166
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f1d1738e9a9
RSP: 002b:00007f1d18158038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f1d175b5fa0 RCX: 00007f1d1738e9a9
RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000200000000380
RBP: 00007f1d17410d69 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000002125099 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f1d175b5fa0 R15: 00007ffdf299e2f8
 </TASK>
INFO: task syz.4.91:753 blocked for more than 127 seconds.
      Not tainted 6.12.30-syzkaller-g2e58e85c038f #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.91        state:D stack:0     pid:753   tgid:751   ppid:673    flags:0x00000004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5945 [inline]
 __schedule+0x132b/0x1e00 kernel/sched/core.c:7789
 __schedule_loop kernel/sched/core.c:7870 [inline]
 schedule+0xc6/0x240 kernel/sched/core.c:7885
 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7942
 rwsem_down_write_slowpath+0x9e8/0x1b90 kernel/locking/rwsem.c:1227
 __down_write_common kernel/locking/rwsem.c:1371 [inline]
 __down_write kernel/locking/rwsem.c:1380 [inline]
 down_write+0x152/0x2a0 kernel/locking/rwsem.c:1647
 namespace_lock fs/namespace.c:1714 [inline]
 do_change_type+0x11e/0x510 fs/namespace.c:2721
 path_mount+0x43b/0x1050 fs/namespace.c:3842
 do_mount fs/namespace.c:3859 [inline]
 __do_sys_mount fs/namespace.c:4069 [inline]
 __se_sys_mount+0x2bd/0x480 fs/namespace.c:4046
 __x64_sys_mount+0xc3/0xf0 fs/namespace.c:4046
 x64_sys_call+0x2021/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:166
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f1d1738e9a9
RSP: 002b:00007f1d18137038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f1d175b6080 RCX: 00007f1d1738e9a9
RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000000
RBP: 00007f1d17410d69 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000100000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 00007f1d175b6080 R15: 00007ffdf299e2f8
 </TASK>
INFO: task syz.4.91:754 blocked for more than 129 seconds.
      Not tainted 6.12.30-syzkaller-g2e58e85c038f #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.91        state:D stack:0     pid:754   tgid:751   ppid:673    flags:0x00000004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5945 [inline]
 __schedule+0x132b/0x1e00 kernel/sched/core.c:7789
 __schedule_loop kernel/sched/core.c:7870 [inline]
 schedule+0xc6/0x240 kernel/sched/core.c:7885
 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7942
 rwsem_down_write_slowpath+0x9e8/0x1b90 kernel/locking/rwsem.c:1227
 __down_write_common kernel/locking/rwsem.c:1371 [inline]
 __down_write kernel/locking/rwsem.c:1380 [inline]
 down_write+0x152/0x2a0 kernel/locking/rwsem.c:1647
 namespace_lock fs/namespace.c:1714 [inline]
 open_detached_copy fs/namespace.c:2821 [inline]
 __do_sys_open_tree fs/namespace.c:2887 [inline]
 __se_sys_open_tree+0x34a/0x8e0 fs/namespace.c:2849
 __x64_sys_open_tree+0x7f/0xa0 fs/namespace.c:2849
 x64_sys_call+0x2d58/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:429
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f1d1738e9a9
RSP: 002b:00007f1d18116038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac
RAX: ffffffffffffffda RBX: 00007f1d175b6160 RCX: 00007f1d1738e9a9
RDX: 0000000000089901 RSI: 0000200000000640 RDI: ffffffffffffff9c
RBP: 00007f1d17410d69 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 00007f1d175b6160 R15: 00007ffdf299e2f8
 </TASK>
INFO: task syz.4.91:755 blocked for more than 131 seconds.
      Not tainted 6.12.30-syzkaller-g2e58e85c038f #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.91        state:D stack:0     pid:755   tgid:751   ppid:673    flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5945 [inline]
 __schedule+0x132b/0x1e00 kernel/sched/core.c:7789
 __schedule_loop kernel/sched/core.c:7870 [inline]
 schedule+0xc6/0x240 kernel/sched/core.c:7885
 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7942
 rwsem_down_write_slowpath+0x9e8/0x1b90 kernel/locking/rwsem.c:1227
 __down_write_common kernel/locking/rwsem.c:1371 [inline]
 __down_write kernel/locking/rwsem.c:1380 [inline]
 down_write+0x152/0x2a0 kernel/locking/rwsem.c:1647
 namespace_lock fs/namespace.c:1714 [inline]
 do_lock_mount+0x20d/0x520 fs/namespace.c:2618
 lock_mount fs/namespace.c:2662 [inline]
 do_loopback+0x256/0x4b0 fs/namespace.c:2782
 path_mount+0x582/0x1050 fs/namespace.c:3840

final repro crashed as (corrupted=false):
INFO: task syz.5.89:748 blocked for more than 122 seconds.
      Not tainted 6.12.30-syzkaller-g2e58e85c038f #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.5.89        state:D stack:0     pid:748   tgid:737   ppid:677    flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5945 [inline]
 __schedule+0x132b/0x1e00 kernel/sched/core.c:7789
 __schedule_loop kernel/sched/core.c:7870 [inline]
 schedule+0xc6/0x240 kernel/sched/core.c:7885
 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7942
 rwsem_down_write_slowpath+0x9e8/0x1b90 kernel/locking/rwsem.c:1227
 __down_write_common kernel/locking/rwsem.c:1371 [inline]
 __down_write kernel/locking/rwsem.c:1380 [inline]
 down_write+0x152/0x2a0 kernel/locking/rwsem.c:1647
 namespace_lock fs/namespace.c:1714 [inline]
 dissolve_on_fput+0x2d/0x110 fs/namespace.c:2211
 __fput+0x867/0xa00 fs/file_table.c:441
 ____fput+0x20/0x30 fs/file_table.c:459
 task_work_run+0x1e3/0x250 kernel/task_work.c:240
 exit_task_work include/linux/task_work.h:43 [inline]
 do_exit+0x9b4/0x2630 kernel/exit.c:944
 do_group_exit+0x22a/0x300 kernel/exit.c:1094
 get_signal+0x139d/0x14f0 kernel/signal.c:2934
 arch_do_signal_or_restart+0x96/0x720 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x58/0xb0 kernel/entry/common.c:218
 do_syscall_64+0x64/0xf0 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f5ec898e9a9
RSP: 002b:00007f5ec9732038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: fffffffffffffffe RBX: 00007f5ec8bb6320 RCX: 00007f5ec898e9a9
RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000240
RBP: 00007f5ec8a10d69 R08: 0000000000000000 R09: 0000000000000000
R10: 000000000080700a R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 00007f5ec8bb6320 R15: 00007ffe570918a8
 </TASK>
INFO: task syz.4.91:752 blocked for more than 125 seconds.
      Not tainted 6.12.30-syzkaller-g2e58e85c038f #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.91        state:D stack:0     pid:752   tgid:751   ppid:673    flags:0x00000004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5945 [inline]
 __schedule+0x132b/0x1e00 kernel/sched/core.c:7789
 __schedule_loop kernel/sched/core.c:7870 [inline]
 schedule+0xc6/0x240 kernel/sched/core.c:7885
 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7942
 rwsem_down_write_slowpath+0x9e8/0x1b90 kernel/locking/rwsem.c:1227
 __down_write_common kernel/locking/rwsem.c:1371 [inline]
 __down_write kernel/locking/rwsem.c:1380 [inline]
 down_write+0x152/0x2a0 kernel/locking/rwsem.c:1647
 namespace_lock fs/namespace.c:1714 [inline]
 do_lock_mount+0x20d/0x520 fs/namespace.c:2618
 lock_mount fs/namespace.c:2662 [inline]
 do_loopback+0x256/0x4b0 fs/namespace.c:2782
 path_mount+0x582/0x1050 fs/namespace.c:3840
 do_mount fs/namespace.c:3859 [inline]
 __do_sys_mount fs/namespace.c:4069 [inline]
 __se_sys_mount+0x2bd/0x480 fs/namespace.c:4046
 __x64_sys_mount+0xc3/0xf0 fs/namespace.c:4046
 x64_sys_call+0x2021/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:166
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f1d1738e9a9
RSP: 002b:00007f1d18158038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f1d175b5fa0 RCX: 00007f1d1738e9a9
RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000200000000380
RBP: 00007f1d17410d69 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000002125099 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f1d175b5fa0 R15: 00007ffdf299e2f8
 </TASK>
INFO: task syz.4.91:753 blocked for more than 127 seconds.
      Not tainted 6.12.30-syzkaller-g2e58e85c038f #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.91        state:D stack:0     pid:753   tgid:751   ppid:673    flags:0x00000004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5945 [inline]
 __schedule+0x132b/0x1e00 kernel/sched/core.c:7789
 __schedule_loop kernel/sched/core.c:7870 [inline]
 schedule+0xc6/0x240 kernel/sched/core.c:7885
 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7942
 rwsem_down_write_slowpath+0x9e8/0x1b90 kernel/locking/rwsem.c:1227
 __down_write_common kernel/locking/rwsem.c:1371 [inline]
 __down_write kernel/locking/rwsem.c:1380 [inline]
 down_write+0x152/0x2a0 kernel/locking/rwsem.c:1647
 namespace_lock fs/namespace.c:1714 [inline]
 do_change_type+0x11e/0x510 fs/namespace.c:2721
 path_mount+0x43b/0x1050 fs/namespace.c:3842
 do_mount fs/namespace.c:3859 [inline]
 __do_sys_mount fs/namespace.c:4069 [inline]
 __se_sys_mount+0x2bd/0x480 fs/namespace.c:4046
 __x64_sys_mount+0xc3/0xf0 fs/namespace.c:4046
 x64_sys_call+0x2021/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:166
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f1d1738e9a9
RSP: 002b:00007f1d18137038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f1d175b6080 RCX: 00007f1d1738e9a9
RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000000
RBP: 00007f1d17410d69 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000100000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 00007f1d175b6080 R15: 00007ffdf299e2f8
 </TASK>
INFO: task syz.4.91:754 blocked for more than 129 seconds.
      Not tainted 6.12.30-syzkaller-g2e58e85c038f #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.91        state:D stack:0     pid:754   tgid:751   ppid:673    flags:0x00000004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5945 [inline]
 __schedule+0x132b/0x1e00 kernel/sched/core.c:7789
 __schedule_loop kernel/sched/core.c:7870 [inline]
 schedule+0xc6/0x240 kernel/sched/core.c:7885
 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7942
 rwsem_down_write_slowpath+0x9e8/0x1b90 kernel/locking/rwsem.c:1227
 __down_write_common kernel/locking/rwsem.c:1371 [inline]
 __down_write kernel/locking/rwsem.c:1380 [inline]
 down_write+0x152/0x2a0 kernel/locking/rwsem.c:1647
 namespace_lock fs/namespace.c:1714 [inline]
 open_detached_copy fs/namespace.c:2821 [inline]
 __do_sys_open_tree fs/namespace.c:2887 [inline]
 __se_sys_open_tree+0x34a/0x8e0 fs/namespace.c:2849
 __x64_sys_open_tree+0x7f/0xa0 fs/namespace.c:2849
 x64_sys_call+0x2d58/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:429
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f1d1738e9a9
RSP: 002b:00007f1d18116038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac
RAX: ffffffffffffffda RBX: 00007f1d175b6160 RCX: 00007f1d1738e9a9
RDX: 0000000000089901 RSI: 0000200000000640 RDI: ffffffffffffff9c
RBP: 00007f1d17410d69 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 00007f1d175b6160 R15: 00007ffdf299e2f8
 </TASK>
INFO: task syz.4.91:755 blocked for more than 131 seconds.
      Not tainted 6.12.30-syzkaller-g2e58e85c038f #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.91        state:D stack:0     pid:755   tgid:751   ppid:673    flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5945 [inline]
 __schedule+0x132b/0x1e00 kernel/sched/core.c:7789
 __schedule_loop kernel/sched/core.c:7870 [inline]
 schedule+0xc6/0x240 kernel/sched/core.c:7885
 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7942
 rwsem_down_write_slowpath+0x9e8/0x1b90 kernel/locking/rwsem.c:1227
 __down_write_common kernel/locking/rwsem.c:1371 [inline]
 __down_write kernel/locking/rwsem.c:1380 [inline]
 down_write+0x152/0x2a0 kernel/locking/rwsem.c:1647
 namespace_lock fs/namespace.c:1714 [inline]
 do_lock_mount+0x20d/0x520 fs/namespace.c:2618
 lock_mount fs/namespace.c:2662 [inline]
 do_loopback+0x256/0x4b0 fs/namespace.c:2782
 path_mount+0x582/0x1050 fs/namespace.c:3840