Extracting prog: 1h36m20.212886924s Minimizing prog: 2h59m14.24472384s Simplifying prog options: 19m20.151031594s Extracting C: 5m9.234602429s Simplifying C: 0s extracting reproducer from 21 programs testing a last program of every proc single: executing 8 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs_ctrl-socket$inet_tcp-socket$nl_generic-syz_genetlink_get_family_id$ethtool-sendmsg-sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET-mmap-ioctl$BINDER_CTL_ADD detailed listing: executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) (async) sendmsg(r1, &(0x7f00000002c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)="bb3ff84ddc929ae24fe55c2622737c540e6987efac8a8e44ab13b0818511fe0a368ddc97b575f8f6c6f97a54b8836515991f59489251975098dbf7c87a91f640f4d2e4276c9a5f57b4bcfa3cfaf7e332fe047c98c76ae45be4b58a04ed88f2a9bf839e182bc5f510c624eb5231f3212d40ece161926ad91dfd7455d036691d022934f13ab2faf6d145a16337dcdf4403427f208f3c7c6ef02763c00511beb697cd309f2c1236366d413e28", 0xab}, {&(0x7f0000000180)="53e7f29bd5142db614158c4011ce5bdf50267ff329a40045336c788d401b08652b204c17663b99a4498bd3539680eb5b3870ad4b22daf64e4771e37cb83bc9434971909122b077fc624b633202a3237e6b005057ca7443d45cbcc56affdabeb2e035dd06c4c47eed1569a42df71282af6d7d1c2ea2fb69a1f88bf0ec33b6c327a723bed7e8cc514e", 0x88}], 0x2, &(0x7f0000000280)=[{0x40, 0x10d, 0xc6, "2e7ab84c7160fd5af74896a7869d3d0ca608bdc5b643db72cece9d6c6fdc3cf50f5f078ff69c317479f1"}], 0x40}, 0x40004) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000a40)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x4) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) (async, rerun: 32) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0) program did not crash program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone-socket$nl_xfrm-sendmsg$nl_xfrm-mkdirat-mkdir-mkdir-mount$overlay-syz_genetlink_get_family_id$nl80211-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$VFAT_IOCTL_READDIR_BOTH-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_GET_WIPHY-ioctl$KVM_RUN-syz_open_procfs-getpid-syz_pidfd_open-setns-setresuid-syz_clone-read$FUSE-ptrace$ARCH_GET_MAX_TAG_BITS-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-socketpair$unix-ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL-socket$inet_udp detailed listing: executing program 0: r0 = syz_clone(0x4880, &(0x7f0000000140)="80bc21a571092c1cf010caae195564476d832d53a47844df26859d33c27df9f6c772336d982f23307eed3f1ae95269d8b86cc0bb9a5731dfef3726d707939874d3ac867f9161b6ca273bb46d520d565b620ea1f013141dd1d26b", 0x5a, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f00000002c0)="350827225d57584e4a142ffa69920c57b32305fdb42db49f8a808192cd299219b68a0024045e76e8eef0d8734cd22398832a105f5127556607659b0ac664005f537f18086525650ca075be51b81e8c9825dffcd93c2b759027d2907897bf95a9c9b355af60656652d036adbe99add484c6b3769faa5b4ad7ff0c350ae7bbf709cefd905fd787d91b") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@flushpolicy={0x18, 0x12, 0x105, 0x1, 0x2, "", [@proto={0x5, 0x19, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20040810) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc8) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x40, &(0x7f00000029c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101142, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd8000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x54, 0xc, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, 0x0) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x28, r5, 0x200, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x16}, @void, @val={0xc, 0x99, {0x1, 0x1c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0xc000) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) setresuid(0xee01, 0x0, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) read$FUSE(r6, 0x0, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r0, &(0x7f0000000240), 0x4003) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x6, 0x0, 0x39, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x2000, 0x8000}}) socket$inet_udp(0x2, 0x2, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioprio_set$uid-openat$rnullb-io_setup-syz_open_dev$usbmon-openat$cgroup_ro-ioctl$KVM_CREATE_VCPU-io_submit-prlimit64-openat$incfs-sendmsg$SOCK_DESTROY-socket$inet6-setsockopt$inet6_udp_int-connect$inet6-connect$inet6-socket$packet-sendmmsg$inet6-sched_setscheduler-sendfile detailed listing: executing program 0: ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) io_setup(0x9, &(0x7f0000000100)=0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000240), 0x2, 0x12b102) r3 = openat$cgroup_ro(r0, &(0x7f0000000340)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) io_submit(r1, 0x3, &(0x7f0000000480)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r0, &(0x7f0000000180)="4d377ffadc3b708a410c423e3071ab043cccd588f130b7fccfbe620da0cad2df01368da6aab1cde37733a042ca1e3de35d9a7d7ed9f2ec076d0b434096f05f02", 0x40, 0x6, 0x0, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0xb18a, r2, &(0x7f0000000280)="736af0fe557b45c3abcd1309e9ffe1286751179de1e305469d603f6117135d03dfa158887365e260e1faa396e11ec4fda9f6f74d64dd0f11b8cfdc9cf0bf0d5cae522dcc6c35944fe6d32352429726e593c911fc47ad71d495d3208bb495bd4dd8c8c1f82341e381c00907626e8b5f7e7fb6af2aff0c32378ed6fa3d30b2fcab2949abba1f6f4ece4e177771a2", 0x8d, 0x7, 0x0, 0x0, r3}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x8000, r4, &(0x7f00000003c0)="2ed4ba8d62371a4d9a44285053880e840521dbe143c35fdce75deac28b5a441351842c73d9e77862102fc037193f9e6b54f032100a6544fed063151adef66601ae09e9", 0x43, 0x2, 0x0, 0x1}]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x8200, 0xa0) sendmsg$SOCK_DESTROY(r5, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000001180)={0x1264, 0x15, 0x8, 0x70bd26, 0x25dfdbfc, {0x2b, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x80, 0x1, "16f766eca1234d6d467ac275c71b6eeb0344e65b7b8a4c0314bf88b796b66cf6676d60f5276baff891227505eb1044472214bff0c9bb625b5e59ad2d6fe82f97991e8f78fb9eb605d39aa94b3d35d7f45118fa53ffffa8fb589a9ecae22c99f1cd8287e64ee339bf916854f25e18c4e5e674ad65ceb69507c68782d8"}, @INET_DIAG_REQ_BYTECODE={0x94, 0x1, "1b481c1759dbd6136735dd275316d1e244bb9cd2c2d2d9e6c5bc44482ef9c381fc454001e2dde5629216c1bea7af478a6cb707527e1a191c72eddd717e65f17cb7f69fa4346a9ad5d967cf7f179160597388b1dc1242eaf3be15419ef1a6483f4436528575720be56160ec165a70597f60b89d53cf61ffca2245a7dae2e4a00036d7e68d4a437b8df3d3231c0076ec9d"}, @INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "326220878f1cf2833457988ab2bbfa7f63d4d15e5c4f06cc22eadb2cba5bf55b755774cc07f338a5a34477a47038bca69aca970740a83521b0582c01bdd5843b7491a9eb6782686d6555996db1268508b61b7e82cf2d6330507999f0285a52086e3f2fe488cb5c99694ab95aafcf6f2b2075cf498b95ccb8a01fdb4db9c7f6b0c78a15aaee8aeb1c4af0018a10a5c9ec80f7042136ae8334bd80bed939651b4b448f5d864d72f6ea9d91c25155"}, @INET_DIAG_REQ_BYTECODE={0x16, 0x1, "a7340bac913c29b30761adec4efa3bcfede5"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "5f59eb090221440d43938a8ab12348578009773a1aa96d492c00667e14f84afd78ce038fe099e3407f35c4ada9c103eaee487567efd6d491f24e846da2c22d3d40176e90467d2a0c2b2cdcf12bf7452e6fbce426627f8b9c2184c5b09ebca9c7c95df7d79b8eb9b7483a7d62a722dddbd7d6c47ead2d4139b10b8d244b181644cd240a42cab637067106d66d6bb14cb014f8fe2999c73fd314383b24ca9db06ec05cd853e42be3441bf5cd137eae293b8216112bce85cda23f31ba2d66d73098d7eb6fcdca4a71d552dfc57e3d344544018ab8a022861ec1e74ed0a051b645660dbc7225adb49881bc9e1258dd5e4af69108eaf6c6f2fd10ac322add22225771d01ebb88c3626170ad1539513280582ec4311cbde2e9e600518bc1844d32208e9881eb541f7c3c830aeaa816c59f640204ca4c1ea9fd0cd01df0b3299f2678fa89937ddf01c4af3b61716515cdfc35b5ef1c2ab07a393b3f4dca1e83396a3c7c81f531563248e0eb8837de360a1e1c61651c2c58d666b0ff5e231d6203a759b5c2652107f93b21145dcd0c0411e8dadf966a6ab8742cd6be968df95aa1c34ad662d0f37e8d6d989d2f643e0846b578dd281b5133c83ba0b04c0f2d73b6c326ceabbad3b8c6991dd4e3e766dbddbe033255ac6fab415bf45c3dd44832e393ceb3f62710c1573d04a19014b101f0ca4f358f680f7b93ece47c0a87faacc22818a5a6617816163bc1479b42fee37e41fea52a98146b4f4d770c5f3701559c2382e33e69fb083edaed0737000ff642cef1fac7fd9c3798aedac2d17de192b35761b657f3cab79ae10fb404299c4466c8da805c367fccda3d949d219dd303294023950fdb252dd1bf467ed3d854cfa782c2bc85f82f4c00a0910decefb6f32e541b943069ab0cf2baa6303422d0c623079248fe38cc11ddcecd1363e13aaec63e261af604fbb1359f3902ea737f2452e7f2ba9346f656fd180aba22f514ddc4f07d413a1ff3edc181f3e9ebca71d595949ffda56f3880e608d2cee0710cb2f3f403d15660ee3a61786266631342b3e42f43e2acf450a989961019dacc397c9ea138109267bbf4a67730ff72d89a785aec639abbb88d479be4de0079556f64bbafd9d5919965deb6c022caeb24b53f8ae268836ef70a1d8f5d9bd45508a160ac8734ffb73a2249eb31309660e4d5bef1fe4ef2be41e990aa98f1bce62f06be67be3aaa9e17be422e3cae41b35aef0683826fe7c62b990816b7bf980a955da202c8115a3d714d4ec93c239bf894057b929256205f7d88550aff8ac420e74c70ed9c011bdb7b17cdd68d0a2e85c9f607aafcf4153720b476ea71df87cd09f6b98f8e6373afc49d299ede0393f2012b1efbe052e25d6778ca547280510c082c757def496162c67732bc071c309bec751d9bcdd3993bc11863673836f8f45c6de4772e06a6b29f72de172134407d19d58031177f612be49a842f47277c0e9f4b513c80ba0f558e7053e0b9b9c2e8e0304d23bfe12f820145a63aab1c609f345698d258955faa7eb9625b93fe2ce90709922afcbdc367c7b5b535cfad3b1d5b9097e609a3f453365800cc6cdf8dfee513850065636443b2830e8fa5480d78b5af8c2a0565ae51c234d7e204bff7991a8b9f70f3c2d858daa8e6fda3fef518da26b8d2f449ae132a3522361ab38fedbd2cb239c71c5d525a47f20b6a2b2bcc58cd2048cd9103f15c4d853531f0b26021d89d3b514ae96cde119dc92fecf083a8f459731775824c09746a84fba2b574ddcf4f7c0f3747992fd85501891b8011d69a3b5cc1e8ca9d36724e02a03b216b7380bfcb69e999eca9f570f622dc563592f69970ae58b9811fd15c05223012478075e1e5db7e5f7f8e0f565bb2879933f59224412790388f703ba71f9c117f73e1e83bc8163a4154fb2842f86cadd9f92383a834630c4f2a23bb5c2c66ce1f13b8d4ea834aa35face07df4e5ab6d59e36e4ace34da3af5fea8913aceb26f34312ef43a6e9289d4a65cdfc3347ed915003a7a3826a4f379127a2493172e3a5fd9ee9817b620e707f0fdbbdfba28d699bef47c94707372ba75109d762eb9acdf85bb5e51a2b8b5582f8a65643df5c9fb47bdc3db654cac885ab92ddad9edcbe584882387ecca37d5ffd45f7e6a0fc0c39dc04dbcec7e2b12c2b1fdaee20bb8a04907de443750d71fea52ad5dbfe127082a612c0f4d2edc985e8ad2934ffab5ce5760b1f27ac291b621f9e926cf86743c1a73f5f2d02e3de125f6c1cc5e78e22386a9132df215c1ccfaa8d4a2df569405dce1c55f6acebcede1c7d940642cac2bf2cea3b4bfb3c53833c5a7eba354e3ddbf5f09106b3d59f9ee1c345dad9e6d553914bb6e8e1609bdf6434fcbe5eb120f6888c7c79204f233525fbe3b5733aac31c0acca534e4685a40c8305a62c56958ba69857e205a153b3e48fe874b9ab6d57fd1797cf9d4d8b56df91f2c1b76c72594354789570867061a63614869fded6315d35d34cf2725046202a02b7dd8e2e3bfab41f67c35784bff34f795981d9eae80ca72878408db7d6c0aa308190e3684f917272712c954c87c38d7e28eb094882a03ff6761981749776f279bc33bea38764cba2509f045ddc095646e21723be819eac272020776d710fe4cc25579f9f4f920e46fefdadf5e036df7d7431b7800785ca090c85367a996d637cf624083e1bde9681463186c46580522ad0ed4662a5d3440efece99cd987fe7390103538a14bcc38fd951e4e992e31ea6f67f66b86f050c38fddcd46462e7ba2b7a7040da3e69fb200084133937efc255dc031e57d108f5409c9c4bac21cbb3ce333b8f39943c9a0ae5634c9d65eff33eedf8babf853896fb61be0dc0d62fa2696c64212ed9d8f0b83d9c2a1387f8796b759b737bcd157c3f817633d6948ba13b1be6fb75ca2fc5ee3faf6c3518e0a80d2c1c5eebc405868cadfc7228353e19d15d758abdc45edde64b40d207202a44901898e206fc19ad3a6ef41c544b21f14ce7de235d9a967a6aff02d1938880dac2fcd0e1a42fcd8651cc0c7f9cab0b0cab7b96b24a362a46ceebfa5ebc633686a86ca180fda426fdbe3d6f5ce8e3f412bf2348210819d5327101e29cac2d048cad109f358be4a5ef92a1256eb484202d4cac5fcfc4767b6af2d5e99ba270d07bb06e4532fff728a5472b3cd7a665925e7c8b1a40ea4dc1a9fbf4723bea9de5119e982a10e2cadff372ec460f1c01aadca18d9f19a13811a5102ba0d132f6d20357dca71062ef76a344067411de200b0e1f87cc310f22657d6e3532c9f7bb147425f4c7444362d1c7957b8d2ac314aad369c4988ea83f288e1bfd246cd3de7b52a0612c4bbc0afa322ae8cda128374a2d0c7d96c72df1a039050dc688cc579a9b5acec1b90b6a31bee2ab7ccaa86432c15c53d0493135a24ff77e614907603889359674df34ea6610cce86d7ee63355b042dc2b4518527fc94e5d31cd28e23a4b04d64706b2a6b60c62a179400dbc11c0a204b02e752df2fcee904f2b5eeb63ad917e63efd74a407467881c54250fd45d71e476734ece9da9eb78a2014d26b7cd3f59c18cf6cd91d0a8ba8e4fc45a752e22a1eba4259f8e5fccc4d13f91ff1051c320f44778b6444a92fcf015442aa0fd8dc81d714ecceaa6a3d829bd59bde250da22a614120817a609fa80deebb36ed2a75173f0e88ffcdcbd08c81a90a307e9b1628f4813e0c623ffd9fae5430370e4bf04925b25950bb26fb702d12910a0b5a2a7f11284337defba8b419d1d5808d5b731ca37732b201ffe9217a1d3990c4ffd78a2bc1d36bc2eedf3f0898e357a09e6ab2122a393c85c6c1dca749f1087f5c8dbce2241320fba28426986185ad38732d2f99491491120fb65731cd89e96d4bd82e6545e42a454c8eb0febc669f80f193820ae1601910f6061e6c8c76b967cba1365642765cc5bd75ac59ae5414976e0777ad9a6dc0012d28b573a7cd8e7224eb1d77798db7f2100f23385c3c22c5cfe22f0b8cdf41147207c8892861496616bc30b1d78777221d1e0bfc022ec1c5eebf4639061e3b2139a8c366b6cd0d50d7ac16266bbb8737fc8f307d41c3b7fb967508c30803585e64fa0bb3ddc1516d8b16615053aac384fc8e3c8d0f1342eb04d6ee8f044e9b0dc24ed55394831cc2eca7e860d9a54f2c59b7bccdac68e6c760486075aeb35c4d81c0250d457f9881a7b12f6ed3dadc5e33529bee2abe94d84736fa2ec23f16b14b7eedb35eda2e63e55f49bf4fec30803cc78202b710b6ff3289dcc1789f0829bc32a34074bfef32da58e0755988c125df7dde0dd0c1d1be958e5688dc6973f0aa91917fe7d2f8c4e4d277e2d705ce872b45bcb64f68ea99926fee05c959bc86dc1401d8271276fcddb5202c8030e6888df3cd0bda26a621845d24659dc06115d9a73f1fce6dab94bb8bd715a6e03b45ade28cc0ac5e20ef7af667597f64a0840449a32a9d33c8d42da6b9804e6c47028d33fb5ff588d1294a0dee763d21542ec17e2a1229ee394f8e2e382fb086c8fcad6a5cc30fcb71473804e6f6e8d9731afce53965d7dce682dd883ce2b3bb159b4a216e7a3d7d8de472f0d6e1c723960359a480ae8035c9ee02c6482272f91d1159ff98bf88de6789d60102c1f202ee2f695d42a03b48d5b5d7bdb59d95e461f608fc3b3b23cc608d9d8c6b0bae950d88e7bb2428fed8412e4c51717a9bfc651575d129f204950b6bf2136cc1f76817de3d83768a3f38d53671c1d434e9f39e09148c13be3fc693678f5fc0018c9940dd8fab605a82948d72c2bab466dcfa861f8a8601ee73e305199c3238718366e1686e6356338d3bd044db986de1e63757b1942781ff66bff998b65db1455f9080ba0a56bd23c13feee8e67bbec6fdb444724dcd7b2c41eab4280ed4673f4eeba802a470d113911c1b48f34f2a52b270116faa2c637a298fd77df7e54c45e50c19799556d44c3c8fea19fad4412a8b8ba89291963290c2c221cdc5f0564d710d07df602e532c42a4a15430bf61dc67412e48e6252aee08220f35fd37336450f132e3b62e0980bbbc4e073eccfb3fe58bf441da83a94fe793b08864467f33b9b1adb094628488cd33f8f0cb3cd3bcae27e954a5c0862d9bf53708bf4e834dd3f11d5b3bb7cd887d2ef96dc070d419894ebf205a6db8301b53532301184390d04feb30b01c06e8c16ca8e9ec1415107751ed0dad2b19a59c77d463b4c99e373aa3bd33c69500a811ddbcd64ed78a317646180daed7619849686072460ae05c875fc91e1a8cec4a9aec7f6fb3e6ea0e1f893156e431307d71b10c963e5ba9aab753f415b94d5601aef2630523b1659ab12d0ea7ac90b6cad40eb93527e94a7e4be0b96a11bca85b7efb11affcfe1f06d3390ab449bdf263f8b3ebd95917b64ab6db5b2a2e1f8b02cbefa4edbe3a1ae720668c7d0525a847fe48a0c1f814aec2637b8e4de65b322984b081b24fad69f12dd6c307b02c210c6635bdcff1cdfdc5be9c5652b2e861c17670aa0ec675ec183235e8255777f3f154ddbc96fa2c7b83ae97d7a6db7e95b7095d829f747293de8c35656002da0f0b7eccd89afd58d50c798f2f2b9024b558dd71ae462589fe882bd8acd2c0d954406fa4454b350ed917cbb723a7b90f32e32cd7da232dfa71bc570d7f54a41b7b602d9f051ca1ec586d7500f29fb93a64beb842f6e72fac3c8fe20e04883c3a4cbdc1a78b1a62d5f7c52a32e818fd6ab37709c2f69fb0e6af4832905306378ce8e94632242084643d6ef27b3bae251bd0847f14"}, @INET_DIAG_REQ_BYTECODE={0x6c, 0x1, "bac74a0557919ab591a26c9bd30a7f00f33adf22d3da72e5d7e9629a95393e3a4d0b0e20e418ebf4eca57e47a3a5fadaff34b52436045964b10789ee8f52aa6406ede53d78ddd669e485a6a846fad93d0964199f5461f7aeada3e5fa63f56c610ea2d9b22a84ce7c"}]}, 0x1264}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendfile(r0, r0, 0x0, 0x7ffff000) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$kvm-socket$inet6-sendmmsg$inet6-recvfrom$inet6-ioctl$SIOCGSTAMP-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-openat$uhid-write$UHID_CREATE2-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$sock_SIOCGIFINDEX-sendto$packet-getsockopt$inet_mreqn-socket$packet-socket$inet_icmp_raw-ioctl$sock_SIOCGIFINDEX-sendto$packet-ioctl$sock_SIOCGIFINDEX-ioctl$ifreq_SIOCGIFINDEX_team-ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$ifreq_SIOCGIFINDEX_team-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$ifreq_SIOCGIFINDEX_team-sendmsg$TEAM_CMD_NOOP-mmap$binder detailed listing: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r2, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x10000, 0x0, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000c00000000100c0"]) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYRES64=r6], 0x119) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000280)="05031600d3700ee1a880", 0xa, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @remote, 0x0}, &(0x7f0000000200)=0xc) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r9, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x8100, r11, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'nicvf0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x80, 0x10000, 0x10, @empty, @private2, 0x1, 0x8740, 0x8db9, 0xd}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x8, 0x7b, 0x3a, @private1, @mcast1, 0x700, 0x7, 0x7fffffff}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000540)) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000b00)=ANY=[@ANYBLOB="e8020000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fbdbdf250000000008000100", @ANYRES32=0x0, @ANYRES64=r10, @ANYRES32=r7, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r11, @ANYRES16=r10, @ANYRES32=r12, @ANYBLOB="0400028000000500", @ANYRES32=r13, @ANYBLOB="0400028008000100", @ANYRES32=r14, @ANYRES8=r14, @ANYRES32=r15, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040004000000080007000000000008000100", @ANYRES32=r16, @ANYBLOB="780002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r17, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000008000100", @ANYRESOCT=0x0, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400020000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB], 0x2e8}, 0x1, 0x0, 0x0, 0x24044000}, 0x10041) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs_ctrl-socket$inet_tcp-socket$nl_generic-syz_genetlink_get_family_id$ethtool-sendmsg-sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET-mmap-ioctl$BINDER_CTL_ADD detailed listing: executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) (async) sendmsg(r1, &(0x7f00000002c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)="bb3ff84ddc929ae24fe55c2622737c540e6987efac8a8e44ab13b0818511fe0a368ddc97b575f8f6c6f97a54b8836515991f59489251975098dbf7c87a91f640f4d2e4276c9a5f57b4bcfa3cfaf7e332fe047c98c76ae45be4b58a04ed88f2a9bf839e182bc5f510c624eb5231f3212d40ece161926ad91dfd7455d036691d022934f13ab2faf6d145a16337dcdf4403427f208f3c7c6ef02763c00511beb697cd309f2c1236366d413e28", 0xab}, {&(0x7f0000000180)="53e7f29bd5142db614158c4011ce5bdf50267ff329a40045336c788d401b08652b204c17663b99a4498bd3539680eb5b3870ad4b22daf64e4771e37cb83bc9434971909122b077fc624b633202a3237e6b005057ca7443d45cbcc56affdabeb2e035dd06c4c47eed1569a42df71282af6d7d1c2ea2fb69a1f88bf0ec33b6c327a723bed7e8cc514e", 0x88}], 0x2, &(0x7f0000000280)=[{0x40, 0x10d, 0xc6, "2e7ab84c7160fd5af74896a7869d3d0ca608bdc5b643db72cece9d6c6fdc3cf50f5f078ff69c317479f1"}], 0x40}, 0x40004) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000a40)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x4) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) (async, rerun: 32) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone-socket$nl_xfrm-sendmsg$nl_xfrm-mkdirat-mkdir-mkdir-mount$overlay-syz_genetlink_get_family_id$nl80211-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$VFAT_IOCTL_READDIR_BOTH-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_GET_WIPHY-ioctl$KVM_RUN-syz_open_procfs-getpid-syz_pidfd_open-setns-setresuid-syz_clone-read$FUSE-ptrace$ARCH_GET_MAX_TAG_BITS-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-socketpair$unix-ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL-socket$inet_udp detailed listing: executing program 0: r0 = syz_clone(0x4880, &(0x7f0000000140)="80bc21a571092c1cf010caae195564476d832d53a47844df26859d33c27df9f6c772336d982f23307eed3f1ae95269d8b86cc0bb9a5731dfef3726d707939874d3ac867f9161b6ca273bb46d520d565b620ea1f013141dd1d26b", 0x5a, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f00000002c0)="350827225d57584e4a142ffa69920c57b32305fdb42db49f8a808192cd299219b68a0024045e76e8eef0d8734cd22398832a105f5127556607659b0ac664005f537f18086525650ca075be51b81e8c9825dffcd93c2b759027d2907897bf95a9c9b355af60656652d036adbe99add484c6b3769faa5b4ad7ff0c350ae7bbf709cefd905fd787d91b") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@flushpolicy={0x18, 0x12, 0x105, 0x1, 0x2, "", [@proto={0x5, 0x19, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20040810) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc8) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x40, &(0x7f00000029c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101142, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd8000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x54, 0xc, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, 0x0) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x28, r5, 0x200, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x16}, @void, @val={0xc, 0x99, {0x1, 0x1c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0xc000) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) setresuid(0xee01, 0x0, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) read$FUSE(r6, 0x0, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r0, &(0x7f0000000240), 0x4003) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x6, 0x0, 0x39, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x2000, 0x8000}}) socket$inet_udp(0x2, 0x2, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$kvm-socket$inet6-sendmmsg$inet6-recvfrom$inet6-ioctl$SIOCGSTAMP-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-openat$uhid-write$UHID_CREATE2-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$sock_SIOCGIFINDEX-sendto$packet-getsockopt$inet_mreqn-socket$packet-socket$inet_icmp_raw-ioctl$sock_SIOCGIFINDEX-sendto$packet-ioctl$sock_SIOCGIFINDEX-ioctl$ifreq_SIOCGIFINDEX_team-ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$ifreq_SIOCGIFINDEX_team-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$ifreq_SIOCGIFINDEX_team-sendmsg$TEAM_CMD_NOOP-mmap$binder detailed listing: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r2, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x10000, 0x0, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000c00000000100c0"]) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYRES64=r6], 0x119) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000280)="05031600d3700ee1a880", 0xa, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @remote, 0x0}, &(0x7f0000000200)=0xc) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r9, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x8100, r11, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'nicvf0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x80, 0x10000, 0x10, @empty, @private2, 0x1, 0x8740, 0x8db9, 0xd}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x8, 0x7b, 0x3a, @private1, @mcast1, 0x700, 0x7, 0x7fffffff}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000540)) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000b00)=ANY=[@ANYBLOB="e8020000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fbdbdf250000000008000100", @ANYRES32=0x0, @ANYRES64=r10, @ANYRES32=r7, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r11, @ANYRES16=r10, @ANYRES32=r12, @ANYBLOB="0400028000000500", @ANYRES32=r13, @ANYBLOB="0400028008000100", @ANYRES32=r14, @ANYRES8=r14, @ANYRES32=r15, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040004000000080007000000000008000100", @ANYRES32=r16, @ANYBLOB="780002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r17, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000008000100", @ANYRESOCT=0x0, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400020000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB], 0x2e8}, 0x1, 0x0, 0x0, 0x24044000}, 0x10041) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioprio_set$uid-openat$rnullb-io_setup-syz_open_dev$usbmon-openat$cgroup_ro-ioctl$KVM_CREATE_VCPU-io_submit-prlimit64-openat$incfs-sendmsg$SOCK_DESTROY-socket$inet6-setsockopt$inet6_udp_int-connect$inet6-connect$inet6-socket$packet-sendmmsg$inet6-sched_setscheduler-sendfile detailed listing: executing program 0: ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) io_setup(0x9, &(0x7f0000000100)=0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000240), 0x2, 0x12b102) r3 = openat$cgroup_ro(r0, &(0x7f0000000340)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) io_submit(r1, 0x3, &(0x7f0000000480)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r0, &(0x7f0000000180)="4d377ffadc3b708a410c423e3071ab043cccd588f130b7fccfbe620da0cad2df01368da6aab1cde37733a042ca1e3de35d9a7d7ed9f2ec076d0b434096f05f02", 0x40, 0x6, 0x0, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0xb18a, r2, &(0x7f0000000280)="736af0fe557b45c3abcd1309e9ffe1286751179de1e305469d603f6117135d03dfa158887365e260e1faa396e11ec4fda9f6f74d64dd0f11b8cfdc9cf0bf0d5cae522dcc6c35944fe6d32352429726e593c911fc47ad71d495d3208bb495bd4dd8c8c1f82341e381c00907626e8b5f7e7fb6af2aff0c32378ed6fa3d30b2fcab2949abba1f6f4ece4e177771a2", 0x8d, 0x7, 0x0, 0x0, r3}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x8000, r4, &(0x7f00000003c0)="2ed4ba8d62371a4d9a44285053880e840521dbe143c35fdce75deac28b5a441351842c73d9e77862102fc037193f9e6b54f032100a6544fed063151adef66601ae09e9", 0x43, 0x2, 0x0, 0x1}]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x8200, 0xa0) sendmsg$SOCK_DESTROY(r5, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000001180)={0x1264, 0x15, 0x8, 0x70bd26, 0x25dfdbfc, {0x2b, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x80, 0x1, "16f766eca1234d6d467ac275c71b6eeb0344e65b7b8a4c0314bf88b796b66cf6676d60f5276baff891227505eb1044472214bff0c9bb625b5e59ad2d6fe82f97991e8f78fb9eb605d39aa94b3d35d7f45118fa53ffffa8fb589a9ecae22c99f1cd8287e64ee339bf916854f25e18c4e5e674ad65ceb69507c68782d8"}, @INET_DIAG_REQ_BYTECODE={0x94, 0x1, "1b481c1759dbd6136735dd275316d1e244bb9cd2c2d2d9e6c5bc44482ef9c381fc454001e2dde5629216c1bea7af478a6cb707527e1a191c72eddd717e65f17cb7f69fa4346a9ad5d967cf7f179160597388b1dc1242eaf3be15419ef1a6483f4436528575720be56160ec165a70597f60b89d53cf61ffca2245a7dae2e4a00036d7e68d4a437b8df3d3231c0076ec9d"}, @INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "326220878f1cf2833457988ab2bbfa7f63d4d15e5c4f06cc22eadb2cba5bf55b755774cc07f338a5a34477a47038bca69aca970740a83521b0582c01bdd5843b7491a9eb6782686d6555996db1268508b61b7e82cf2d6330507999f0285a52086e3f2fe488cb5c99694ab95aafcf6f2b2075cf498b95ccb8a01fdb4db9c7f6b0c78a15aaee8aeb1c4af0018a10a5c9ec80f7042136ae8334bd80bed939651b4b448f5d864d72f6ea9d91c25155"}, @INET_DIAG_REQ_BYTECODE={0x16, 0x1, "a7340bac913c29b30761adec4efa3bcfede5"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x6c, 0x1, "bac74a0557919ab591a26c9bd30a7f00f33adf22d3da72e5d7e9629a95393e3a4d0b0e20e418ebf4eca57e47a3a5fadaff34b52436045964b10789ee8f52aa6406ede53d78ddd669e485a6a846fad93d0964199f5461f7aeada3e5fa63f56c610ea2d9b22a84ce7c"}]}, 0x1264}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendfile(r0, r0, 0x0, 0x7ffff000) program did not crash single: failed to extract reproducer bisect: bisecting 21 programs with base timeout 6m0s testing program (duration=6m5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 15, 21, 30, 11, 29, 6, 12, 27, 18, 9, 6, 28, 30, 30, 4, 8, 30, 18, 30, 8] detailed listing: executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x111000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x76}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x48811}, 0x40010) sendto$inet6(r0, &(0x7f0000000180)="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", 0xfe, 0x20000880, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) mkdirat(r0, &(0x7f00000002c0)='./file0\x00', 0x2) sendmsg$sock(r0, &(0x7f00000016c0)={&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x3, @random="fe9ea2b4f56e", 'ip6erspan0\x00'}}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000380)="b29d0ba677041f3bec4662bc154803b3e60f364b04d5e50245e738a7b3fa95ced19c21a91e48effddbd9ef0443979657e5919485e5ae42a630180a44d0ce8f1018a03676f0441fed88755284a435a9028f8b319c316cc294c2d18f2c0cc314710e0dea6544dadd81daafdfe89f8b834317ca596ba0b0fb217e7340add8a7ff", 0x7f}, {&(0x7f0000000400)="7bf4f9bc8985cb595cc4e0847e7fb9eefcb88fe10481a7bba95ff8bbfd94c2cc19f16f9d86e2864a01a63ab1146ca9036cde0fd2415ac5ec2564d9b118020a25132ab261eb5ba4e906d591f73746f9a2dfc3d88d8d5812f05cf1d00fb65a98", 0x5f}, {&(0x7f0000000480)="18a5e3af3a8880ccea086f6974d37ea021ad445b1d43c043d7a51cb7bdc498e842bd6fe3a23641495e2333d75d4c6488d5c20293d2dfce916c042d489710f64764e9e5d1c6f3bbd0cd3a51512eb7e97a9088315abb8c51d86038f96388394ebb6e15026b386cac4ce847be7b08283a28b0e2ef15d8ea6c9ce375d803f19c1e57eaee5de45092db302d4166110d6a61f3884e08d25d5c6efa75bbd4002f5aa2d70de909312c7c8262594ce447bfb8e8617bde31738c9eca3f5f426162d02960ceab670ec1eb1fc9c132a901b4f80e523fcaabd3a2b0d465fc23a47427e656e82c3ecca8b8f5494784d2e2c84dc3f1cc87baa0ed0be9409693795f5972aa57e0f8a63bc4c0f081c2aae14b3b5cf62e51cb394cad9ccd9113b7ec3da869a8f4375c0b18bd57ea1dfc8b75cf37a420d927721a56217410abf4ba131e6d75e7803fecc6db1c02bfc0c636dba11297ee5a7156aa794fb9fe55ea183c9c38f37f79e34ffd9b48d17dd9d3d0bdbdb7c018a9054c5a10caf7dad62b9b01f2c7711914ceb12dd01ddc5c3aa781e4e728bf1328e8222ccff1a3cc893a8e2bc21037ad2f13803c784be4ab4c60b1910b13b991c4e0878650903a4937c15330e85cfce8f62fd8a69bccbae8df236e740845f0ee01c5913a6dfbd0937b4cd685461b0fc1e273971aa82cae5290bc0587a7e88cf140c289dc3aed272c35f61f2bd206d3ad3fe5c6444326b96445057718f8df1360a60f6fdaaabd6b7c9ae1ba65dfe0fe28101fc068bf2f33e6cf374e6801aa526d14d3472f4d7382440f81d63c8ed242c93303dad305b1c65d178086b24b656717c644187954332ef31bb2974591fcaa070d0f89fc8e2889427e21d520ac06adc6fd1905fc42f765153e1daa75d9757484b091470ac9f36c2e1b208abf35c925bd7d9ca4732f63f0bb2acc1486122fc0d0096f4c0c12a0b796875908c97d143eef97aaa4086dd20770fd25c1e98a6f9bf3e0804e9c88bcc8a6f684a99aef646425221fe0ba96b0a4a4557c06e34d0c378d0c58af8098524c636eac7918eb58287923d6fce6227a890ac08a31c15ba818e79317d072e66b1aa3ae98506b101ac58c95a061a476b6b3582e8565ba795baf3dc074bad7e86ca98b455b13646793d80c7b50ea6c3b62e0074ccb5bf2dd2891a855411113d70568cb8b9454b805db953496bbbd7ac0119a07f4abfae50cbd0fbef8bfea543e1524b0b5c694e281edf3d959d848d5a92af61a56350e12c915aea1fd59251dba9ae18212ca927aad7e954dab22ab9d2b3d041722d634a92daab1a5fd6a637f903222b08261a7b698a91d1b41601ac65bcc9e0d819f96a4017093b7d2e6a840513f50e143cde37fa14b8744f82cda5e6680979fd292869b62617e79f4d34cb0d8720ddf4cd661ee0b0c205f752f857f713b1ed59efdd73c282306588da31274320626d66b711c3dd41539dcc71b9d200220b5516501c939c70c02bcbb6e47fc71309f927b9df96dff6949b00252ae28d2b9ff24d71ce1597f7755ba7f136a9298eab470c4515303da6a1ad16ade1e4c00ff319ec2abbf27bfd888d4195cff01a07976e00c6bc4f2c41f1eb6ce68999512aa91bf91702c73c37f1604f91a400805dd11c652a49e0fbd1b82c374458872903cdef004e807214cf048c85186f5b14ff19b1c98a9897f0e94c277e916e4b8b3be253e6319a738b243b12b2aca5ca8efe40e1c2e56c042aaaf3691d1d8e3ea37b7548ffeee43bcf416cf38d53f36a452d3aeb3bf5d51bb65881ffc1698477c14c82d38ab615d731dcbdd29cfc23b972029d2a62ea6c6545066139d0232ac7f47397724fb2d5ba6ad6f081a5d15b826ddcbc7abd50f9cb99e2c3124db9b29ddad15d5f40f8280467a37f65509b2d2477b1f1c6ed05134cdb2a8f078917bf98c0d22f474faf612aeabf251aee93a5104b71aa3df361316cf4185641e757b0075b853d1a56571253d4d745cdf2a893f8201bc36d71aa4d493079b8b9154e3867c6ae5e55d92ae977b384ec4d80486586077f9086a8459a10cfce224de840e00b6c3e9f890c8928e953d1e53bb37d46a23cdd86edb04f7fc2826a61c0b0373a005d3e5ff64523c698a57585034eaf6f59d84183a67599168f13b8a647b5b81dd62e257ead18af3067f66162d1c677917d7af3679af9a5217f51d3be61e8ae9889764be365346c44ac8c4e31ee684aa72fdbe981abaf1deacfcf134b3014637741fa7746a993d5baafe1a1ca526f8274c024fbaf421cb70708b539a976c858f3144829af4ba6ba88d5cf1b8007e1ca3f02b9334f860e61734e7c4e5cf19c9875b54246c6c08e1004cdedc4441208dbc7772a557e64d425fdf25a797245f31d9b2123b01e00ef3fcfe530a5c560aa4be761f661f56a9afe5b171e653202eb623d25960a997cb15448160e585b73e3a8310a13039ca05fb8c8553b55bd52223d0697dce5f97004b306abfa83caa1525447ba6e3e4ab5109f04c26a5da1cc57a736986da63093e4f60b2b5e18352b50150322c547e74837a13731514298e17334b31cb96d575dcc9418bca38ce6611e8e692777b72db65aa0607f477fb74efbe6894aab5132818a8359ba012c16d89407ddcc6f255272af68f1710863a19bcbe3fa360cb7df29f8328e48e5730c4662ec026526d5441236031fcdec3045502b0c82238640a58f48d42bde156ccff2c2e81ae381fec1842187db9ea0b0e691cbcb69924877b4cf5cfc3a65a5d9eec2e1204202e31586fb15f28c9b0fbfbd5e7869e4b83415b9451a0c2945d6438010a6908278a740389cede2c14c2e649a42cb93bf9c8f501df307721cad3c7123b00ab62526a390536b2a420c3725b33cefef9acc1e68bc8423e00a06c857569b3214cd2d4e180e2ce8e98f16caf970661d7c40206f5164d0e3d1508a9b03467e4c5eb9d6fffa305b079d4c56ab27054d96a8489ec655d7bd72ea213905f4dc82f5fe6b40619c3ef7b81aa1126d62a763dc80a1de0be1edc27b11efc0e7e27b4578036d6175397442c8cf29a1d01c93e4f4f50b7578b10a4a887e8abfac0c2e1eadaad23c6e1d07fc54ad3393eaf160acd4664a3a055ad8a85559ec37cd407b134614409b9e9df7b9d17663f4ef9f5f40a71bd4448a3c82512da59ed85ba68fc79f18a76c9deb739bc7a68d4a958423351ca92c55c4cf6e00c6ace2a0bf107276a31e931ad9f20dc4f228f5747726aec726dd95e748e6c1a132aaea374cecfb13e73bc6fcb2805e272f123b11253d8969869441f2c348a18ade4d31a5151344e459c5bd4a4372fe0520ac99b5c5e0c098a0896551a3e5e3a05fcaa3f8413ee1a6affaf002fcf4a09cce11eee393639698da9d34f3ae07ccd2ecae25cc6085a7d2c3f193c4a343d925fa1c5911222a7b5cc8acc67a1ad280c21f6ce7d6555d030503835e22ed3fdec09528eef9f71bb37d1a84242ce7bf5f8986d7f6eda517183930ec3416992abd5b47ce5b5d3030e206df2a1e7698466d21b20404acda62aba5a3932e496b6f80949730c56cb48bebefe2abaadae2ee9102d49bc25b5ff254160804c40fe7b380f2224e888151600704327e88256341a6cd21ee536b1a410571a8471fa8ca5e6dbcb735277536fc9a499c51107f20c83993312b3b70e768bdaa002716ba9a03714e78c10e8dd379bd87bfed7549d99380e11ca2b946e24714709366ae9bf544395eca91d6eb1e046bd1863ac70e7bb988c47cd818b74afa0ec8ada7ca730bbc34b5cc6bb4f0b5d0ebb55f041203260814bcf75aa6e42468a8c7bb8273b6744b2d886f5bc392fd5aaaa9ad5c122488b4ed51aab651f4eec39eb96b75c485b926b707a427ea64505c8ae4c9e2ca3ff876fd286d379f334fab765a0a3c8b83a01c9935f0dbb5d4c97e57909aaf18a6fa75aa091311f06178d2aa999ac4e808f7fadae5b0183fbd5cb0af288c423ed96ab06be64c0e7645c1dc734d28730a16c35b0b783385d3330a6981bc8d7c8ba9d55cbf9b52560d731bc6b4395243cdbe6aa463f149be65c0f51aadda533c7ceb8a080447eb5b61bd9e45f060a643084f4bd768730a1217206d910e3b4e394df772c6e56bf9b4c913c80918531d5d27798ec9d0a7e6a7f93de4d453956cef9a8dcbad3712f2fe10da140ab5358b0c4e6576141d455991106cc4e4f1594110d4279c67fb7d53134404c1eef14a949d5f1f292951bb6399a9f558856c7956a069729d85f993b5c9f45ae9f83f4ed65db76d83d1acf744c658b16dbb084ef6d0b6a66630dea892d8b20b31cc735b13f8d1f5d6d9363f31f21be77d2c4fb51dbee1dfc8478461cda6f5d4c464e9e014b058d804180bb3a4a76ba676b3d3427736f9926d207ccd8c4832bda5a60f355fbbc5e70955f146dc27c2c20f07a6a6d4fd1eb0ad0bb7489d1c19c5c34930a5df273c54af0afa368663ecc32da54a32df3e786b90f2948a615d7d31617302b6726dd21855e073aca1212a00005242b4b43ddc5841c86d01c31228e0a6927e63bc83aa24814cebafd3f18be453d1926522f056280906f529f802e802b3e96594bfffbcd96bc5b6c61f29fe62093dc087756b9bcac8a1fdce838c40e4ff675e0a212123652ec23bb60f7ababa2bd5bd8e42f850dd75a88e9451ebaa7d1a1682b3c17a872ae183b94e04567bbf55ec7620a7361d5abac42ae0f583e6fabb1be5bb2ae244aaf67f5f2889b81b56314f59b3c2def0515f014078eb33eaab51fd0ded8f02caa9bef6566da9321d0c3bfd46a9e46852b06ca36f0468cc893b94a991317bcd0616ab87e16750ccd966767271bcf81df0a7150af14644fcb9ae9f90e262a5d9453bb6ac7ad810449077aaf33f90330e07b765057bd602aea445d6c49ba4f871fc46fcb5c9b6c038e31dfb447cd190296f243c9584d70b45bf2a2a443238b82b4f91ff618a0f3c1f335593b214a3cdfde73f905131b07ae83dc66b2190dde4ace52a949949e4767cca35b942fccaf9bbaeef1265e53eb41044ceb4e10b388a915dd6e182ede83562587f621b6fc3d4a5a22392ed011c51586b3d9e57371abe064536840c7f9e7a9f894f8017953c5b9464e230f01304e28e03054e608e30017a4c8422fbf8853f43f548665a3c04be35a930da8daef9465b3d5ec8af586a92b66e398992e290f674b40667e46ebef06d9cde6e2fe9bf1e56a19ddb6052867d40e5f4cf20be95eda0a3205272e369a9af7bb25c3379f71042f2362dba388f5bf8f5010d565c57fdc570a34d8d7b60a217229942a40e56d2d9feb6672bea5bf8dc8e0e3f26dc1b4ae808dccf648701772086e09493ebeb6cb940a4c8a678970190063d1013fdd2d194f84e28bdd6451bb0f536e301ab0cf69f6d60d837a6a95e93e0303c0e05b9204ff4a89057562e38d0b956dde6bce5eb1d750c58d7a02fb3917f1df949a320365fba747b6eeebc7659d11de881db031acb7478a6ee21b65d8ef983a47ca6127fad383edb0beed1386257c22cb1805a70e9b10f6ee91e0d7f45609ac493dbb35fb21a934b4ecfffa0a011290da483d814ed7f7f224daf99914508834dbd58737729acd2ed351415656da244f60f99a9d9c85c052d6050626c74592aa8b29113293d4f3e3374541cf7aea951b46c5ac51486f1055cdebee73da82dde21341b6f23ac406528d8e8d269e9739319207d1107f496987db1d72ceacc5c4d9d0f6bfc2ffd20eb97f846aba509477b429be9f08185dacf12b462deb707f7f1ecacc86b45e9ad58a5450946d2bdc81cd5c0d500feef6a1efcd2900e597872a8c", 0x1000}, {&(0x7f0000001480)="8f52e6308ce6d7b7e2daac11f6f3b0a1e08742625a60c3cc3595b7475a72266418fe4f13dcb93a91b720c7e0be989ab6a22c47bfd1fd6447962963939451a99b5ccc959232adebce2a32178f377c5a03d0bbaffa8ea72598e05f5e6a5358d4", 0x5f}, {&(0x7f0000001500)="e2d0f86c78a0b2df627498360b23af18a2efb337b65259fb1f1d530fe94d8edcf10b26f69651ea815a533b857bbe77e569c17dd8beee6d355e822f4970d5139d88d58f9bb8dbf44ca768c0e0ae329b5c54a1bd57b6f56235fee32b3c7c65ac1bb24f90b511b80dc667eb87106f68c4f22335e95d08792949a1a5", 0x7a}], 0x5, &(0x7f0000001600)=[@timestamping={{0x14, 0x1, 0x25, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x100}}, @timestamping={{0x14, 0x1, 0x25, 0x1ff}}], 0xa8}, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x1c, r2, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r3 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001840)=[@enter_looper, @enter_looper, @free_buffer={0x40086303, r3}], 0x97, 0x0, &(0x7f0000001880)="321e829b8f9f7225c9d87e7741e86c15905c2aede8f9b7d76e46418a069d7940b0b9988f9d7569d8b8f96e48ee5d7787f224eb947afa699552f045d5dc449567e6a4362a83750f990d4c3d594e4425d6190231db042596bc387f53591276b121a1fc98e5076c2f9ed7f414dfbcec12c64086eb70785f70b6552ad13b7c27eb15a373785a9c8ed6d720aeb86f3e537a0c2e4149f9029db6"}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001ec0)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f0000001fc0)=0xe8) fstat(r0, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000002080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f00000040c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000006100)=0x0) r11 = getgid() r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006140), 0x2, 0x0) r13 = geteuid() lstat(&(0x7f0000006180)='./file0\x00', &(0x7f00000061c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000006380)=[{{&(0x7f0000001980)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001a00)="d9f618dbfc503465b08507c407f143fbd75568e45fb1e7ea92fb5876f126aef0041bb143669eed4745df5ccd4b56f25fae5a3364a942f76491c1b4531ae9d4738fe6ab2ebe577549c782b5c4cbaf19d421042cb29d26796d3fff3f83373656193a5f65426c8d04babbf23c120c929207715cf1bc1f95e48601a05dd1c283f87c106c69921e449a02b81757d99b4632a76d6c06bb8ce67209473252ba6d124fb817fe4725deba2b61f2096b5aac5e2d7365f6f33d01fbbce8a7b9d9a69597f16f9887655a63df2a1d0b0d53970e065ce8dadd0fc100", 0xd5}, {&(0x7f0000001b00)="aba2d23afb5cd61db0ffc71a17f445cc3955ad9c9b7acfe0b949f4988ab8af6eb8d3532239efd0d34ff958321c73bbb988743b0ba60d960f513918aa60c53284b40e1f1b6f66a27caf2b9f", 0x4b}, {&(0x7f0000001b80)="aaf70bc80819e92c4470f0949774dc9ddc2eb933e5ed41169b2789d2b7661f9db23f3574ff32654fbab22ebef1d01cf61b8ad10c6adc3b40d210a230d98949f44b48e834230a24d72a84d4ddd53606b3ed4b8f5eb10e850cb19a54a57a4ddccd45cb8e44c453f6943156e6dcd060449bd787ff358794cb0b4f38830c2e73fa686e5182e9aaf076d0aa82d79a99d6c550e0f53a7181ac431873bdcf8fe3dc37b9d22b2ee944e0440ed7", 0xa9}, {&(0x7f0000001c40)="1703d0cdb8e3167a5541f5858d4e0cc6718abb6aa96a3cf178ae7e90c4bcc2e6294a8f278d531876affbe0c151e9e3eb", 0x30}, {&(0x7f0000001c80)="2074e7ed0b2c6599ea1072d0e8de5f9f4b1293ad9c53f7f8b9d4d6963caa910ad07c88af864a9b425b7b45f027853bf80380caa6c438466c643972b2398e99129248e91af0e5c54eaca1a15c8604ce185ffbddd99bcef2da372594a8479aee21505ccc0fd9d171cd7f3baa650a14393a30dfdd4441aa1530d2c72f9f86203cd5f4fa332aec2bfd65776c60f58809248fd331d78d4297de3dca07c03c920b8eb7b9e49e09b5fa5243e5e0713cafbecc9a73d5ad50c16ce226cdeae4e13cdc", 0xbe}, {&(0x7f0000001d40)="0b9be877838d3fd520e51ac14c03721c3fd3cb8bba06633c8be80e92c335486bcf70fa6e53f188272dfbbb1382fe712d74f09c8fabe6c1ce49dcba090c0805ba88805c83d15c5a0d35b7dfd72826f47b091ca0c7b2c2fd8b59a9fa3542423fca691ea0003462fe55a1afb3a5feaaa5221c272a81c046f719792b45b8419d303dcfba205360d4c13b45f3bba6d21852c10000bd6e131eb41e80f09bb5b92142d418845114a77500704676cec1f1fab353d510db2ef441d870fcebd5047341e2e428eba64c5a94417443", 0xc9}], 0x6, &(0x7f0000006240)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}, @rights={{0x1c, 0x1, 0x1, [r0, r8, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x20, 0x1, 0x1, [r0, r9, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, r11}}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r12, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r13, r14}}}], 0x118, 0x10}}], 0x1, 0x48081) openat$ptmx(0xffffffffffffff9c, &(0x7f00000063c0), 0x80800, 0x0) sendmsg(r8, &(0x7f0000007600)={0x0, 0x0, &(0x7f0000006440)=[{&(0x7f0000006400)="a0c300ff8c88fc638180f046e2f348d7b3843f862597ea7f065166fe94b99efc028f750faf6d1d7ba356cf04d06da9c0b5befc85a0d54604", 0x38}], 0x1, &(0x7f0000006480)=[{0x1010, 0x5ce698c5dd1533cc, 0x40, "a6efa150325d525a449b6481983a756b70ea95b3e5c792c6257c1f9a72c3c0ec0b325cbc3c159d46817dde68a7efece8ca5115875fc1f823a0e7893e28e7c489f10e209890451f77098b4d3eed6c022ba94ecbca05ff0708930c42e349b6bfacd038636e8a861bbc5422d67207c755070bf4cf84f982b123f71de7570705576bc150157ffaa554f970a9151dd02210b354023e6ea29cc36a22cf902359aab86a8a4699a53cb03658bddba2427001aa9080bf7aca5be86e15d1d74ef17a8083bebecfb2ba975f00f73258608b694d5a20ca71a738432741e0cefaf967eb505f92aaea1efc8413ecbe7bdf0f69dc0284ac9b16f9d9d5fe66f8f17d036b6a7116d6685dfa60eab399cd7606acfa704384d7e3f7406112ead0351395b0fe7b31bf7e05615b0b3e7ad6bb97dd63ecb202a37187a0c5ce821b07a416a070ad0e2af20be5a2b1c68e4948748980667f186f66e63f5c5f410fe426f0d0ee3b1030cb9d17a07819d010c8b367e759b37ae82f5db57da566e6489cbe2ecb4cd0570bfe097fef97987df91eb26b3845a93f70aa3597427e26519169a825be2e3afd4f9f7150496828674c833c55a3e9787f2f437e65744fd6e97eb7c58ec512426863150e4abe5505587ed43b6ae000b4d287a04abb5b11859fccf2a06b3c95072f3b48e1211a45589d2a95f84e70f096360c372687ab5f8c1978bb8ff34738fefd6cf782d3e0efa32056f01bea71d21c56fae757768c371e55eda0020d0517c9adf9fccb803b647831a7f5de190dc71af084a1c8aafe0cb3c109d33474b7996dd9fc6170c0ed2af695d25289b165cb5e6d32afff3910c3eb4e2754ff6965c50e35375f990dd5e1ad929e623e6a8c3470d44ba6360d02362cff97a38fd8e307f4263da81b68e8d962a2fbe5e240aca9b57846f7e6d4d1041ef83ff2415352c184d226343327a56317b696b0e1b1b10b6d286a52cb1b9f14322d67548bcf62e6ccc135efef4f9dd7be616f9a7319b19c844a30b81c193f8ed9ffdb30f73287c758bbd8df0c0c0c7091804421ec111551b3d7514cfc352459b3fb3aedff1a1d0114efe1c4a1b0cd4505c9caae144dcfe97a6ffe178702935bbafe08c405ecc2bfc397d77ea615463ef1b5b4ed97346566a233fb541d96f2e39dbc58e8d5ac14072f0540e43373941d0837d5f691af54c70249db810e0cd6e603cc94384b7b2e6937c8de498567960a24d502c121766f11bf7e79bc377c041542bf7c6f9751003c32ec050a243c6e5d426a7a6d5e26b647f3a628e019a308aea7e4be038af9e01c57c4a23803cb7782cbad418767cbd4b8409d428d1b738304a4269abca1b1a0ed1c9df407696c93b8e543f51abb73291560b4f193a46cf403bd06fd2ec83e6682f390483a380cb0d80cd31e8e9b2f783106c8660e764f8a32c122eaec47aa40504f0277c39d459e4cc0007e7643a30395804433602a16ffa42f83808f3dda5f1252de840d61465898b438d3432fe5ed76914b3822390127ccddbea85559d4ca6d95de7bdc7537db4a80c7515037469daa3e3b3c666bded3213680f364ead9e852c46f405d54eefb7a0659bcb023bc4d4bbf31b035c0119eb55f117505ce278d39bfb97b443c73e07c47e9b55b88a5191a2db78eceb52348211f4b3daee116c02320f00798a106cdff44793747b4f0c53f898a73a271148f62d1f20141f1cc90e3ee78fddb9bf05530964388d9272de510c167442a156ca2c0b87ce785f29e7b1d3b9e5d0cfc8d4657a6b8ece06f74e81bfa3a872f0e0910ced04bc560e1edf0fd042dfd9a351bb2a1e957d3cb9df8b6ad79b95443de3c5ad07927540a46a58ad057b63322afc8edbd069f1df3a9ef76e45c8396a026a0d431988f68ca76b7ad45326a2a442e4671b84c21df95676f257d45e62a771299908f45bab5516b5547b19a2000de173924d8ea002f07b1b9c362c1c386c860e84ab5790f1ec29de57c11e397af564b07508f6b14ff0d3a348d306cba0d98db2f567d38a0d28a089cac48206d9cc1424a405059f541cf5d35ddc36cfc7115a477edd1cbd8b283c2e359fc0768d4f809081eb338d4b423b760de4f62673534579f0697f013b2202b276a18fdc772696784cae42a32e945aca8e56fc3647f76af043bed3b64bb76d94f9140e09c728bfb868bdc7c12d32c2bb6a6319a46bb180db81f57c78414757c3ee6d24b6dc1beaf72f43f146f41107e6fbaeb844949d78fa4ccaac403cee6320f716a74a5bdceacd778e005b71d03f9efe9b30e9878a193b87933db360e273fa7c0757fbda9c7bdb0e55190c431f8f56febc8f5cd802bf416dd535c6b906de211cb154046d0e70eb880feee4c534ea78a5c0e5c1bb9e95873d32d4e136a59e104a1220ee79683d0b779d7458af00ad1a547eb845cd408a0156b77d14c592ba84588a232ad59c604a0f1f42b8788d63f102e192db79d940aa8bd7ec5aed9824b44999d09ddac72a8381c4d81a56f3bc5444297d08b96278cafa6e93068e1cb5c6ccc065fcbfc207d7d037f6773ac70669e8e1bca533ee49f8ae95dcf7e53c4f8bb9995aa9721560862e9b69a505d3ca3624fa7398f98d62a5232acbcfbf534aefa8df689e2564565d5fc7263b0e43d5b1a2b6ba4fcd4ccd7bda6482cca17fff1eaecede10b32adbc455a628baf01ac1ff555392fd300880318815f78e5cf779d7f3f437e28ef30f3e2d4e3f27a5e395d59f62899d7e7f788e2ea198d5616c90554d08f788760e72fca2c1f4f2da9d1c80781e609395fa91c6147be91fadb5c5f1857e10b853bec41c4ee567801540be56ba84a65b975baae4f556a03494926bcbc2112b0dd0ee99c5a382893c4bc13b6d8740658177688a1feb655ed543077d8728d63056c4dd971ccffffde72383e01392f3802d0e1a1976a4ecf5819f66e53c09b96839f4c48edbe3d213283a20a25d70bfbfddfcc79f60ffadac94d7088640e7b4c6fabf8ff5bf4375ddfa641a1dd9469515b0858054aa0c338d71f27be8cec5a0c081788cf52639a225b00f742b5981c86339d234065dc9c21e6a0257eea06c7a0a7f191affbf85895cfbaf54ee7586ac48cc8007fd5bf8d98e7c0609049cfc36acd56a694cf00c3efd0ab5a10b8ee08df28f029f3a0a8fd07555d54e878887c01a3b3001d5902b2d782c3f2d0cb4be04cae8bb02f021f174ac1086f361db181e99036a083732f4e44b65697f1b018ca7e2d6ac7665c6f88863cfd1d9d1858fb83eeef9a473f1ad5fbdfde5e011d205d11c0da74edefdd44d14c389ee0848adc61e65c97e641895e7956e1f0367f82d9c94d213456f1aa3c02d00b06ed4ebf7415d9aa5174b2125d7c7f388936cca6a54bd805d285af01de67c6c0719d0da99bc81c5728d6834e202aab838f8d5c1b08255f47fc27593bc169a0aec5f0fe4e2dc61e55f32ca34f92377144dcc9e139ad013040c8bc022ea51590c4efa448744ff4a6e20d6555d132f048cbfdbbab753b6867a1227d527549f0bae7aa4cfba5dbeaea5a9de639fa0b88b7570974decec2acd5a43c0436da622bbd523a90500b8e5f759ebca411d60209c52041cc9013d91ac1782e28665d49dc9acd209d4681a842068d51f630888ed7b4e5cee6a49a3f05bc4e98b7a886d967f5bb3bbe1a74016896fbc6b6b2dd33bcd2a044834c2dd4411a5b17453597f462c3a007acf2a0958aa65c0ad0b129d3cfc78c1fbdc6c3c5cd2c4f32f27368684bd0b0af61a8590aabb725de4452af00bddaffff73d63ce19d99fef9c040d11d7944a2f2e34ef8b18cc5ab8fe9e5975cf3ec42b8eac70a4a2ba6ebcfe93c9e2a5c84e2cc40d75c861dac294023b1398c85bbd165cc39b1c5aafdffe85806190909106f8989a806814480ef7174e1ec98a4f1b22a5fe4172b0f870e9b03c2d61cf128ddd6f47aa66e699d675437fd8f6f31e6b3a021e8bad01b27751e91639f6eeac925b18a9c537ea671670cfd292a4d1987f5ddd88b4e60d0332f81f29f2d90e43509ce476f219be2b8bd6bf1ba5b5e5c2ae88c070afbc1b0f4472bc9d5c928f5c441d76134cd176578bbdf8a7583dbabb95b91b8c4bd1ec3f46ec2663f39b00fcde52a3715c246b3bcc696710c4963482a2fb2cd81066bca852c13cd2196804cf678df84fdb29dc7f930e43b4a9f4b745a34d8716627c1ffadf9028194229a2dfff33007a93c1f23d5f75f81fc991aaa950e1899e77da75f227fafef2490a153452d6e7275d479e20225d56ca62744b58da0fde6a4b12ce08b7d17cbafa3553852b6a229ae12de4a647a3a3e53550d8e3504a6b72e28a79fa965235666a3a400f5d557e89537af76fe35db7363958fb7b6c6e15cffd7bce64893e55e73721b08013141d87e67384b2ad015bbecaab6473c3f7dad1531cd7087f4c1a2cc1c871bae6578dc12995a364eb0eb3d9fd8d3ed15050e67750ee8d8dda6e446e8be5f7678d9f8d73a6dff25504664f3efce1164f59bcbced154c70201547d3ff7e6b0590465eecc41836f02c54ce3c5ab555353ed3afc2bb1d1f4b82311761ad23e020f1462e1cb12fcb2685bb8c9b4ab68f261ba1eb0f6ca6f094c7307ead3e965e4eb5a4570c0f3f1285f8501c4019f254d7b5245a045ae577213e0fbe6163ec4a0895780844cdf563ef18c1b67fc620c96427b0ba06a34f93d8435346476dd7db1927002447d14b54654c9e988d48ff2285fd15aa1919a5be2ac76e78de18d6d9f9f2740508a63811b3dd5b908c74a0b160cba2c9126efaa76bf59c6d4d891099cdf241233f853849b6ad8db2cbf313b4e6ece4e866197e3b582ac6c424fdc0ec39d13c690aabbf3b4593fe9a40d7035d8e76c56b284269b3d3254d23904217fb2466dc3e33bf06d3780bf6d45379a5642db41906df8c70233644af115b98fd44a1794c49c30f9c8376d74039beb9eaee9bc6aa51aa58831bfa7d61e1f09ee5b77bf47e456c5b81022c5120979f71c4cad0f1b0c12f2c75ebbae8c98cfe6981f7244f432c99df84c1f6b43c43631b68938fbbe30f2ea74a055ecea8e9cfc1efc3a9635ab124aa6541d137b95b56110f72747a0889b2bfabc1469d479d9ac6431456e8c40cd1765143de4d24c533309d1222c402527f53c8f61a7baec84b86aa04369c25c554039cdf4db3a9405272d9f97d2e4caca6221fb2445cffb319262d63c434426371c994659b3b787e0a5e56cc67a63f523908278d9fced254817808c3dd919ae2e30eb5fe668036a8d25afd7c7ee86eb70f86dbddebe75810f11542271f040b96d809222398214352eb59263c2601da32c123ee1a01513594983aafe256296637d541288560fee3b110ed7ffc06d5b13b328198013231a904871ddcda5b1740ad95375366181fb705e7b3beb725f7ff05e7a6fec05427cbade096fb9994c5d9ffc04e62609b0a4b4424764105ef4b5e5a2ddb9b0a0901a66699ec6f5e3818c11498e1d231c996a997a78d2b2ad97b32d857b6ed7271de0b86391f8a95a7aadc471064b7a80edc222e9e7c501e2bf7462c7893977522a0f9f0be2a5df3207d52948de176750ed2f58d0c1848a350d9ee5b7d1777bf2d09a44696e13840bedbab48086119eb5afb6f5ec92229798f806abd41eda611e402ed7421f2e4cb7eb01bae4c47c0827b699a240414da290403fc71b046347a4e5ee57850ac45500d626ae4de705f33ae0ffb866bab982e591b848e7a3ef50bbabe22740328d8a462e303e4ea3965101d2915fc8e3c71fa8e742e103a056a99aab721029ee4f860307241c215743a759794518a67cb859"}, {0xf0, 0x111, 0x1, "cfc3bd30a3dcd0a5d80bab5beedb76b399935d85eb7404fe8e9e0310edd9d1a8323a7f139844f6a1ca7ccb7ec88d436ae216e91a1b30a518ab9faee5a7a0666a7c5f1e08e3ff97186a87ad6edd578acebfc4001bdacc27d38f7055429a2bd02567080435f2caf8c24e6cfd1de5b45fc41cee78723f35b14b13e2a9bc157345709c3aae563266005a545ceb0eeccf3d59d533ff70bec61e9bb6cb1c06c0a04df7b2ca34a21789e6d46776e3b44bbcfa5b6dcffd6a768acf63cb4a3ecf5fdff0280647cfe746f75cfe3fe779d302d6b8bf156f4def0a5479cc1aa136bb60740f"}, {0x78, 0x110, 0xa3, "95c28f2bafe1a1c6bb5111e620aa502e6039e4bc6dd28f9c507addbc0b676fcd580e8cb5bc1be0d2953063492bb88b34c5db01ff9043e2043a539126780867f278474e5acc1890b5bbff0ba4769128f73a6bced0c025c02059d3b47c03b8a8a4950b"}], 0x1178}, 0x4004) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000007640)={'\x00', 0x2, 0xbb, 0x0, 0x0, 0x2, 0x8000, 0xffff1000, '\x00', 0x9}) ioctl$sock_SIOCGSKNS(r9, 0x894c, &(0x7f0000007800)=0x776) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000007900)={&(0x7f0000007840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000078c0)={&(0x7f0000007880)={0x3c, r1, 0x422, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xe6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x44}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5c}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4180}, 0x810) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000007940)=0xa) link(&(0x7f0000007980)='./file0\x00', &(0x7f00000079c0)='./file0\x00') executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x82, 0x2, "c9a7"}, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x84, 0x2, "078d"}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000500)={0x40, 0x1, 0x2, "3aec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000540)=ANY=[@ANYBLOB="4005bf000000d87bec8f0b2f99e1c320fc15dec9d72400a7002e962046bf88cea0056f84720807fb00f8c8d74727aa9ea8fffd6881"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setuid(0xee00) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@dev={0xfe, 0x80, '\x00', 0x3a}, 0xb, 0x2, 0x100, 0x4, 0x9, 0xfff9}, 0x20) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r2, 0x10001, 0x0) openat$cgroup_int(r2, &(0x7f0000000000)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2d, 'net_prio'}, {0x2d, 'cpuset'}]}, 0x12) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x3, 0x40004}}, 0x10) close(r3) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000600, r7, &(0x7f0000000140)={0x5, 0x2df, 0x1, 0x3}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000080)={@rand_addr=0x64010100, @remote}, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000480)={0xe, 0x1, 0x7}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000000000007b01"]) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001000)=""/4111, 0x100f}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f0000003240)=""/106, 0x6a}, {&(0x7f0000000780)=""/18, 0x12}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/221, 0xdd}, {&(0x7f00000034c0)=""/211, 0xd3}, {&(0x7f00000001c0)=""/146, 0x92}], 0x8}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x7, 0x2100, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0xc0010004, 0x0, 0x3}]}) (async) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xffffffffffffffff]}, 0x8, 0x80000) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x80, 0x80, 0x0, 0x0, {{0x13, 0x4, 0x0, 0x3a, 0x4c, 0x66, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @empty, {[@lsrr={0x83, 0x17, 0xa8, [@dev={0xac, 0x14, 0x14, 0x2a}, @broadcast, @dev={0xac, 0x14, 0x14, 0x21}, @broadcast, @private=0xa010101]}, @ssrr={0x89, 0x17, 0xb5, [@multicast1, @multicast1, @remote, @remote, @local]}, @timestamp={0x44, 0x8, 0xe, 0x0, 0x6, [0x7]}]}}}}}) r11 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) bind$tipc(r12, &(0x7f0000000380)=@name={0x1e, 0x2, 0x2, {{0x1, 0x2}, 0x2}}, 0x10) r13 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r13, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendmmsg$sock(r13, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0xab6}}], 0x18}}], 0x1, 0x20000000) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="fbc2293f6508df5667d5c2c4880350d5366abfb08abc006c75a9e3c4afb91d60a7b9f29599ace525cb7c651f622c8e90bca63514869cff9a17d6da2fbebc45d283f49a6632f7017ecddeea47f2688bf300"/94, @ANYBLOB="082f68286b6bd83d9c5385cd584a61b83aed3add40715ca8d1da1d91d3ced65a35965e4c867b9a27cb42ff3dea4595a19f12e326184d1540c39fed561bfd12e92c7329104155fd94111fce4a175cf26b8ea9203da949b3d48cd3d5a34153cb24004774a430e2cdf4a8091218409ae5a1ad8fa428a8d893de4b28b0299e704b22bd23a0139b1d81fccca42806225be2abd5fc4c16fd31d12bed1d40ec29cfa40c7a352ca803e651829d2d05119c9af3c61e76cd8bef2ac122a4f0556d4741935a73b36f6c2382299f0d7312928cde7fcb50613c510adfe7bc23c04209e2891b0aa6e068f5f5c9d5be0f564818a0786da23cf16b86", @ANYBLOB="010029bd7000fedbdf2500000000080008000200000008000100", @ANYRES32=r10, @ANYBLOB="0800080000000000080008000400000005000d0002000000080009000100000008000700", @ANYRES32=r11, @ANYBLOB="0c0003000000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x881}, 0x841) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f00000000c0), 0x4) (async) socket(0x1e, 0x4, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) executing program 1: r0 = socket$inet(0x2, 0x2, 0x2) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) getrandom(&(0x7f0000000000)=""/76, 0xfffffe55, 0x2) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, 0x810, r0, 0x1f31d000) getrandom(&(0x7f0000000100)=""/14, 0xe, 0x2) (async) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x40, 0x4) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x3, 0xfd, 0xfffff028}, {0x6, 0x0, 0x9, 0x1}]}) (async) epoll_create1(0x0) executing program 1: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x5c}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup3(r2, r4, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, 0x0, 0x0) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000240)=[@code={0x1, 0x6c, {"a5c4617ee69e0200000066baf80cb83cabb384ef66bafc0c66b8000066ef2e66430f3881aecfde883066baf80cb8b6275c86ef66bafc0c66ed8fe878c27e6c05b8010000000f01c10f300f20e035000004000f22e06765470f01df"}}, @uexit={0x0, 0x18}, @code={0x1, 0x5e, {"b8010000000f01d9c481f9288f004000002e410f07b975010000b80e436808ba000000000f30ff360f20e035100000000f22e08f8990940b0f20e367470f01f8440f20c0350f000000440f22c0"}}, @uexit={0x0, 0x18, 0xfffffffffffffffb}, @cpuid={0x2, 0x18, {0x2, 0x7}}, @cpuid={0x2, 0x18, {0x2, 0x7ff}}, @code={0x1, 0x87, {"48b801000000000000000f23c00f21f835010003000f23f866baf80cb89c12d489ef66bafc0c66b8c0e366eff24501dd64400fc75d00c42111edda0f35c7442400a2000000c74424020a000000ff2c24c7442400be000000c744240200480000ff2c24dacbb924030000b8450183b2bae209ad110f30"}}, @uexit={0x0, 0x18, 0x9}, @uexit={0x0, 0x18, 0x3}, @code={0x1, 0x95, {"66470fc7338f2878c2880030000000c744240066000000c7442402a1000000ff2c24c7442400c7aff717c74424020e000000c7442406000000000f011c24c744240054000000c744240251a82cd4ff1c24c744240071000000c744240265ae0000ff1c24b934030000b8a574ffffbaffffffff0f30260f783ce2670f7827c4612d551477"}}, @code={0x1, 0x6c, {"470f070f070f01c9c744240000900000c74424024f860000c7442406000000000f011c24b9800000c00f3235002000000f3066bad00466edb9740b0000b8b2e66271ba000000000f3066bad10466b84f3a66ef3e400fc768000f07"}}, @cpuid={0x2, 0x18, {0x5, 0x9}}, @uexit={0x0, 0x18, 0xf}, @uexit={0x0, 0x18, 0xff}, @code={0x1, 0x6a, {"b9590b0000b8fd1a0000ba000000000f3066baf80cb84b6dd586ef66bafc0cb00aee66baf80cb80061e48eef66bafc0cedc4c2cd3b4b08d38c7924000000400f08450fc71e66ba410066b88e0066ef440f01f866b8a7008ec8"}}, @cpuid={0x2, 0x18, {0x5, 0x5}}, @uexit={0x0, 0x18}, @code={0x1, 0x61, {"48b800000000000000800f23c80f21f835000050000f23f8c4023146100f09440f20c03503000000440f22c0f3450fc772c20f20e035040000000f22e03ed9f30f01d166b8a8008ed86766410f6578f6"}}], 0x425}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) ioctl$KVM_CHECK_EXTENSION(r10, 0xae01, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) write$P9_RGETLOCK(r8, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r7, r11, 0xfffffffffffffc01, 0x0) tee(r7, r11, 0x60000000000, 0x0) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/mem_sleep', 0x801, 0x0) write$tcp_congestion(r12, &(0x7f0000000280)='vegas\x00', 0x6) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000080)=0x4}) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x24a, 0xfff, 0x4) getpgrp(0xffffffffffffffff) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0x4], 0x1, 0x1d4210}) mount_setattr(0xffffffffffffffff, 0x0, 0x9000, &(0x7f0000000000)={0x100002, 0x1000f7, 0x40000}, 0x21) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$inet6(0xa, 0x6, 0xd) close_range(r0, 0xffffffffffffffff, 0x0) executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) write(r1, &(0x7f0000001c80)="b12a42ebda0a", 0x6) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x4}], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) socket(0xa, 0x3, 0x3a) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x29e, 0x0, 0xd}]}) r9 = socket$inet6(0xa, 0x1, 0x0) r10 = dup2(r9, r9) r11 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r12, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCDELRT(r9, 0x890c, &(0x7f0000000540)={@private2, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5f42, 0x7, 0x1000, 0x100, 0xfffffffffffffffd, 0x4, r13}) sendmmsg(r11, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) ioctl$sock_inet6_SIOCDELRT(r10, 0x890c, &(0x7f0000000640)={@remote, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40004, 0x40, 0x5, 0x0, 0x35a, 0x40010020, r13}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x5, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@handle={0x73682a85, 0x1000, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000680)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) executing program 3: ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) io_setup(0x9, &(0x7f0000000100)=0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000240), 0x2, 0x12b102) r3 = openat$cgroup_ro(r0, &(0x7f0000000340)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) io_submit(r1, 0x3, &(0x7f0000000480)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r0, &(0x7f0000000180)="4d377ffadc3b708a410c423e3071ab043cccd588f130b7fccfbe620da0cad2df01368da6aab1cde37733a042ca1e3de35d9a7d7ed9f2ec076d0b434096f05f02", 0x40, 0x6, 0x0, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0xb18a, r2, &(0x7f0000000280)="736af0fe557b45c3abcd1309e9ffe1286751179de1e305469d603f6117135d03dfa158887365e260e1faa396e11ec4fda9f6f74d64dd0f11b8cfdc9cf0bf0d5cae522dcc6c35944fe6d32352429726e593c911fc47ad71d495d3208bb495bd4dd8c8c1f82341e381c00907626e8b5f7e7fb6af2aff0c32378ed6fa3d30b2fcab2949abba1f6f4ece4e177771a2", 0x8d, 0x7, 0x0, 0x0, r3}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x8000, r4, &(0x7f00000003c0)="2ed4ba8d62371a4d9a44285053880e840521dbe143c35fdce75deac28b5a441351842c73d9e77862102fc037193f9e6b54f032100a6544fed063151adef66601ae09e9", 0x43, 0x2, 0x0, 0x1}]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x8200, 0xa0) sendmsg$SOCK_DESTROY(r5, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000001180)={0x1264, 0x15, 0x8, 0x70bd26, 0x25dfdbfc, {0x2b, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x80, 0x1, "16f766eca1234d6d467ac275c71b6eeb0344e65b7b8a4c0314bf88b796b66cf6676d60f5276baff891227505eb1044472214bff0c9bb625b5e59ad2d6fe82f97991e8f78fb9eb605d39aa94b3d35d7f45118fa53ffffa8fb589a9ecae22c99f1cd8287e64ee339bf916854f25e18c4e5e674ad65ceb69507c68782d8"}, @INET_DIAG_REQ_BYTECODE={0x94, 0x1, "1b481c1759dbd6136735dd275316d1e244bb9cd2c2d2d9e6c5bc44482ef9c381fc454001e2dde5629216c1bea7af478a6cb707527e1a191c72eddd717e65f17cb7f69fa4346a9ad5d967cf7f179160597388b1dc1242eaf3be15419ef1a6483f4436528575720be56160ec165a70597f60b89d53cf61ffca2245a7dae2e4a00036d7e68d4a437b8df3d3231c0076ec9d"}, @INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "326220878f1cf2833457988ab2bbfa7f63d4d15e5c4f06cc22eadb2cba5bf55b755774cc07f338a5a34477a47038bca69aca970740a83521b0582c01bdd5843b7491a9eb6782686d6555996db1268508b61b7e82cf2d6330507999f0285a52086e3f2fe488cb5c99694ab95aafcf6f2b2075cf498b95ccb8a01fdb4db9c7f6b0c78a15aaee8aeb1c4af0018a10a5c9ec80f7042136ae8334bd80bed939651b4b448f5d864d72f6ea9d91c25155"}, @INET_DIAG_REQ_BYTECODE={0x16, 0x1, "a7340bac913c29b30761adec4efa3bcfede5"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x6c, 0x1, "bac74a0557919ab591a26c9bd30a7f00f33adf22d3da72e5d7e9629a95393e3a4d0b0e20e418ebf4eca57e47a3a5fadaff34b52436045964b10789ee8f52aa6406ede53d78ddd669e485a6a846fad93d0964199f5461f7aeada3e5fa63f56c610ea2d9b22a84ce7c"}]}, 0x1264}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendfile(r0, r0, 0x0, 0x7ffff000) executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x81, @any, 0x0, 0x2}, 0xe) listen(r1, 0x5) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000040)={0x2b, @loopback, 0x4e24, 0x0, 'dh\x00', 0x12, 0x0, 0x2}, 0x2c) close_range(r0, 0xffffffffffffffff, 0x0) r3 = accept4$bt_l2cap(r1, 0x0, &(0x7f0000000080), 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000100)={0x0, "b8db5b"}, 0x6) executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x5, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x10ed, @rand_addr=' \x01\x00', 0xbcd}}, @sadb_sa={0x2, 0x1, 0xffffff7d, 0xb0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}]}, 0x70}}, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) ioctl$BLKGETZONESZ(r0, 0x80041284, 0x0) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="32e693619272b3a7b655e6ab06366b7cc1e8eee380955a6fc8b838c495cc085b15464af1de0bbb1a96a7fbce6bf2eb5862462d7b154cb50a17e6700412f7dc3be1948a5457ba96f1cf152fcfc8bac9bda774ecc8e02f9dae752a8755b021a301da02d2ced02a9003ebd3552e99808c5695fde735b00c33d0f240127b19f07f1454638f1ab705184200434ea2c80f0723c8eaa8997f66be9660a5e57a0d6cfd14d861155fad0330c736e44805f554a4f1c0180e5b6498b72b6f1280d59ed236a2699b17dd72f5860d9ec6e48d586268961cff", 0xd2}], 0x1, 0x5) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) preadv2(r0, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x24000001) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000180)=0x5, 0x4) (async) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r4, 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async) ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x4000000) (async, rerun: 64) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (rerun: 64) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_follow}]}) (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r6, &(0x7f0000000980)={0x2020}, 0x160e) r7 = socket$inet6(0xa, 0x1, 0x0) (async) recvmsg(r4, &(0x7f0000000480)={&(0x7f0000000200)=@isdn, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)=""/54, 0x36}], 0x1, &(0x7f00000003c0)=""/141, 0x8d}, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x1000800, 0x0, 0x3, 0x1, 0x0, 0x547}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x2}, 0x800, 0x0, 0x1, 0x8, 0x6109, 0x3}, 0x20) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r2, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x10000, 0x0, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000c00000000100c0"]) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYRES64=r6], 0x119) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000280)="05031600d3700ee1a880", 0xa, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @remote, 0x0}, &(0x7f0000000200)=0xc) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r9, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x8100, r11, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'nicvf0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x80, 0x10000, 0x10, @empty, @private2, 0x1, 0x8740, 0x8db9, 0xd}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x8, 0x7b, 0x3a, @private1, @mcast1, 0x700, 0x7, 0x7fffffff}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000540)) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000b00)=ANY=[@ANYBLOB="e8020000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fbdbdf250000000008000100", @ANYRES32=0x0, @ANYRES64=r10, @ANYRES32=r7, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r11, @ANYRES16=r10, @ANYRES32=r12, @ANYBLOB="0400028000000500", @ANYRES32=r13, @ANYBLOB="0400028008000100", @ANYRES32=r14, @ANYRES8=r14, @ANYRES32=r15, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040004000000080007000000000008000100", @ANYRES32=r16, @ANYBLOB="780002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r17, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000008000100", @ANYRESOCT=0x0, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400020000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB], 0x2e8}, 0x1, 0x0, 0x0, 0x24044000}, 0x10041) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) executing program 1: r0 = syz_clone(0x4880, &(0x7f0000000140)="80bc21a571092c1cf010caae195564476d832d53a47844df26859d33c27df9f6c772336d982f23307eed3f1ae95269d8b86cc0bb9a5731dfef3726d707939874d3ac867f9161b6ca273bb46d520d565b620ea1f013141dd1d26b", 0x5a, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f00000002c0)="350827225d57584e4a142ffa69920c57b32305fdb42db49f8a808192cd299219b68a0024045e76e8eef0d8734cd22398832a105f5127556607659b0ac664005f537f18086525650ca075be51b81e8c9825dffcd93c2b759027d2907897bf95a9c9b355af60656652d036adbe99add484c6b3769faa5b4ad7ff0c350ae7bbf709cefd905fd787d91b") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@flushpolicy={0x18, 0x12, 0x105, 0x1, 0x2, "", [@proto={0x5, 0x19, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20040810) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc8) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x40, &(0x7f00000029c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101142, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd8000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x54, 0xc, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, 0x0) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x28, r5, 0x200, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x16}, @void, @val={0xc, 0x99, {0x1, 0x1c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0xc000) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) setresuid(0xee01, 0x0, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) read$FUSE(r6, 0x0, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r0, &(0x7f0000000240), 0x4003) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x6, 0x0, 0x39, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x2000, 0x8000}}) socket$inet_udp(0x2, 0x2, 0x0) executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000580)='net/ip6_tables_matches\x00') pread64(r0, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f00000001c0)=""/215) executing program 2: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) (async) sendmsg(r1, &(0x7f00000002c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)="bb3ff84ddc929ae24fe55c2622737c540e6987efac8a8e44ab13b0818511fe0a368ddc97b575f8f6c6f97a54b8836515991f59489251975098dbf7c87a91f640f4d2e4276c9a5f57b4bcfa3cfaf7e332fe047c98c76ae45be4b58a04ed88f2a9bf839e182bc5f510c624eb5231f3212d40ece161926ad91dfd7455d036691d022934f13ab2faf6d145a16337dcdf4403427f208f3c7c6ef02763c00511beb697cd309f2c1236366d413e28", 0xab}, {&(0x7f0000000180)="53e7f29bd5142db614158c4011ce5bdf50267ff329a40045336c788d401b08652b204c17663b99a4498bd3539680eb5b3870ad4b22daf64e4771e37cb83bc9434971909122b077fc624b633202a3237e6b005057ca7443d45cbcc56affdabeb2e035dd06c4c47eed1569a42df71282af6d7d1c2ea2fb69a1f88bf0ec33b6c327a723bed7e8cc514e", 0x88}], 0x2, &(0x7f0000000280)=[{0x40, 0x10d, 0xc6, "2e7ab84c7160fd5af74896a7869d3d0ca608bdc5b643db72cece9d6c6fdc3cf50f5f078ff69c317479f1"}], 0x40}, 0x40004) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000a40)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x4) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) (async, rerun: 32) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0) executing program 32: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r2, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x10000, 0x0, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000c00000000100c0"]) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYRES64=r6], 0x119) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000280)="05031600d3700ee1a880", 0xa, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @remote, 0x0}, &(0x7f0000000200)=0xc) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r9, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x8100, r11, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'nicvf0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x80, 0x10000, 0x10, @empty, @private2, 0x1, 0x8740, 0x8db9, 0xd}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x8, 0x7b, 0x3a, @private1, @mcast1, 0x700, 0x7, 0x7fffffff}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000540)) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000b00)=ANY=[@ANYBLOB="e8020000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fbdbdf250000000008000100", @ANYRES32=0x0, @ANYRES64=r10, @ANYRES32=r7, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r11, @ANYRES16=r10, @ANYRES32=r12, @ANYBLOB="0400028000000500", @ANYRES32=r13, @ANYBLOB="0400028008000100", @ANYRES32=r14, @ANYRES8=r14, @ANYRES32=r15, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040004000000080007000000000008000100", @ANYRES32=r16, @ANYBLOB="780002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r17, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000008000100", @ANYRESOCT=0x0, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400020000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB], 0x2e8}, 0x1, 0x0, 0x0, 0x24044000}, 0x10041) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) executing program 33: ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) io_setup(0x9, &(0x7f0000000100)=0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000240), 0x2, 0x12b102) r3 = openat$cgroup_ro(r0, &(0x7f0000000340)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) io_submit(r1, 0x3, &(0x7f0000000480)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r0, &(0x7f0000000180)="4d377ffadc3b708a410c423e3071ab043cccd588f130b7fccfbe620da0cad2df01368da6aab1cde37733a042ca1e3de35d9a7d7ed9f2ec076d0b434096f05f02", 0x40, 0x6, 0x0, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0xb18a, r2, &(0x7f0000000280)="736af0fe557b45c3abcd1309e9ffe1286751179de1e305469d603f6117135d03dfa158887365e260e1faa396e11ec4fda9f6f74d64dd0f11b8cfdc9cf0bf0d5cae522dcc6c35944fe6d32352429726e593c911fc47ad71d495d3208bb495bd4dd8c8c1f82341e381c00907626e8b5f7e7fb6af2aff0c32378ed6fa3d30b2fcab2949abba1f6f4ece4e177771a2", 0x8d, 0x7, 0x0, 0x0, r3}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x8000, r4, &(0x7f00000003c0)="2ed4ba8d62371a4d9a44285053880e840521dbe143c35fdce75deac28b5a441351842c73d9e77862102fc037193f9e6b54f032100a6544fed063151adef66601ae09e9", 0x43, 0x2, 0x0, 0x1}]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x8200, 0xa0) sendmsg$SOCK_DESTROY(r5, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000001180)={0x1264, 0x15, 0x8, 0x70bd26, 0x25dfdbfc, {0x2b, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x80, 0x1, "16f766eca1234d6d467ac275c71b6eeb0344e65b7b8a4c0314bf88b796b66cf6676d60f5276baff891227505eb1044472214bff0c9bb625b5e59ad2d6fe82f97991e8f78fb9eb605d39aa94b3d35d7f45118fa53ffffa8fb589a9ecae22c99f1cd8287e64ee339bf916854f25e18c4e5e674ad65ceb69507c68782d8"}, @INET_DIAG_REQ_BYTECODE={0x94, 0x1, "1b481c1759dbd6136735dd275316d1e244bb9cd2c2d2d9e6c5bc44482ef9c381fc454001e2dde5629216c1bea7af478a6cb707527e1a191c72eddd717e65f17cb7f69fa4346a9ad5d967cf7f179160597388b1dc1242eaf3be15419ef1a6483f4436528575720be56160ec165a70597f60b89d53cf61ffca2245a7dae2e4a00036d7e68d4a437b8df3d3231c0076ec9d"}, @INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "326220878f1cf2833457988ab2bbfa7f63d4d15e5c4f06cc22eadb2cba5bf55b755774cc07f338a5a34477a47038bca69aca970740a83521b0582c01bdd5843b7491a9eb6782686d6555996db1268508b61b7e82cf2d6330507999f0285a52086e3f2fe488cb5c99694ab95aafcf6f2b2075cf498b95ccb8a01fdb4db9c7f6b0c78a15aaee8aeb1c4af0018a10a5c9ec80f7042136ae8334bd80bed939651b4b448f5d864d72f6ea9d91c25155"}, @INET_DIAG_REQ_BYTECODE={0x16, 0x1, "a7340bac913c29b30761adec4efa3bcfede5"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x6c, 0x1, "bac74a0557919ab591a26c9bd30a7f00f33adf22d3da72e5d7e9629a95393e3a4d0b0e20e418ebf4eca57e47a3a5fadaff34b52436045964b10789ee8f52aa6406ede53d78ddd669e485a6a846fad93d0964199f5461f7aeada3e5fa63f56c610ea2d9b22a84ce7c"}]}, 0x1264}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendfile(r0, r0, 0x0, 0x7ffff000) executing program 34: r0 = syz_clone(0x4880, &(0x7f0000000140)="80bc21a571092c1cf010caae195564476d832d53a47844df26859d33c27df9f6c772336d982f23307eed3f1ae95269d8b86cc0bb9a5731dfef3726d707939874d3ac867f9161b6ca273bb46d520d565b620ea1f013141dd1d26b", 0x5a, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f00000002c0)="350827225d57584e4a142ffa69920c57b32305fdb42db49f8a808192cd299219b68a0024045e76e8eef0d8734cd22398832a105f5127556607659b0ac664005f537f18086525650ca075be51b81e8c9825dffcd93c2b759027d2907897bf95a9c9b355af60656652d036adbe99add484c6b3769faa5b4ad7ff0c350ae7bbf709cefd905fd787d91b") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@flushpolicy={0x18, 0x12, 0x105, 0x1, 0x2, "", [@proto={0x5, 0x19, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20040810) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc8) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x40, &(0x7f00000029c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101142, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd8000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x54, 0xc, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, 0x0) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x28, r5, 0x200, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x16}, @void, @val={0xc, 0x99, {0x1, 0x1c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0xc000) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) setresuid(0xee01, 0x0, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) read$FUSE(r6, 0x0, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r0, &(0x7f0000000240), 0x4003) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x6, 0x0, 0x39, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x2000, 0x8000}}) socket$inet_udp(0x2, 0x2, 0x0) executing program 35: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) (async) sendmsg(r1, &(0x7f00000002c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)="bb3ff84ddc929ae24fe55c2622737c540e6987efac8a8e44ab13b0818511fe0a368ddc97b575f8f6c6f97a54b8836515991f59489251975098dbf7c87a91f640f4d2e4276c9a5f57b4bcfa3cfaf7e332fe047c98c76ae45be4b58a04ed88f2a9bf839e182bc5f510c624eb5231f3212d40ece161926ad91dfd7455d036691d022934f13ab2faf6d145a16337dcdf4403427f208f3c7c6ef02763c00511beb697cd309f2c1236366d413e28", 0xab}, {&(0x7f0000000180)="53e7f29bd5142db614158c4011ce5bdf50267ff329a40045336c788d401b08652b204c17663b99a4498bd3539680eb5b3870ad4b22daf64e4771e37cb83bc9434971909122b077fc624b633202a3237e6b005057ca7443d45cbcc56affdabeb2e035dd06c4c47eed1569a42df71282af6d7d1c2ea2fb69a1f88bf0ec33b6c327a723bed7e8cc514e", 0x88}], 0x2, &(0x7f0000000280)=[{0x40, 0x10d, 0xc6, "2e7ab84c7160fd5af74896a7869d3d0ca608bdc5b643db72cece9d6c6fdc3cf50f5f078ff69c317479f1"}], 0x40}, 0x40004) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000a40)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x4) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) (async, rerun: 32) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0) program crashed: INFO: task hung in exit_aio bisect: bisecting 21 programs bisect: split chunks (needed=false): <21> bisect: split chunk #0 of len 21 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=6m3s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 27, 18, 9, 6, 28, 30, 30, 4, 8, 30, 18, 30, 8] detailed listing: executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0x4], 0x1, 0x1d4210}) mount_setattr(0xffffffffffffffff, 0x0, 0x9000, &(0x7f0000000000)={0x100002, 0x1000f7, 0x40000}, 0x21) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$inet6(0xa, 0x6, 0xd) close_range(r0, 0xffffffffffffffff, 0x0) executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) write(r1, &(0x7f0000001c80)="b12a42ebda0a", 0x6) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x4}], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) socket(0xa, 0x3, 0x3a) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x29e, 0x0, 0xd}]}) r9 = socket$inet6(0xa, 0x1, 0x0) r10 = dup2(r9, r9) r11 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r12, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCDELRT(r9, 0x890c, &(0x7f0000000540)={@private2, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5f42, 0x7, 0x1000, 0x100, 0xfffffffffffffffd, 0x4, r13}) sendmmsg(r11, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) ioctl$sock_inet6_SIOCDELRT(r10, 0x890c, &(0x7f0000000640)={@remote, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40004, 0x40, 0x5, 0x0, 0x35a, 0x40010020, r13}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x5, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@handle={0x73682a85, 0x1000, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000680)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) executing program 3: ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) io_setup(0x9, &(0x7f0000000100)=0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000240), 0x2, 0x12b102) r3 = openat$cgroup_ro(r0, &(0x7f0000000340)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) io_submit(r1, 0x3, &(0x7f0000000480)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r0, &(0x7f0000000180)="4d377ffadc3b708a410c423e3071ab043cccd588f130b7fccfbe620da0cad2df01368da6aab1cde37733a042ca1e3de35d9a7d7ed9f2ec076d0b434096f05f02", 0x40, 0x6, 0x0, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0xb18a, r2, &(0x7f0000000280)="736af0fe557b45c3abcd1309e9ffe1286751179de1e305469d603f6117135d03dfa158887365e260e1faa396e11ec4fda9f6f74d64dd0f11b8cfdc9cf0bf0d5cae522dcc6c35944fe6d32352429726e593c911fc47ad71d495d3208bb495bd4dd8c8c1f82341e381c00907626e8b5f7e7fb6af2aff0c32378ed6fa3d30b2fcab2949abba1f6f4ece4e177771a2", 0x8d, 0x7, 0x0, 0x0, r3}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x8000, r4, &(0x7f00000003c0)="2ed4ba8d62371a4d9a44285053880e840521dbe143c35fdce75deac28b5a441351842c73d9e77862102fc037193f9e6b54f032100a6544fed063151adef66601ae09e9", 0x43, 0x2, 0x0, 0x1}]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x8200, 0xa0) sendmsg$SOCK_DESTROY(r5, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000001180)={0x1264, 0x15, 0x8, 0x70bd26, 0x25dfdbfc, {0x2b, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x80, 0x1, "16f766eca1234d6d467ac275c71b6eeb0344e65b7b8a4c0314bf88b796b66cf6676d60f5276baff891227505eb1044472214bff0c9bb625b5e59ad2d6fe82f97991e8f78fb9eb605d39aa94b3d35d7f45118fa53ffffa8fb589a9ecae22c99f1cd8287e64ee339bf916854f25e18c4e5e674ad65ceb69507c68782d8"}, @INET_DIAG_REQ_BYTECODE={0x94, 0x1, "1b481c1759dbd6136735dd275316d1e244bb9cd2c2d2d9e6c5bc44482ef9c381fc454001e2dde5629216c1bea7af478a6cb707527e1a191c72eddd717e65f17cb7f69fa4346a9ad5d967cf7f179160597388b1dc1242eaf3be15419ef1a6483f4436528575720be56160ec165a70597f60b89d53cf61ffca2245a7dae2e4a00036d7e68d4a437b8df3d3231c0076ec9d"}, @INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "326220878f1cf2833457988ab2bbfa7f63d4d15e5c4f06cc22eadb2cba5bf55b755774cc07f338a5a34477a47038bca69aca970740a83521b0582c01bdd5843b7491a9eb6782686d6555996db1268508b61b7e82cf2d6330507999f0285a52086e3f2fe488cb5c99694ab95aafcf6f2b2075cf498b95ccb8a01fdb4db9c7f6b0c78a15aaee8aeb1c4af0018a10a5c9ec80f7042136ae8334bd80bed939651b4b448f5d864d72f6ea9d91c25155"}, @INET_DIAG_REQ_BYTECODE={0x16, 0x1, "a7340bac913c29b30761adec4efa3bcfede5"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "5f59eb090221440d43938a8ab12348578009773a1aa96d492c00667e14f84afd78ce038fe099e3407f35c4ada9c103eaee487567efd6d491f24e846da2c22d3d40176e90467d2a0c2b2cdcf12bf7452e6fbce426627f8b9c2184c5b09ebca9c7c95df7d79b8eb9b7483a7d62a722dddbd7d6c47ead2d4139b10b8d244b181644cd240a42cab637067106d66d6bb14cb014f8fe2999c73fd314383b24ca9db06ec05cd853e42be3441bf5cd137eae293b8216112bce85cda23f31ba2d66d73098d7eb6fcdca4a71d552dfc57e3d344544018ab8a022861ec1e74ed0a051b645660dbc7225adb49881bc9e1258dd5e4af69108eaf6c6f2fd10ac322add22225771d01ebb88c3626170ad1539513280582ec4311cbde2e9e600518bc1844d32208e9881eb541f7c3c830aeaa816c59f640204ca4c1ea9fd0cd01df0b3299f2678fa89937ddf01c4af3b61716515cdfc35b5ef1c2ab07a393b3f4dca1e83396a3c7c81f531563248e0eb8837de360a1e1c61651c2c58d666b0ff5e231d6203a759b5c2652107f93b21145dcd0c0411e8dadf966a6ab8742cd6be968df95aa1c34ad662d0f37e8d6d989d2f643e0846b578dd281b5133c83ba0b04c0f2d73b6c326ceabbad3b8c6991dd4e3e766dbddbe033255ac6fab415bf45c3dd44832e393ceb3f62710c1573d04a19014b101f0ca4f358f680f7b93ece47c0a87faacc22818a5a6617816163bc1479b42fee37e41fea52a98146b4f4d770c5f3701559c2382e33e69fb083edaed0737000ff642cef1fac7fd9c3798aedac2d17de192b35761b657f3cab79ae10fb404299c4466c8da805c367fccda3d949d219dd303294023950fdb252dd1bf467ed3d854cfa782c2bc85f82f4c00a0910decefb6f32e541b943069ab0cf2baa6303422d0c623079248fe38cc11ddcecd1363e13aaec63e261af604fbb1359f3902ea737f2452e7f2ba9346f656fd180aba22f514ddc4f07d413a1ff3edc181f3e9ebca71d595949ffda56f3880e608d2cee0710cb2f3f403d15660ee3a61786266631342b3e42f43e2acf450a989961019dacc397c9ea138109267bbf4a67730ff72d89a785aec639abbb88d479be4de0079556f64bbafd9d5919965deb6c022caeb24b53f8ae268836ef70a1d8f5d9bd45508a160ac8734ffb73a2249eb31309660e4d5bef1fe4ef2be41e990aa98f1bce62f06be67be3aaa9e17be422e3cae41b35aef0683826fe7c62b990816b7bf980a955da202c8115a3d714d4ec93c239bf894057b929256205f7d88550aff8ac420e74c70ed9c011bdb7b17cdd68d0a2e85c9f607aafcf4153720b476ea71df87cd09f6b98f8e6373afc49d299ede0393f2012b1efbe052e25d6778ca547280510c082c757def496162c67732bc071c309bec751d9bcdd3993bc11863673836f8f45c6de4772e06a6b29f72de172134407d19d58031177f612be49a842f47277c0e9f4b513c80ba0f558e7053e0b9b9c2e8e0304d23bfe12f820145a63aab1c609f345698d258955faa7eb9625b93fe2ce90709922afcbdc367c7b5b535cfad3b1d5b9097e609a3f453365800cc6cdf8dfee513850065636443b2830e8fa5480d78b5af8c2a0565ae51c234d7e204bff7991a8b9f70f3c2d858daa8e6fda3fef518da26b8d2f449ae132a3522361ab38fedbd2cb239c71c5d525a47f20b6a2b2bcc58cd2048cd9103f15c4d853531f0b26021d89d3b514ae96cde119dc92fecf083a8f459731775824c09746a84fba2b574ddcf4f7c0f3747992fd85501891b8011d69a3b5cc1e8ca9d36724e02a03b216b7380bfcb69e999eca9f570f622dc563592f69970ae58b9811fd15c05223012478075e1e5db7e5f7f8e0f565bb2879933f59224412790388f703ba71f9c117f73e1e83bc8163a4154fb2842f86cadd9f92383a834630c4f2a23bb5c2c66ce1f13b8d4ea834aa35face07df4e5ab6d59e36e4ace34da3af5fea8913aceb26f34312ef43a6e9289d4a65cdfc3347ed915003a7a3826a4f379127a2493172e3a5fd9ee9817b620e707f0fdbbdfba28d699bef47c94707372ba75109d762eb9acdf85bb5e51a2b8b5582f8a65643df5c9fb47bdc3db654cac885ab92ddad9edcbe584882387ecca37d5ffd45f7e6a0fc0c39dc04dbcec7e2b12c2b1fdaee20bb8a04907de443750d71fea52ad5dbfe127082a612c0f4d2edc985e8ad2934ffab5ce5760b1f27ac291b621f9e926cf86743c1a73f5f2d02e3de125f6c1cc5e78e22386a9132df215c1ccfaa8d4a2df569405dce1c55f6acebcede1c7d940642cac2bf2cea3b4bfb3c53833c5a7eba354e3ddbf5f09106b3d59f9ee1c345dad9e6d553914bb6e8e1609bdf6434fcbe5eb120f6888c7c79204f233525fbe3b5733aac31c0acca534e4685a40c8305a62c56958ba69857e205a153b3e48fe874b9ab6d57fd1797cf9d4d8b56df91f2c1b76c72594354789570867061a63614869fded6315d35d34cf2725046202a02b7dd8e2e3bfab41f67c35784bff34f795981d9eae80ca72878408db7d6c0aa308190e3684f917272712c954c87c38d7e28eb094882a03ff6761981749776f279bc33bea38764cba2509f045ddc095646e21723be819eac272020776d710fe4cc25579f9f4f920e46fefdadf5e036df7d7431b7800785ca090c85367a996d637cf624083e1bde9681463186c46580522ad0ed4662a5d3440efece99cd987fe7390103538a14bcc38fd951e4e992e31ea6f67f66b86f050c38fddcd46462e7ba2b7a7040da3e69fb200084133937efc255dc031e57d108f5409c9c4bac21cbb3ce333b8f39943c9a0ae5634c9d65eff33eedf8babf853896fb61be0dc0d62fa2696c64212ed9d8f0b83d9c2a1387f8796b759b737bcd157c3f817633d6948ba13b1be6fb75ca2fc5ee3faf6c3518e0a80d2c1c5eebc405868cadfc7228353e19d15d758abdc45edde64b40d207202a44901898e206fc19ad3a6ef41c544b21f14ce7de235d9a967a6aff02d1938880dac2fcd0e1a42fcd8651cc0c7f9cab0b0cab7b96b24a362a46ceebfa5ebc633686a86ca180fda426fdbe3d6f5ce8e3f412bf2348210819d5327101e29cac2d048cad109f358be4a5ef92a1256eb484202d4cac5fcfc4767b6af2d5e99ba270d07bb06e4532fff728a5472b3cd7a665925e7c8b1a40ea4dc1a9fbf4723bea9de5119e982a10e2cadff372ec460f1c01aadca18d9f19a13811a5102ba0d132f6d20357dca71062ef76a344067411de200b0e1f87cc310f22657d6e3532c9f7bb147425f4c7444362d1c7957b8d2ac314aad369c4988ea83f288e1bfd246cd3de7b52a0612c4bbc0afa322ae8cda128374a2d0c7d96c72df1a039050dc688cc579a9b5acec1b90b6a31bee2ab7ccaa86432c15c53d0493135a24ff77e614907603889359674df34ea6610cce86d7ee63355b042dc2b4518527fc94e5d31cd28e23a4b04d64706b2a6b60c62a179400dbc11c0a204b02e752df2fcee904f2b5eeb63ad917e63efd74a407467881c54250fd45d71e476734ece9da9eb78a2014d26b7cd3f59c18cf6cd91d0a8ba8e4fc45a752e22a1eba4259f8e5fccc4d13f91ff1051c320f44778b6444a92fcf015442aa0fd8dc81d714ecceaa6a3d829bd59bde250da22a614120817a609fa80deebb36ed2a75173f0e88ffcdcbd08c81a90a307e9b1628f4813e0c623ffd9fae5430370e4bf04925b25950bb26fb702d12910a0b5a2a7f11284337defba8b419d1d5808d5b731ca37732b201ffe9217a1d3990c4ffd78a2bc1d36bc2eedf3f0898e357a09e6ab2122a393c85c6c1dca749f1087f5c8dbce2241320fba28426986185ad38732d2f99491491120fb65731cd89e96d4bd82e6545e42a454c8eb0febc669f80f193820ae1601910f6061e6c8c76b967cba1365642765cc5bd75ac59ae5414976e0777ad9a6dc0012d28b573a7cd8e7224eb1d77798db7f2100f23385c3c22c5cfe22f0b8cdf41147207c8892861496616bc30b1d78777221d1e0bfc022ec1c5eebf4639061e3b2139a8c366b6cd0d50d7ac16266bbb8737fc8f307d41c3b7fb967508c30803585e64fa0bb3ddc1516d8b16615053aac384fc8e3c8d0f1342eb04d6ee8f044e9b0dc24ed55394831cc2eca7e860d9a54f2c59b7bccdac68e6c760486075aeb35c4d81c0250d457f9881a7b12f6ed3dadc5e33529bee2abe94d84736fa2ec23f16b14b7eedb35eda2e63e55f49bf4fec30803cc78202b710b6ff3289dcc1789f0829bc32a34074bfef32da58e0755988c125df7dde0dd0c1d1be958e5688dc6973f0aa91917fe7d2f8c4e4d277e2d705ce872b45bcb64f68ea99926fee05c959bc86dc1401d8271276fcddb5202c8030e6888df3cd0bda26a621845d24659dc06115d9a73f1fce6dab94bb8bd715a6e03b45ade28cc0ac5e20ef7af667597f64a0840449a32a9d33c8d42da6b9804e6c47028d33fb5ff588d1294a0dee763d21542ec17e2a1229ee394f8e2e382fb086c8fcad6a5cc30fcb71473804e6f6e8d9731afce53965d7dce682dd883ce2b3bb159b4a216e7a3d7d8de472f0d6e1c723960359a480ae8035c9ee02c6482272f91d1159ff98bf88de6789d60102c1f202ee2f695d42a03b48d5b5d7bdb59d95e461f608fc3b3b23cc608d9d8c6b0bae950d88e7bb2428fed8412e4c51717a9bfc651575d129f204950b6bf2136cc1f76817de3d83768a3f38d53671c1d434e9f39e09148c13be3fc693678f5fc0018c9940dd8fab605a82948d72c2bab466dcfa861f8a8601ee73e305199c3238718366e1686e6356338d3bd044db986de1e63757b1942781ff66bff998b65db1455f9080ba0a56bd23c13feee8e67bbec6fdb444724dcd7b2c41eab4280ed4673f4eeba802a470d113911c1b48f34f2a52b270116faa2c637a298fd77df7e54c45e50c19799556d44c3c8fea19fad4412a8b8ba89291963290c2c221cdc5f0564d710d07df602e532c42a4a15430bf61dc67412e48e6252aee08220f35fd37336450f132e3b62e0980bbbc4e073eccfb3fe58bf441da83a94fe793b08864467f33b9b1adb094628488cd33f8f0cb3cd3bcae27e954a5c0862d9bf53708bf4e834dd3f11d5b3bb7cd887d2ef96dc070d419894ebf205a6db8301b53532301184390d04feb30b01c06e8c16ca8e9ec1415107751ed0dad2b19a59c77d463b4c99e373aa3bd33c69500a811ddbcd64ed78a317646180daed7619849686072460ae05c875fc91e1a8cec4a9aec7f6fb3e6ea0e1f893156e431307d71b10c963e5ba9aab753f415b94d5601aef2630523b1659ab12d0ea7ac90b6cad40eb93527e94a7e4be0b96a11bca85b7efb11affcfe1f06d3390ab449bdf263f8b3ebd95917b64ab6db5b2a2e1f8b02cbefa4edbe3a1ae720668c7d0525a847fe48a0c1f814aec2637b8e4de65b322984b081b24fad69f12dd6c307b02c210c6635bdcff1cdfdc5be9c5652b2e861c17670aa0ec675ec183235e8255777f3f154ddbc96fa2c7b83ae97d7a6db7e95b7095d829f747293de8c35656002da0f0b7eccd89afd58d50c798f2f2b9024b558dd71ae462589fe882bd8acd2c0d954406fa4454b350ed917cbb723a7b90f32e32cd7da232dfa71bc570d7f54a41b7b602d9f051ca1ec586d7500f29fb93a64beb842f6e72fac3c8fe20e04883c3a4cbdc1a78b1a62d5f7c52a32e818fd6ab37709c2f69fb0e6af4832905306378ce8e94632242084643d6ef27b3bae251bd0847f14"}, @INET_DIAG_REQ_BYTECODE={0x6c, 0x1, "bac74a0557919ab591a26c9bd30a7f00f33adf22d3da72e5d7e9629a95393e3a4d0b0e20e418ebf4eca57e47a3a5fadaff34b52436045964b10789ee8f52aa6406ede53d78ddd669e485a6a846fad93d0964199f5461f7aeada3e5fa63f56c610ea2d9b22a84ce7c"}]}, 0x1264}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendfile(r0, r0, 0x0, 0x7ffff000) executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x81, @any, 0x0, 0x2}, 0xe) listen(r1, 0x5) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000040)={0x2b, @loopback, 0x4e24, 0x0, 'dh\x00', 0x12, 0x0, 0x2}, 0x2c) close_range(r0, 0xffffffffffffffff, 0x0) r3 = accept4$bt_l2cap(r1, 0x0, &(0x7f0000000080), 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000100)={0x0, "b8db5b"}, 0x6) executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x5, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x10ed, @rand_addr=' \x01\x00', 0xbcd}}, @sadb_sa={0x2, 0x1, 0xffffff7d, 0xb0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}]}, 0x70}}, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) ioctl$BLKGETZONESZ(r0, 0x80041284, 0x0) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="32e693619272b3a7b655e6ab06366b7cc1e8eee380955a6fc8b838c495cc085b15464af1de0bbb1a96a7fbce6bf2eb5862462d7b154cb50a17e6700412f7dc3be1948a5457ba96f1cf152fcfc8bac9bda774ecc8e02f9dae752a8755b021a301da02d2ced02a9003ebd3552e99808c5695fde735b00c33d0f240127b19f07f1454638f1ab705184200434ea2c80f0723c8eaa8997f66be9660a5e57a0d6cfd14d861155fad0330c736e44805f554a4f1c0180e5b6498b72b6f1280d59ed236a2699b17dd72f5860d9ec6e48d586268961cff", 0xd2}], 0x1, 0x5) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) preadv2(r0, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x24000001) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000180)=0x5, 0x4) (async) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r4, 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async) ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x4000000) (async, rerun: 64) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (rerun: 64) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_follow}]}) (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r6, &(0x7f0000000980)={0x2020}, 0x160e) r7 = socket$inet6(0xa, 0x1, 0x0) (async) recvmsg(r4, &(0x7f0000000480)={&(0x7f0000000200)=@isdn, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)=""/54, 0x36}], 0x1, &(0x7f00000003c0)=""/141, 0x8d}, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x1000800, 0x0, 0x3, 0x1, 0x0, 0x547}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x2}, 0x800, 0x0, 0x1, 0x8, 0x6109, 0x3}, 0x20) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r2, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x10000, 0x0, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000c00000000100c0"]) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYRES64=r6], 0x119) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000280)="05031600d3700ee1a880", 0xa, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @remote, 0x0}, &(0x7f0000000200)=0xc) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r9, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x8100, r11, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'nicvf0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x80, 0x10000, 0x10, @empty, @private2, 0x1, 0x8740, 0x8db9, 0xd}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x8, 0x7b, 0x3a, @private1, @mcast1, 0x700, 0x7, 0x7fffffff}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000540)) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000b00)=ANY=[@ANYBLOB="e8020000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fbdbdf250000000008000100", @ANYRES32=0x0, @ANYRES64=r10, @ANYRES32=r7, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r11, @ANYRES16=r10, @ANYRES32=r12, @ANYBLOB="0400028000000500", @ANYRES32=r13, @ANYBLOB="0400028008000100", @ANYRES32=r14, @ANYRES8=r14, @ANYRES32=r15, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040004000000080007000000000008000100", @ANYRES32=r16, @ANYBLOB="780002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r17, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000008000100", @ANYRESOCT=0x0, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400020000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB], 0x2e8}, 0x1, 0x0, 0x0, 0x24044000}, 0x10041) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) executing program 1: r0 = syz_clone(0x4880, &(0x7f0000000140)="80bc21a571092c1cf010caae195564476d832d53a47844df26859d33c27df9f6c772336d982f23307eed3f1ae95269d8b86cc0bb9a5731dfef3726d707939874d3ac867f9161b6ca273bb46d520d565b620ea1f013141dd1d26b", 0x5a, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f00000002c0)="350827225d57584e4a142ffa69920c57b32305fdb42db49f8a808192cd299219b68a0024045e76e8eef0d8734cd22398832a105f5127556607659b0ac664005f537f18086525650ca075be51b81e8c9825dffcd93c2b759027d2907897bf95a9c9b355af60656652d036adbe99add484c6b3769faa5b4ad7ff0c350ae7bbf709cefd905fd787d91b") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@flushpolicy={0x18, 0x12, 0x105, 0x1, 0x2, "", [@proto={0x5, 0x19, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20040810) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc8) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x40, &(0x7f00000029c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101142, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd8000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x54, 0xc, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, 0x0) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x28, r5, 0x200, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x16}, @void, @val={0xc, 0x99, {0x1, 0x1c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0xc000) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) setresuid(0xee01, 0x0, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) read$FUSE(r6, 0x0, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r0, &(0x7f0000000240), 0x4003) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x6, 0x0, 0x39, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x2000, 0x8000}}) socket$inet_udp(0x2, 0x2, 0x0) executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000580)='net/ip6_tables_matches\x00') pread64(r0, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f00000001c0)=""/215) executing program 2: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) (async) sendmsg(r1, &(0x7f00000002c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)="bb3ff84ddc929ae24fe55c2622737c540e6987efac8a8e44ab13b0818511fe0a368ddc97b575f8f6c6f97a54b8836515991f59489251975098dbf7c87a91f640f4d2e4276c9a5f57b4bcfa3cfaf7e332fe047c98c76ae45be4b58a04ed88f2a9bf839e182bc5f510c624eb5231f3212d40ece161926ad91dfd7455d036691d022934f13ab2faf6d145a16337dcdf4403427f208f3c7c6ef02763c00511beb697cd309f2c1236366d413e28", 0xab}, {&(0x7f0000000180)="53e7f29bd5142db614158c4011ce5bdf50267ff329a40045336c788d401b08652b204c17663b99a4498bd3539680eb5b3870ad4b22daf64e4771e37cb83bc9434971909122b077fc624b633202a3237e6b005057ca7443d45cbcc56affdabeb2e035dd06c4c47eed1569a42df71282af6d7d1c2ea2fb69a1f88bf0ec33b6c327a723bed7e8cc514e", 0x88}], 0x2, &(0x7f0000000280)=[{0x40, 0x10d, 0xc6, "2e7ab84c7160fd5af74896a7869d3d0ca608bdc5b643db72cece9d6c6fdc3cf50f5f078ff69c317479f1"}], 0x40}, 0x40004) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000a40)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x4) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) (async, rerun: 32) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0) executing program 32: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r2, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x10000, 0x0, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000c00000000100c0"]) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYRES64=r6], 0x119) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000280)="05031600d3700ee1a880", 0xa, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @remote, 0x0}, &(0x7f0000000200)=0xc) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r9, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x8100, r11, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'nicvf0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x80, 0x10000, 0x10, @empty, @private2, 0x1, 0x8740, 0x8db9, 0xd}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x8, 0x7b, 0x3a, @private1, @mcast1, 0x700, 0x7, 0x7fffffff}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000540)) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000b00)=ANY=[@ANYBLOB="e8020000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fbdbdf250000000008000100", @ANYRES32=0x0, @ANYRES64=r10, @ANYRES32=r7, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r11, @ANYRES16=r10, @ANYRES32=r12, @ANYBLOB="0400028000000500", @ANYRES32=r13, @ANYBLOB="0400028008000100", @ANYRES32=r14, @ANYRES8=r14, @ANYRES32=r15, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040004000000080007000000000008000100", @ANYRES32=r16, @ANYBLOB="780002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r17, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000008000100", @ANYRESOCT=0x0, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400020000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB], 0x2e8}, 0x1, 0x0, 0x0, 0x24044000}, 0x10041) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) executing program 33: ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) io_setup(0x9, &(0x7f0000000100)=0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000240), 0x2, 0x12b102) r3 = openat$cgroup_ro(r0, &(0x7f0000000340)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) io_submit(r1, 0x3, &(0x7f0000000480)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r0, &(0x7f0000000180)="4d377ffadc3b708a410c423e3071ab043cccd588f130b7fccfbe620da0cad2df01368da6aab1cde37733a042ca1e3de35d9a7d7ed9f2ec076d0b434096f05f02", 0x40, 0x6, 0x0, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0xb18a, r2, &(0x7f0000000280)="736af0fe557b45c3abcd1309e9ffe1286751179de1e305469d603f6117135d03dfa158887365e260e1faa396e11ec4fda9f6f74d64dd0f11b8cfdc9cf0bf0d5cae522dcc6c35944fe6d32352429726e593c911fc47ad71d495d3208bb495bd4dd8c8c1f82341e381c00907626e8b5f7e7fb6af2aff0c32378ed6fa3d30b2fcab2949abba1f6f4ece4e177771a2", 0x8d, 0x7, 0x0, 0x0, r3}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x8000, r4, &(0x7f00000003c0)="2ed4ba8d62371a4d9a44285053880e840521dbe143c35fdce75deac28b5a441351842c73d9e77862102fc037193f9e6b54f032100a6544fed063151adef66601ae09e9", 0x43, 0x2, 0x0, 0x1}]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x8200, 0xa0) sendmsg$SOCK_DESTROY(r5, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000001180)={0x1264, 0x15, 0x8, 0x70bd26, 0x25dfdbfc, {0x2b, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x80, 0x1, "16f766eca1234d6d467ac275c71b6eeb0344e65b7b8a4c0314bf88b796b66cf6676d60f5276baff891227505eb1044472214bff0c9bb625b5e59ad2d6fe82f97991e8f78fb9eb605d39aa94b3d35d7f45118fa53ffffa8fb589a9ecae22c99f1cd8287e64ee339bf916854f25e18c4e5e674ad65ceb69507c68782d8"}, @INET_DIAG_REQ_BYTECODE={0x94, 0x1, "1b481c1759dbd6136735dd275316d1e244bb9cd2c2d2d9e6c5bc44482ef9c381fc454001e2dde5629216c1bea7af478a6cb707527e1a191c72eddd717e65f17cb7f69fa4346a9ad5d967cf7f179160597388b1dc1242eaf3be15419ef1a6483f4436528575720be56160ec165a70597f60b89d53cf61ffca2245a7dae2e4a00036d7e68d4a437b8df3d3231c0076ec9d"}, @INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "326220878f1cf2833457988ab2bbfa7f63d4d15e5c4f06cc22eadb2cba5bf55b755774cc07f338a5a34477a47038bca69aca970740a83521b0582c01bdd5843b7491a9eb6782686d6555996db1268508b61b7e82cf2d6330507999f0285a52086e3f2fe488cb5c99694ab95aafcf6f2b2075cf498b95ccb8a01fdb4db9c7f6b0c78a15aaee8aeb1c4af0018a10a5c9ec80f7042136ae8334bd80bed939651b4b448f5d864d72f6ea9d91c25155"}, @INET_DIAG_REQ_BYTECODE={0x16, 0x1, "a7340bac913c29b30761adec4efa3bcfede5"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x6c, 0x1, "bac74a0557919ab591a26c9bd30a7f00f33adf22d3da72e5d7e9629a95393e3a4d0b0e20e418ebf4eca57e47a3a5fadaff34b52436045964b10789ee8f52aa6406ede53d78ddd669e485a6a846fad93d0964199f5461f7aeada3e5fa63f56c610ea2d9b22a84ce7c"}]}, 0x1264}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendfile(r0, r0, 0x0, 0x7ffff000) executing program 34: r0 = syz_clone(0x4880, &(0x7f0000000140)="80bc21a571092c1cf010caae195564476d832d53a47844df26859d33c27df9f6c772336d982f23307eed3f1ae95269d8b86cc0bb9a5731dfef3726d707939874d3ac867f9161b6ca273bb46d520d565b620ea1f013141dd1d26b", 0x5a, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f00000002c0)="350827225d57584e4a142ffa69920c57b32305fdb42db49f8a808192cd299219b68a0024045e76e8eef0d8734cd22398832a105f5127556607659b0ac664005f537f18086525650ca075be51b81e8c9825dffcd93c2b759027d2907897bf95a9c9b355af60656652d036adbe99add484c6b3769faa5b4ad7ff0c350ae7bbf709cefd905fd787d91b") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@flushpolicy={0x18, 0x12, 0x105, 0x1, 0x2, "", [@proto={0x5, 0x19, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20040810) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc8) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x40, &(0x7f00000029c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101142, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd8000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x54, 0xc, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, 0x0) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x28, r5, 0x200, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x16}, @void, @val={0xc, 0x99, {0x1, 0x1c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0xc000) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) setresuid(0xee01, 0x0, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) read$FUSE(r6, 0x0, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r0, &(0x7f0000000240), 0x4003) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x6, 0x0, 0x39, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x2000, 0x8000}}) socket$inet_udp(0x2, 0x2, 0x0) executing program 35: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) (async) sendmsg(r1, &(0x7f00000002c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)="bb3ff84ddc929ae24fe55c2622737c540e6987efac8a8e44ab13b0818511fe0a368ddc97b575f8f6c6f97a54b8836515991f59489251975098dbf7c87a91f640f4d2e4276c9a5f57b4bcfa3cfaf7e332fe047c98c76ae45be4b58a04ed88f2a9bf839e182bc5f510c624eb5231f3212d40ece161926ad91dfd7455d036691d022934f13ab2faf6d145a16337dcdf4403427f208f3c7c6ef02763c00511beb697cd309f2c1236366d413e28", 0xab}, {&(0x7f0000000180)="53e7f29bd5142db614158c4011ce5bdf50267ff329a40045336c788d401b08652b204c17663b99a4498bd3539680eb5b3870ad4b22daf64e4771e37cb83bc9434971909122b077fc624b633202a3237e6b005057ca7443d45cbcc56affdabeb2e035dd06c4c47eed1569a42df71282af6d7d1c2ea2fb69a1f88bf0ec33b6c327a723bed7e8cc514e", 0x88}], 0x2, &(0x7f0000000280)=[{0x40, 0x10d, 0xc6, "2e7ab84c7160fd5af74896a7869d3d0ca608bdc5b643db72cece9d6c6fdc3cf50f5f078ff69c317479f1"}], 0x40}, 0x40004) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000a40)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x4) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) (async, rerun: 32) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0) program crashed: INFO: task hung in fqdir_free_fn bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 4, 8, 30, 18, 30, 8] detailed listing: executing program 1: r0 = syz_clone(0x4880, &(0x7f0000000140)="80bc21a571092c1cf010caae195564476d832d53a47844df26859d33c27df9f6c772336d982f23307eed3f1ae95269d8b86cc0bb9a5731dfef3726d707939874d3ac867f9161b6ca273bb46d520d565b620ea1f013141dd1d26b", 0x5a, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f00000002c0)="350827225d57584e4a142ffa69920c57b32305fdb42db49f8a808192cd299219b68a0024045e76e8eef0d8734cd22398832a105f5127556607659b0ac664005f537f18086525650ca075be51b81e8c9825dffcd93c2b759027d2907897bf95a9c9b355af60656652d036adbe99add484c6b3769faa5b4ad7ff0c350ae7bbf709cefd905fd787d91b") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@flushpolicy={0x18, 0x12, 0x105, 0x1, 0x2, "", [@proto={0x5, 0x19, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20040810) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc8) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x40, &(0x7f00000029c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101142, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd8000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x54, 0xc, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, 0x0) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x28, r5, 0x200, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x16}, @void, @val={0xc, 0x99, {0x1, 0x1c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0xc000) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) setresuid(0xee01, 0x0, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) read$FUSE(r6, 0x0, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r0, &(0x7f0000000240), 0x4003) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x6, 0x0, 0x39, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x2000, 0x8000}}) socket$inet_udp(0x2, 0x2, 0x0) executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000580)='net/ip6_tables_matches\x00') pread64(r0, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f00000001c0)=""/215) executing program 2: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) (async) sendmsg(r1, &(0x7f00000002c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)="bb3ff84ddc929ae24fe55c2622737c540e6987efac8a8e44ab13b0818511fe0a368ddc97b575f8f6c6f97a54b8836515991f59489251975098dbf7c87a91f640f4d2e4276c9a5f57b4bcfa3cfaf7e332fe047c98c76ae45be4b58a04ed88f2a9bf839e182bc5f510c624eb5231f3212d40ece161926ad91dfd7455d036691d022934f13ab2faf6d145a16337dcdf4403427f208f3c7c6ef02763c00511beb697cd309f2c1236366d413e28", 0xab}, {&(0x7f0000000180)="53e7f29bd5142db614158c4011ce5bdf50267ff329a40045336c788d401b08652b204c17663b99a4498bd3539680eb5b3870ad4b22daf64e4771e37cb83bc9434971909122b077fc624b633202a3237e6b005057ca7443d45cbcc56affdabeb2e035dd06c4c47eed1569a42df71282af6d7d1c2ea2fb69a1f88bf0ec33b6c327a723bed7e8cc514e", 0x88}], 0x2, &(0x7f0000000280)=[{0x40, 0x10d, 0xc6, "2e7ab84c7160fd5af74896a7869d3d0ca608bdc5b643db72cece9d6c6fdc3cf50f5f078ff69c317479f1"}], 0x40}, 0x40004) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000a40)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x4) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) (async, rerun: 32) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0) executing program 32: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r2, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x10000, 0x0, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000c00000000100c0"]) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYRES64=r6], 0x119) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000280)="05031600d3700ee1a880", 0xa, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @remote, 0x0}, &(0x7f0000000200)=0xc) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r9, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x8100, r11, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'nicvf0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x80, 0x10000, 0x10, @empty, @private2, 0x1, 0x8740, 0x8db9, 0xd}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x8, 0x7b, 0x3a, @private1, @mcast1, 0x700, 0x7, 0x7fffffff}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000540)) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000b00)=ANY=[@ANYBLOB="e8020000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fbdbdf250000000008000100", @ANYRES32=0x0, @ANYRES64=r10, @ANYRES32=r7, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r11, @ANYRES16=r10, @ANYRES32=r12, @ANYBLOB="0400028000000500", @ANYRES32=r13, @ANYBLOB="0400028008000100", @ANYRES32=r14, @ANYRES8=r14, @ANYRES32=r15, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040004000000080007000000000008000100", @ANYRES32=r16, @ANYBLOB="780002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r17, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000008000100", @ANYRESOCT=0x0, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400020000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB], 0x2e8}, 0x1, 0x0, 0x0, 0x24044000}, 0x10041) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) executing program 33: ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) io_setup(0x9, &(0x7f0000000100)=0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000240), 0x2, 0x12b102) r3 = openat$cgroup_ro(r0, &(0x7f0000000340)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) io_submit(r1, 0x3, &(0x7f0000000480)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r0, &(0x7f0000000180)="4d377ffadc3b708a410c423e3071ab043cccd588f130b7fccfbe620da0cad2df01368da6aab1cde37733a042ca1e3de35d9a7d7ed9f2ec076d0b434096f05f02", 0x40, 0x6, 0x0, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0xb18a, r2, &(0x7f0000000280)="736af0fe557b45c3abcd1309e9ffe1286751179de1e305469d603f6117135d03dfa158887365e260e1faa396e11ec4fda9f6f74d64dd0f11b8cfdc9cf0bf0d5cae522dcc6c35944fe6d32352429726e593c911fc47ad71d495d3208bb495bd4dd8c8c1f82341e381c00907626e8b5f7e7fb6af2aff0c32378ed6fa3d30b2fcab2949abba1f6f4ece4e177771a2", 0x8d, 0x7, 0x0, 0x0, r3}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x8000, r4, &(0x7f00000003c0)="2ed4ba8d62371a4d9a44285053880e840521dbe143c35fdce75deac28b5a441351842c73d9e77862102fc037193f9e6b54f032100a6544fed063151adef66601ae09e9", 0x43, 0x2, 0x0, 0x1}]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x8200, 0xa0) sendmsg$SOCK_DESTROY(r5, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000001180)={0x1264, 0x15, 0x8, 0x70bd26, 0x25dfdbfc, {0x2b, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x80, 0x1, "16f766eca1234d6d467ac275c71b6eeb0344e65b7b8a4c0314bf88b796b66cf6676d60f5276baff891227505eb1044472214bff0c9bb625b5e59ad2d6fe82f97991e8f78fb9eb605d39aa94b3d35d7f45118fa53ffffa8fb589a9ecae22c99f1cd8287e64ee339bf916854f25e18c4e5e674ad65ceb69507c68782d8"}, @INET_DIAG_REQ_BYTECODE={0x94, 0x1, "1b481c1759dbd6136735dd275316d1e244bb9cd2c2d2d9e6c5bc44482ef9c381fc454001e2dde5629216c1bea7af478a6cb707527e1a191c72eddd717e65f17cb7f69fa4346a9ad5d967cf7f179160597388b1dc1242eaf3be15419ef1a6483f4436528575720be56160ec165a70597f60b89d53cf61ffca2245a7dae2e4a00036d7e68d4a437b8df3d3231c0076ec9d"}, @INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "326220878f1cf2833457988ab2bbfa7f63d4d15e5c4f06cc22eadb2cba5bf55b755774cc07f338a5a34477a47038bca69aca970740a83521b0582c01bdd5843b7491a9eb6782686d6555996db1268508b61b7e82cf2d6330507999f0285a52086e3f2fe488cb5c99694ab95aafcf6f2b2075cf498b95ccb8a01fdb4db9c7f6b0c78a15aaee8aeb1c4af0018a10a5c9ec80f7042136ae8334bd80bed939651b4b448f5d864d72f6ea9d91c25155"}, @INET_DIAG_REQ_BYTECODE={0x16, 0x1, "a7340bac913c29b30761adec4efa3bcfede5"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "5f59eb090221440d43938a8ab12348578009773a1aa96d492c00667e14f84afd78ce038fe099e3407f35c4ada9c103eaee487567efd6d491f24e846da2c22d3d40176e90467d2a0c2b2cdcf12bf7452e6fbce426627f8b9c2184c5b09ebca9c7c95df7d79b8eb9b7483a7d62a722dddbd7d6c47ead2d4139b10b8d244b181644cd240a42cab637067106d66d6bb14cb014f8fe2999c73fd314383b24ca9db06ec05cd853e42be3441bf5cd137eae293b8216112bce85cda23f31ba2d66d73098d7eb6fcdca4a71d552dfc57e3d344544018ab8a022861ec1e74ed0a051b645660dbc7225adb49881bc9e1258dd5e4af69108eaf6c6f2fd10ac322add22225771d01ebb88c3626170ad1539513280582ec4311cbde2e9e600518bc1844d32208e9881eb541f7c3c830aeaa816c59f640204ca4c1ea9fd0cd01df0b3299f2678fa89937ddf01c4af3b61716515cdfc35b5ef1c2ab07a393b3f4dca1e83396a3c7c81f531563248e0eb8837de360a1e1c61651c2c58d666b0ff5e231d6203a759b5c2652107f93b21145dcd0c0411e8dadf966a6ab8742cd6be968df95aa1c34ad662d0f37e8d6d989d2f643e0846b578dd281b5133c83ba0b04c0f2d73b6c326ceabbad3b8c6991dd4e3e766dbddbe033255ac6fab415bf45c3dd44832e393ceb3f62710c1573d04a19014b101f0ca4f358f680f7b93ece47c0a87faacc22818a5a6617816163bc1479b42fee37e41fea52a98146b4f4d770c5f3701559c2382e33e69fb083edaed0737000ff642cef1fac7fd9c3798aedac2d17de192b35761b657f3cab79ae10fb404299c4466c8da805c367fccda3d949d219dd303294023950fdb252dd1bf467ed3d854cfa782c2bc85f82f4c00a0910decefb6f32e541b943069ab0cf2baa6303422d0c623079248fe38cc11ddcecd1363e13aaec63e261af604fbb1359f3902ea737f2452e7f2ba9346f656fd180aba22f514ddc4f07d413a1ff3edc181f3e9ebca71d595949ffda56f3880e608d2cee0710cb2f3f403d15660ee3a61786266631342b3e42f43e2acf450a989961019dacc397c9ea138109267bbf4a67730ff72d89a785aec639abbb88d479be4de0079556f64bbafd9d5919965deb6c022caeb24b53f8ae268836ef70a1d8f5d9bd45508a160ac8734ffb73a2249eb31309660e4d5bef1fe4ef2be41e990aa98f1bce62f06be67be3aaa9e17be422e3cae41b35aef0683826fe7c62b990816b7bf980a955da202c8115a3d714d4ec93c239bf894057b929256205f7d88550aff8ac420e74c70ed9c011bdb7b17cdd68d0a2e85c9f607aafcf4153720b476ea71df87cd09f6b98f8e6373afc49d299ede0393f2012b1efbe052e25d6778ca547280510c082c757def496162c67732bc071c309bec751d9bcdd3993bc11863673836f8f45c6de4772e06a6b29f72de172134407d19d58031177f612be49a842f47277c0e9f4b513c80ba0f558e7053e0b9b9c2e8e0304d23bfe12f820145a63aab1c609f345698d258955faa7eb9625b93fe2ce90709922afcbdc367c7b5b535cfad3b1d5b9097e609a3f453365800cc6cdf8dfee513850065636443b2830e8fa5480d78b5af8c2a0565ae51c234d7e204bff7991a8b9f70f3c2d858daa8e6fda3fef518da26b8d2f449ae132a3522361ab38fedbd2cb239c71c5d525a47f20b6a2b2bcc58cd2048cd9103f15c4d853531f0b26021d89d3b514ae96cde119dc92fecf083a8f459731775824c09746a84fba2b574ddcf4f7c0f3747992fd85501891b8011d69a3b5cc1e8ca9d36724e02a03b216b7380bfcb69e999eca9f570f622dc563592f69970ae58b9811fd15c05223012478075e1e5db7e5f7f8e0f565bb2879933f59224412790388f703ba71f9c117f73e1e83bc8163a4154fb2842f86cadd9f92383a834630c4f2a23bb5c2c66ce1f13b8d4ea834aa35face07df4e5ab6d59e36e4ace34da3af5fea8913aceb26f34312ef43a6e9289d4a65cdfc3347ed915003a7a3826a4f379127a2493172e3a5fd9ee9817b620e707f0fdbbdfba28d699bef47c94707372ba75109d762eb9acdf85bb5e51a2b8b5582f8a65643df5c9fb47bdc3db654cac885ab92ddad9edcbe584882387ecca37d5ffd45f7e6a0fc0c39dc04dbcec7e2b12c2b1fdaee20bb8a04907de443750d71fea52ad5dbfe127082a612c0f4d2edc985e8ad2934ffab5ce5760b1f27ac291b621f9e926cf86743c1a73f5f2d02e3de125f6c1cc5e78e22386a9132df215c1ccfaa8d4a2df569405dce1c55f6acebcede1c7d940642cac2bf2cea3b4bfb3c53833c5a7eba354e3ddbf5f09106b3d59f9ee1c345dad9e6d553914bb6e8e1609bdf6434fcbe5eb120f6888c7c79204f233525fbe3b5733aac31c0acca534e4685a40c8305a62c56958ba69857e205a153b3e48fe874b9ab6d57fd1797cf9d4d8b56df91f2c1b76c72594354789570867061a63614869fded6315d35d34cf2725046202a02b7dd8e2e3bfab41f67c35784bff34f795981d9eae80ca72878408db7d6c0aa308190e3684f917272712c954c87c38d7e28eb094882a03ff6761981749776f279bc33bea38764cba2509f045ddc095646e21723be819eac272020776d710fe4cc25579f9f4f920e46fefdadf5e036df7d7431b7800785ca090c85367a996d637cf624083e1bde9681463186c46580522ad0ed4662a5d3440efece99cd987fe7390103538a14bcc38fd951e4e992e31ea6f67f66b86f050c38fddcd46462e7ba2b7a7040da3e69fb200084133937efc255dc031e57d108f5409c9c4bac21cbb3ce333b8f39943c9a0ae5634c9d65eff33eedf8babf853896fb61be0dc0d62fa2696c64212ed9d8f0b83d9c2a1387f8796b759b737bcd157c3f817633d6948ba13b1be6fb75ca2fc5ee3faf6c3518e0a80d2c1c5eebc405868cadfc7228353e19d15d758abdc45edde64b40d207202a44901898e206fc19ad3a6ef41c544b21f14ce7de235d9a967a6aff02d1938880dac2fcd0e1a42fcd8651cc0c7f9cab0b0cab7b96b24a362a46ceebfa5ebc633686a86ca180fda426fdbe3d6f5ce8e3f412bf2348210819d5327101e29cac2d048cad109f358be4a5ef92a1256eb484202d4cac5fcfc4767b6af2d5e99ba270d07bb06e4532fff728a5472b3cd7a665925e7c8b1a40ea4dc1a9fbf4723bea9de5119e982a10e2cadff372ec460f1c01aadca18d9f19a13811a5102ba0d132f6d20357dca71062ef76a344067411de200b0e1f87cc310f22657d6e3532c9f7bb147425f4c7444362d1c7957b8d2ac314aad369c4988ea83f288e1bfd246cd3de7b52a0612c4bbc0afa322ae8cda128374a2d0c7d96c72df1a039050dc688cc579a9b5acec1b90b6a31bee2ab7ccaa86432c15c53d0493135a24ff77e614907603889359674df34ea6610cce86d7ee63355b042dc2b4518527fc94e5d31cd28e23a4b04d64706b2a6b60c62a179400dbc11c0a204b02e752df2fcee904f2b5eeb63ad917e63efd74a407467881c54250fd45d71e476734ece9da9eb78a2014d26b7cd3f59c18cf6cd91d0a8ba8e4fc45a752e22a1eba4259f8e5fccc4d13f91ff1051c320f44778b6444a92fcf015442aa0fd8dc81d714ecceaa6a3d829bd59bde250da22a614120817a609fa80deebb36ed2a75173f0e88ffcdcbd08c81a90a307e9b1628f4813e0c623ffd9fae5430370e4bf04925b25950bb26fb702d12910a0b5a2a7f11284337defba8b419d1d5808d5b731ca37732b201ffe9217a1d3990c4ffd78a2bc1d36bc2eedf3f0898e357a09e6ab2122a393c85c6c1dca749f1087f5c8dbce2241320fba28426986185ad38732d2f99491491120fb65731cd89e96d4bd82e6545e42a454c8eb0febc669f80f193820ae1601910f6061e6c8c76b967cba1365642765cc5bd75ac59ae5414976e0777ad9a6dc0012d28b573a7cd8e7224eb1d77798db7f2100f23385c3c22c5cfe22f0b8cdf41147207c8892861496616bc30b1d78777221d1e0bfc022ec1c5eebf4639061e3b2139a8c366b6cd0d50d7ac16266bbb8737fc8f307d41c3b7fb967508c30803585e64fa0bb3ddc1516d8b16615053aac384fc8e3c8d0f1342eb04d6ee8f044e9b0dc24ed55394831cc2eca7e860d9a54f2c59b7bccdac68e6c760486075aeb35c4d81c0250d457f9881a7b12f6ed3dadc5e33529bee2abe94d84736fa2ec23f16b14b7eedb35eda2e63e55f49bf4fec30803cc78202b710b6ff3289dcc1789f0829bc32a34074bfef32da58e0755988c125df7dde0dd0c1d1be958e5688dc6973f0aa91917fe7d2f8c4e4d277e2d705ce872b45bcb64f68ea99926fee05c959bc86dc1401d8271276fcddb5202c8030e6888df3cd0bda26a621845d24659dc06115d9a73f1fce6dab94bb8bd715a6e03b45ade28cc0ac5e20ef7af667597f64a0840449a32a9d33c8d42da6b9804e6c47028d33fb5ff588d1294a0dee763d21542ec17e2a1229ee394f8e2e382fb086c8fcad6a5cc30fcb71473804e6f6e8d9731afce53965d7dce682dd883ce2b3bb159b4a216e7a3d7d8de472f0d6e1c723960359a480ae8035c9ee02c6482272f91d1159ff98bf88de6789d60102c1f202ee2f695d42a03b48d5b5d7bdb59d95e461f608fc3b3b23cc608d9d8c6b0bae950d88e7bb2428fed8412e4c51717a9bfc651575d129f204950b6bf2136cc1f76817de3d83768a3f38d53671c1d434e9f39e09148c13be3fc693678f5fc0018c9940dd8fab605a82948d72c2bab466dcfa861f8a8601ee73e305199c3238718366e1686e6356338d3bd044db986de1e63757b1942781ff66bff998b65db1455f9080ba0a56bd23c13feee8e67bbec6fdb444724dcd7b2c41eab4280ed4673f4eeba802a470d113911c1b48f34f2a52b270116faa2c637a298fd77df7e54c45e50c19799556d44c3c8fea19fad4412a8b8ba89291963290c2c221cdc5f0564d710d07df602e532c42a4a15430bf61dc67412e48e6252aee08220f35fd37336450f132e3b62e0980bbbc4e073eccfb3fe58bf441da83a94fe793b08864467f33b9b1adb094628488cd33f8f0cb3cd3bcae27e954a5c0862d9bf53708bf4e834dd3f11d5b3bb7cd887d2ef96dc070d419894ebf205a6db8301b53532301184390d04feb30b01c06e8c16ca8e9ec1415107751ed0dad2b19a59c77d463b4c99e373aa3bd33c69500a811ddbcd64ed78a317646180daed7619849686072460ae05c875fc91e1a8cec4a9aec7f6fb3e6ea0e1f893156e431307d71b10c963e5ba9aab753f415b94d5601aef2630523b1659ab12d0ea7ac90b6cad40eb93527e94a7e4be0b96a11bca85b7efb11affcfe1f06d3390ab449bdf263f8b3ebd95917b64ab6db5b2a2e1f8b02cbefa4edbe3a1ae720668c7d0525a847fe48a0c1f814aec2637b8e4de65b322984b081b24fad69f12dd6c307b02c210c6635bdcff1cdfdc5be9c5652b2e861c17670aa0ec675ec183235e8255777f3f154ddbc96fa2c7b83ae97d7a6db7e95b7095d829f747293de8c35656002da0f0b7eccd89afd58d50c798f2f2b9024b558dd71ae462589fe882bd8acd2c0d954406fa4454b350ed917cbb723a7b90f32e32cd7da232dfa71bc570d7f54a41b7b602d9f051ca1ec586d7500f29fb93a64beb842f6e72fac3c8fe20e04883c3a4cbdc1a78b1a62d5f7c52a32e818fd6ab37709c2f69fb0e6af4832905306378ce8e94632242084643d6ef27b3bae251bd0847f14"}, @INET_DIAG_REQ_BYTECODE={0x6c, 0x1, "bac74a0557919ab591a26c9bd30a7f00f33adf22d3da72e5d7e9629a95393e3a4d0b0e20e418ebf4eca57e47a3a5fadaff34b52436045964b10789ee8f52aa6406ede53d78ddd669e485a6a846fad93d0964199f5461f7aeada3e5fa63f56c610ea2d9b22a84ce7c"}]}, 0x1264}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendfile(r0, r0, 0x0, 0x7ffff000) executing program 34: r0 = syz_clone(0x4880, &(0x7f0000000140)="80bc21a571092c1cf010caae195564476d832d53a47844df26859d33c27df9f6c772336d982f23307eed3f1ae95269d8b86cc0bb9a5731dfef3726d707939874d3ac867f9161b6ca273bb46d520d565b620ea1f013141dd1d26b", 0x5a, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f00000002c0)="350827225d57584e4a142ffa69920c57b32305fdb42db49f8a808192cd299219b68a0024045e76e8eef0d8734cd22398832a105f5127556607659b0ac664005f537f18086525650ca075be51b81e8c9825dffcd93c2b759027d2907897bf95a9c9b355af60656652d036adbe99add484c6b3769faa5b4ad7ff0c350ae7bbf709cefd905fd787d91b") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@flushpolicy={0x18, 0x12, 0x105, 0x1, 0x2, "", [@proto={0x5, 0x19, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20040810) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc8) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x40, &(0x7f00000029c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101142, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd8000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x54, 0xc, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, 0x0) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x28, r5, 0x200, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x16}, @void, @val={0xc, 0x99, {0x1, 0x1c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0xc000) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) setresuid(0xee01, 0x0, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) read$FUSE(r6, 0x0, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r0, &(0x7f0000000240), 0x4003) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x6, 0x0, 0x39, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x2000, 0x8000}}) socket$inet_udp(0x2, 0x2, 0x0) executing program 35: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) (async) sendmsg(r1, &(0x7f00000002c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)="bb3ff84ddc929ae24fe55c2622737c540e6987efac8a8e44ab13b0818511fe0a368ddc97b575f8f6c6f97a54b8836515991f59489251975098dbf7c87a91f640f4d2e4276c9a5f57b4bcfa3cfaf7e332fe047c98c76ae45be4b58a04ed88f2a9bf839e182bc5f510c624eb5231f3212d40ece161926ad91dfd7455d036691d022934f13ab2faf6d145a16337dcdf4403427f208f3c7c6ef02763c00511beb697cd309f2c1236366d413e28", 0xab}, {&(0x7f0000000180)="53e7f29bd5142db614158c4011ce5bdf50267ff329a40045336c788d401b08652b204c17663b99a4498bd3539680eb5b3870ad4b22daf64e4771e37cb83bc9434971909122b077fc624b633202a3237e6b005057ca7443d45cbcc56affdabeb2e035dd06c4c47eed1569a42df71282af6d7d1c2ea2fb69a1f88bf0ec33b6c327a723bed7e8cc514e", 0x88}], 0x2, &(0x7f0000000280)=[{0x40, 0x10d, 0xc6, "2e7ab84c7160fd5af74896a7869d3d0ca608bdc5b643db72cece9d6c6fdc3cf50f5f078ff69c317479f1"}], 0x40}, 0x40004) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000a40)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x4) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) (async, rerun: 32) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0) program did not crash bisect: testing without sub-chunk 3/3 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 27, 18, 9, 6, 28, 30] detailed listing: executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0x4], 0x1, 0x1d4210}) mount_setattr(0xffffffffffffffff, 0x0, 0x9000, &(0x7f0000000000)={0x100002, 0x1000f7, 0x40000}, 0x21) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$inet6(0xa, 0x6, 0xd) close_range(r0, 0xffffffffffffffff, 0x0) executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) write(r1, &(0x7f0000001c80)="b12a42ebda0a", 0x6) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x4}], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) socket(0xa, 0x3, 0x3a) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x29e, 0x0, 0xd}]}) r9 = socket$inet6(0xa, 0x1, 0x0) r10 = dup2(r9, r9) r11 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r12, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCDELRT(r9, 0x890c, &(0x7f0000000540)={@private2, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5f42, 0x7, 0x1000, 0x100, 0xfffffffffffffffd, 0x4, r13}) sendmmsg(r11, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) ioctl$sock_inet6_SIOCDELRT(r10, 0x890c, &(0x7f0000000640)={@remote, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40004, 0x40, 0x5, 0x0, 0x35a, 0x40010020, r13}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x5, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@handle={0x73682a85, 0x1000, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000680)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) executing program 3: ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) io_setup(0x9, &(0x7f0000000100)=0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000240), 0x2, 0x12b102) r3 = openat$cgroup_ro(r0, &(0x7f0000000340)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) io_submit(r1, 0x3, &(0x7f0000000480)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r0, &(0x7f0000000180)="4d377ffadc3b708a410c423e3071ab043cccd588f130b7fccfbe620da0cad2df01368da6aab1cde37733a042ca1e3de35d9a7d7ed9f2ec076d0b434096f05f02", 0x40, 0x6, 0x0, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0xb18a, r2, &(0x7f0000000280)="736af0fe557b45c3abcd1309e9ffe1286751179de1e305469d603f6117135d03dfa158887365e260e1faa396e11ec4fda9f6f74d64dd0f11b8cfdc9cf0bf0d5cae522dcc6c35944fe6d32352429726e593c911fc47ad71d495d3208bb495bd4dd8c8c1f82341e381c00907626e8b5f7e7fb6af2aff0c32378ed6fa3d30b2fcab2949abba1f6f4ece4e177771a2", 0x8d, 0x7, 0x0, 0x0, r3}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x8000, r4, &(0x7f00000003c0)="2ed4ba8d62371a4d9a44285053880e840521dbe143c35fdce75deac28b5a441351842c73d9e77862102fc037193f9e6b54f032100a6544fed063151adef66601ae09e9", 0x43, 0x2, 0x0, 0x1}]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x8200, 0xa0) sendmsg$SOCK_DESTROY(r5, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000001180)={0x1264, 0x15, 0x8, 0x70bd26, 0x25dfdbfc, {0x2b, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x80, 0x1, "16f766eca1234d6d467ac275c71b6eeb0344e65b7b8a4c0314bf88b796b66cf6676d60f5276baff891227505eb1044472214bff0c9bb625b5e59ad2d6fe82f97991e8f78fb9eb605d39aa94b3d35d7f45118fa53ffffa8fb589a9ecae22c99f1cd8287e64ee339bf916854f25e18c4e5e674ad65ceb69507c68782d8"}, @INET_DIAG_REQ_BYTECODE={0x94, 0x1, "1b481c1759dbd6136735dd275316d1e244bb9cd2c2d2d9e6c5bc44482ef9c381fc454001e2dde5629216c1bea7af478a6cb707527e1a191c72eddd717e65f17cb7f69fa4346a9ad5d967cf7f179160597388b1dc1242eaf3be15419ef1a6483f4436528575720be56160ec165a70597f60b89d53cf61ffca2245a7dae2e4a00036d7e68d4a437b8df3d3231c0076ec9d"}, @INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "326220878f1cf2833457988ab2bbfa7f63d4d15e5c4f06cc22eadb2cba5bf55b755774cc07f338a5a34477a47038bca69aca970740a83521b0582c01bdd5843b7491a9eb6782686d6555996db1268508b61b7e82cf2d6330507999f0285a52086e3f2fe488cb5c99694ab95aafcf6f2b2075cf498b95ccb8a01fdb4db9c7f6b0c78a15aaee8aeb1c4af0018a10a5c9ec80f7042136ae8334bd80bed939651b4b448f5d864d72f6ea9d91c25155"}, @INET_DIAG_REQ_BYTECODE={0x16, 0x1, "a7340bac913c29b30761adec4efa3bcfede5"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x6c, 0x1, "bac74a0557919ab591a26c9bd30a7f00f33adf22d3da72e5d7e9629a95393e3a4d0b0e20e418ebf4eca57e47a3a5fadaff34b52436045964b10789ee8f52aa6406ede53d78ddd669e485a6a846fad93d0964199f5461f7aeada3e5fa63f56c610ea2d9b22a84ce7c"}]}, 0x1264}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendfile(r0, r0, 0x0, 0x7ffff000) executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x81, @any, 0x0, 0x2}, 0xe) listen(r1, 0x5) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000040)={0x2b, @loopback, 0x4e24, 0x0, 'dh\x00', 0x12, 0x0, 0x2}, 0x2c) close_range(r0, 0xffffffffffffffff, 0x0) r3 = accept4$bt_l2cap(r1, 0x0, &(0x7f0000000080), 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000100)={0x0, "b8db5b"}, 0x6) executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x5, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x10ed, @rand_addr=' \x01\x00', 0xbcd}}, @sadb_sa={0x2, 0x1, 0xffffff7d, 0xb0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}]}, 0x70}}, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) ioctl$BLKGETZONESZ(r0, 0x80041284, 0x0) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="32e693619272b3a7b655e6ab06366b7cc1e8eee380955a6fc8b838c495cc085b15464af1de0bbb1a96a7fbce6bf2eb5862462d7b154cb50a17e6700412f7dc3be1948a5457ba96f1cf152fcfc8bac9bda774ecc8e02f9dae752a8755b021a301da02d2ced02a9003ebd3552e99808c5695fde735b00c33d0f240127b19f07f1454638f1ab705184200434ea2c80f0723c8eaa8997f66be9660a5e57a0d6cfd14d861155fad0330c736e44805f554a4f1c0180e5b6498b72b6f1280d59ed236a2699b17dd72f5860d9ec6e48d586268961cff", 0xd2}], 0x1, 0x5) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) preadv2(r0, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x24000001) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000180)=0x5, 0x4) (async) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r4, 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async) ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x4000000) (async, rerun: 64) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (rerun: 64) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_follow}]}) (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r6, &(0x7f0000000980)={0x2020}, 0x160e) r7 = socket$inet6(0xa, 0x1, 0x0) (async) recvmsg(r4, &(0x7f0000000480)={&(0x7f0000000200)=@isdn, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)=""/54, 0x36}], 0x1, &(0x7f00000003c0)=""/141, 0x8d}, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x1000800, 0x0, 0x3, 0x1, 0x0, 0x547}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x2}, 0x800, 0x0, 0x1, 0x8, 0x6109, 0x3}, 0x20) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r2, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x10000, 0x0, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000c00000000100c0"]) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYRES64=r6], 0x119) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000280)="05031600d3700ee1a880", 0xa, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @remote, 0x0}, &(0x7f0000000200)=0xc) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r9, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x8100, r11, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'nicvf0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x80, 0x10000, 0x10, @empty, @private2, 0x1, 0x8740, 0x8db9, 0xd}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x8, 0x7b, 0x3a, @private1, @mcast1, 0x700, 0x7, 0x7fffffff}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000540)) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000b00)=ANY=[@ANYBLOB="e8020000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fbdbdf250000000008000100", @ANYRES32=0x0, @ANYRES64=r10, @ANYRES32=r7, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r11, @ANYRES16=r10, @ANYRES32=r12, @ANYBLOB="0400028000000500", @ANYRES32=r13, @ANYBLOB="0400028008000100", @ANYRES32=r14, @ANYRES8=r14, @ANYRES32=r15, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040004000000080007000000000008000100", @ANYRES32=r16, @ANYBLOB="780002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r17, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000008000100", @ANYRESOCT=0x0, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400020000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB], 0x2e8}, 0x1, 0x0, 0x0, 0x24044000}, 0x10041) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) program crashed: INFO: task hung in fqdir_free_fn bisect: the chunk can be dropped bisect: split chunks (needed=true): <7> bisect: split chunk #0 of len 7 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 28, 30] detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x5, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x10ed, @rand_addr=' \x01\x00', 0xbcd}}, @sadb_sa={0x2, 0x1, 0xffffff7d, 0xb0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}]}, 0x70}}, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) ioctl$BLKGETZONESZ(r0, 0x80041284, 0x0) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="32e693619272b3a7b655e6ab06366b7cc1e8eee380955a6fc8b838c495cc085b15464af1de0bbb1a96a7fbce6bf2eb5862462d7b154cb50a17e6700412f7dc3be1948a5457ba96f1cf152fcfc8bac9bda774ecc8e02f9dae752a8755b021a301da02d2ced02a9003ebd3552e99808c5695fde735b00c33d0f240127b19f07f1454638f1ab705184200434ea2c80f0723c8eaa8997f66be9660a5e57a0d6cfd14d861155fad0330c736e44805f554a4f1c0180e5b6498b72b6f1280d59ed236a2699b17dd72f5860d9ec6e48d586268961cff", 0xd2}], 0x1, 0x5) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) preadv2(r0, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x24000001) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000180)=0x5, 0x4) (async) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r4, 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async) ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x4000000) (async, rerun: 64) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (rerun: 64) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_follow}]}) (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r6, &(0x7f0000000980)={0x2020}, 0x160e) r7 = socket$inet6(0xa, 0x1, 0x0) (async) recvmsg(r4, &(0x7f0000000480)={&(0x7f0000000200)=@isdn, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)=""/54, 0x36}], 0x1, &(0x7f00000003c0)=""/141, 0x8d}, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x1000800, 0x0, 0x3, 0x1, 0x0, 0x547}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x2}, 0x800, 0x0, 0x1, 0x8, 0x6109, 0x3}, 0x20) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r2, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x10000, 0x0, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000c00000000100c0"]) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYRES64=r6], 0x119) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000280)="05031600d3700ee1a880", 0xa, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @remote, 0x0}, &(0x7f0000000200)=0xc) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r9, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x8100, r11, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'nicvf0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x80, 0x10000, 0x10, @empty, @private2, 0x1, 0x8740, 0x8db9, 0xd}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x8, 0x7b, 0x3a, @private1, @mcast1, 0x700, 0x7, 0x7fffffff}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000540)) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000b00)=ANY=[@ANYBLOB="e8020000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fbdbdf250000000008000100", @ANYRES32=0x0, @ANYRES64=r10, @ANYRES32=r7, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r11, @ANYRES16=r10, @ANYRES32=r12, @ANYBLOB="0400028000000500", @ANYRES32=r13, @ANYBLOB="0400028008000100", @ANYRES32=r14, @ANYRES8=r14, @ANYRES32=r15, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040004000000080007000000000008000100", @ANYRES32=r16, @ANYBLOB="780002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r17, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000008000100", @ANYRESOCT=0x0, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400020000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB], 0x2e8}, 0x1, 0x0, 0x0, 0x24044000}, 0x10041) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) program crashed: INFO: task hung in rtnl_lock bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <3> bisect: split chunk #0 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$kvm-socket$inet6-sendmmsg$inet6-recvfrom$inet6-ioctl$SIOCGSTAMP-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-openat$uhid-write$UHID_CREATE2-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$sock_SIOCGIFINDEX-sendto$packet-getsockopt$inet_mreqn-socket$packet-socket$inet_icmp_raw-ioctl$sock_SIOCGIFINDEX-sendto$packet-ioctl$sock_SIOCGIFINDEX-ioctl$ifreq_SIOCGIFINDEX_team-ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$ifreq_SIOCGIFINDEX_team-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-ioctl$ifreq_SIOCGIFINDEX_team-sendmsg$TEAM_CMD_NOOP-mmap$binder detailed listing: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r2, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x10000, 0x0, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000c00000000100c0"]) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYRES64=r6], 0x119) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000280)="05031600d3700ee1a880", 0xa, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @remote, 0x0}, &(0x7f0000000200)=0xc) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r9, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x8100, r11, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'nicvf0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x80, 0x10000, 0x10, @empty, @private2, 0x1, 0x8740, 0x8db9, 0xd}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x8, 0x7b, 0x3a, @private1, @mcast1, 0x700, 0x7, 0x7fffffff}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000540)) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000b00)=ANY=[@ANYBLOB="e8020000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fbdbdf250000000008000100", @ANYRES32=0x0, @ANYRES64=r10, @ANYRES32=r7, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r11, @ANYRES16=r10, @ANYRES32=r12, @ANYBLOB="0400028000000500", @ANYRES32=r13, @ANYBLOB="0400028008000100", @ANYRES32=r14, @ANYRES8=r14, @ANYRES32=r15, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040004000000080007000000000008000100", @ANYRES32=r16, @ANYBLOB="780002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r17, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000008000100", @ANYRESOCT=0x0, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400020000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB], 0x2e8}, 0x1, 0x0, 0x0, 0x24044000}, 0x10041) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 28] detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x5, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x10ed, @rand_addr=' \x01\x00', 0xbcd}}, @sadb_sa={0x2, 0x1, 0xffffff7d, 0xb0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}]}, 0x70}}, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) ioctl$BLKGETZONESZ(r0, 0x80041284, 0x0) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="32e693619272b3a7b655e6ab06366b7cc1e8eee380955a6fc8b838c495cc085b15464af1de0bbb1a96a7fbce6bf2eb5862462d7b154cb50a17e6700412f7dc3be1948a5457ba96f1cf152fcfc8bac9bda774ecc8e02f9dae752a8755b021a301da02d2ced02a9003ebd3552e99808c5695fde735b00c33d0f240127b19f07f1454638f1ab705184200434ea2c80f0723c8eaa8997f66be9660a5e57a0d6cfd14d861155fad0330c736e44805f554a4f1c0180e5b6498b72b6f1280d59ed236a2699b17dd72f5860d9ec6e48d586268961cff", 0xd2}], 0x1, 0x5) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) preadv2(r0, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x24000001) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000180)=0x5, 0x4) (async) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r4, 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async) ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x4000000) (async, rerun: 64) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (rerun: 64) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_follow}]}) (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r6, &(0x7f0000000980)={0x2020}, 0x160e) r7 = socket$inet6(0xa, 0x1, 0x0) (async) recvmsg(r4, &(0x7f0000000480)={&(0x7f0000000200)=@isdn, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)=""/54, 0x36}], 0x1, &(0x7f00000003c0)=""/141, 0x8d}, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x1000800, 0x0, 0x3, 0x1, 0x0, 0x547}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x2}, 0x800, 0x0, 0x1, 0x8, 0x6109, 0x3}, 0x20) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program crashed: INFO: task hung in rtnl_lock bisect: the chunk can be dropped bisect: split chunks (needed=true): <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat$full-preadv2-socket$unix-ioctl$sock_SIOCETHTOOL-syz_genetlink_get_family_id$batadv-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$BATADV_CMD_SET_MESH-setsockopt$MRT6_FLUSH-mount$tmpfs-syz_open_procfs-read$FUSE-openat$tun-ioctl$TUNSETIFF-openat$kvm-ioctl$sock_SIOCETHTOOL-ioctl$TUNSETQUEUE-sendmsg$TIPC_CMD_ENABLE_BEARER-mkdir-mkdir-mount$overlay-syz_open_procfs-read$FUSE-socket$inet6-recvmsg-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_IPV6_FLOWLABEL_MGR-close_range detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) preadv2(r0, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x24000001) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000180)=0x5, 0x4) (async) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r4, 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async) ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x4000000) (async, rerun: 64) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (rerun: 64) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_follow}]}) (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r6, &(0x7f0000000980)={0x2020}, 0x160e) r7 = socket$inet6(0xa, 0x1, 0x0) (async) recvmsg(r4, &(0x7f0000000480)={&(0x7f0000000200)=@isdn, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)=""/54, 0x36}], 0x1, &(0x7f00000003c0)=""/141, 0x8d}, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x1000800, 0x0, 0x3, 0x1, 0x0, 0x547}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x2}, 0x800, 0x0, 0x1, 0x8, 0x6109, 0x3}, 0x20) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program crashed: INFO: task hung in rtnl_lock bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 1 programs left: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) preadv2(r0, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x24000001) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000180)=0x5, 0x4) (async) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r4, 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async) ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x4000000) (async, rerun: 64) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (rerun: 64) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_follow}]}) (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r6, &(0x7f0000000980)={0x2020}, 0x160e) r7 = socket$inet6(0xa, 0x1, 0x0) (async) recvmsg(r4, &(0x7f0000000480)={&(0x7f0000000200)=@isdn, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)=""/54, 0x36}], 0x1, &(0x7f00000003c0)=""/141, 0x8d}, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x1000800, 0x0, 0x3, 0x1, 0x0, 0x547}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x2}, 0x800, 0x0, 0x1, 0x8, 0x6109, 0x3}, 0x20) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bisect: trying to concatenate bisect: concatenate 1 entries testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat$full-preadv2-socket$unix-ioctl$sock_SIOCETHTOOL-syz_genetlink_get_family_id$batadv-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$BATADV_CMD_SET_MESH-setsockopt$MRT6_FLUSH-mount$tmpfs-syz_open_procfs-read$FUSE-openat$tun-ioctl$TUNSETIFF-openat$kvm-ioctl$sock_SIOCETHTOOL-ioctl$TUNSETQUEUE-sendmsg$TIPC_CMD_ENABLE_BEARER-mkdir-mkdir-mount$overlay-syz_open_procfs-read$FUSE-socket$inet6-recvmsg-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_IPV6_FLOWLABEL_MGR-close_range detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) preadv2(r0, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x24000001) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000180)=0x5, 0x4) (async) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r4, 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async) ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x4000000) (async, rerun: 64) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (rerun: 64) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_follow}]}) (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r6, &(0x7f0000000980)={0x2020}, 0x160e) r7 = socket$inet6(0xa, 0x1, 0x0) (async) recvmsg(r4, &(0x7f0000000480)={&(0x7f0000000200)=@isdn, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)=""/54, 0x36}], 0x1, &(0x7f00000003c0)=""/141, 0x8d}, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x1000800, 0x0, 0x3, 0x1, 0x0, 0x547}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x2}, 0x800, 0x0, 0x1, 0x8, 0x6109, 0x3}, 0x20) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program crashed: INFO: task hung in rtnl_lock bisect: concatenation succeeded found reproducer with 28 syscalls minimizing guilty program testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat$full-preadv2-socket$unix-ioctl$sock_SIOCETHTOOL-syz_genetlink_get_family_id$batadv-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$BATADV_CMD_SET_MESH-setsockopt$MRT6_FLUSH-mount$tmpfs-syz_open_procfs-read$FUSE-openat$tun-ioctl$TUNSETIFF-openat$kvm-ioctl$sock_SIOCETHTOOL-ioctl$TUNSETQUEUE-sendmsg$TIPC_CMD_ENABLE_BEARER-mkdir-mkdir-mount$overlay-syz_open_procfs-read$FUSE-socket$inet6-recvmsg-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_IPV6_FLOWLABEL_MGR detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) preadv2(r0, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x24000001) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000180)=0x5, 0x4) (async) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r4, 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async) ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x4000000) (async, rerun: 64) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (rerun: 64) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_follow}]}) (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r6, &(0x7f0000000980)={0x2020}, 0x160e) r7 = socket$inet6(0xa, 0x1, 0x0) (async) recvmsg(r4, &(0x7f0000000480)={&(0x7f0000000200)=@isdn, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)=""/54, 0x36}], 0x1, &(0x7f00000003c0)=""/141, 0x8d}, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x1000800, 0x0, 0x3, 0x1, 0x0, 0x547}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x2}, 0x800, 0x0, 0x1, 0x8, 0x6109, 0x3}, 0x20) (async) program crashed: INFO: task hung in rtnl_lock testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat$full-preadv2-socket$unix-ioctl$sock_SIOCETHTOOL-syz_genetlink_get_family_id$batadv-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$BATADV_CMD_SET_MESH-setsockopt$MRT6_FLUSH-mount$tmpfs-syz_open_procfs-read$FUSE-openat$tun-ioctl$TUNSETIFF-openat$kvm-ioctl$sock_SIOCETHTOOL-ioctl$TUNSETQUEUE-sendmsg$TIPC_CMD_ENABLE_BEARER-mkdir-mkdir-mount$overlay-syz_open_procfs-read$FUSE-socket$inet6-recvmsg-setsockopt$inet6_IPV6_FLOWLABEL_MGR detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) preadv2(r0, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x24000001) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000180)=0x5, 0x4) (async) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r4, 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async) ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x4000000) (async, rerun: 64) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (rerun: 64) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_follow}]}) (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r6, &(0x7f0000000980)={0x2020}, 0x160e) r7 = socket$inet6(0xa, 0x1, 0x0) (async) recvmsg(r4, &(0x7f0000000480)={&(0x7f0000000200)=@isdn, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)=""/54, 0x36}], 0x1, &(0x7f00000003c0)=""/141, 0x8d}, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x1000800, 0x0, 0x3, 0x1, 0x0, 0x547}, 0x20) program crashed: INFO: task hung in rtnl_lock testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat$full-preadv2-socket$unix-ioctl$sock_SIOCETHTOOL-syz_genetlink_get_family_id$batadv-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$BATADV_CMD_SET_MESH-setsockopt$MRT6_FLUSH-mount$tmpfs-syz_open_procfs-read$FUSE-openat$tun-ioctl$TUNSETIFF-openat$kvm-ioctl$sock_SIOCETHTOOL-ioctl$TUNSETQUEUE-sendmsg$TIPC_CMD_ENABLE_BEARER-mkdir-mkdir-mount$overlay-syz_open_procfs-read$FUSE-socket$inet6-recvmsg detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) preadv2(r0, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x24000001) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000180)=0x5, 0x4) (async) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r4, 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async) ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x4000000) (async, rerun: 64) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (rerun: 64) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_follow}]}) (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r6, &(0x7f0000000980)={0x2020}, 0x160e) socket$inet6(0xa, 0x1, 0x0) (async) recvmsg(r4, &(0x7f0000000480)={&(0x7f0000000200)=@isdn, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)=""/54, 0x36}], 0x1, &(0x7f00000003c0)=""/141, 0x8d}, 0x3) program crashed: INFO: task hung in rtnl_lock testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat$full-preadv2-socket$unix-ioctl$sock_SIOCETHTOOL-syz_genetlink_get_family_id$batadv-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$BATADV_CMD_SET_MESH-setsockopt$MRT6_FLUSH-mount$tmpfs-syz_open_procfs-read$FUSE-openat$tun-ioctl$TUNSETIFF-openat$kvm-ioctl$sock_SIOCETHTOOL-ioctl$TUNSETQUEUE-sendmsg$TIPC_CMD_ENABLE_BEARER-mkdir-mkdir-mount$overlay-syz_open_procfs-read$FUSE-socket$inet6 detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) preadv2(r0, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x24000001) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000180)=0x5, 0x4) (async) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r4, 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async) ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x4000000) (async, rerun: 64) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (rerun: 64) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_follow}]}) (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r6, &(0x7f0000000980)={0x2020}, 0x160e) socket$inet6(0xa, 0x1, 0x0) (async) program crashed: INFO: task hung in rtnl_lock testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat$full-preadv2-socket$unix-ioctl$sock_SIOCETHTOOL-syz_genetlink_get_family_id$batadv-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$BATADV_CMD_SET_MESH-setsockopt$MRT6_FLUSH-mount$tmpfs-syz_open_procfs-read$FUSE-openat$tun-ioctl$TUNSETIFF-openat$kvm-ioctl$sock_SIOCETHTOOL-ioctl$TUNSETQUEUE-sendmsg$TIPC_CMD_ENABLE_BEARER-mkdir-mkdir-mount$overlay-syz_open_procfs-read$FUSE detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) preadv2(r0, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x24000001) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000180)=0x5, 0x4) (async) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r4, 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async) ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x4000000) (async, rerun: 64) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (rerun: 64) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_follow}]}) (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r6, &(0x7f0000000980)={0x2020}, 0x160e) program crashed: INFO: task hung in rtnl_lock testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat$full-preadv2-socket$unix-ioctl$sock_SIOCETHTOOL-syz_genetlink_get_family_id$batadv-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$BATADV_CMD_SET_MESH-setsockopt$MRT6_FLUSH-mount$tmpfs-syz_open_procfs-read$FUSE-openat$tun-ioctl$TUNSETIFF-openat$kvm-ioctl$sock_SIOCETHTOOL-ioctl$TUNSETQUEUE-sendmsg$TIPC_CMD_ENABLE_BEARER-mkdir-mkdir-mount$overlay-syz_open_procfs detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) preadv2(r0, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x24000001) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000180)=0x5, 0x4) (async) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r4, 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async) ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x4000000) (async, rerun: 64) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (rerun: 64) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_follow}]}) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') program crashed: INFO: task hung in rtnl_lock testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat$full-preadv2-socket$unix-ioctl$sock_SIOCETHTOOL-syz_genetlink_get_family_id$batadv-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$BATADV_CMD_SET_MESH-setsockopt$MRT6_FLUSH-mount$tmpfs-syz_open_procfs-read$FUSE-openat$tun-ioctl$TUNSETIFF-openat$kvm-ioctl$sock_SIOCETHTOOL-ioctl$TUNSETQUEUE-sendmsg$TIPC_CMD_ENABLE_BEARER-mkdir-mkdir-mount$overlay detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) preadv2(r0, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x24000001) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000180)=0x5, 0x4) (async) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r4, 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async) ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x4000000) (async, rerun: 64) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (rerun: 64) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_follow}]}) (async) program crashed: INFO: task hung in rtnl_lock testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat$full-preadv2-socket$unix-ioctl$sock_SIOCETHTOOL-syz_genetlink_get_family_id$batadv-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$BATADV_CMD_SET_MESH-setsockopt$MRT6_FLUSH-mount$tmpfs-syz_open_procfs-read$FUSE-openat$tun-ioctl$TUNSETIFF-openat$kvm-ioctl$sock_SIOCETHTOOL-ioctl$TUNSETQUEUE-sendmsg$TIPC_CMD_ENABLE_BEARER-mkdir-mkdir detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) preadv2(r0, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x24000001) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000180)=0x5, 0x4) (async) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r4, 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async) ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x4000000) (async, rerun: 64) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (rerun: 64) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) program crashed: INFO: task hung in rtnl_lock testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat$full-preadv2-socket$unix-ioctl$sock_SIOCETHTOOL-syz_genetlink_get_family_id$batadv-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$BATADV_CMD_SET_MESH-setsockopt$MRT6_FLUSH-mount$tmpfs-syz_open_procfs-read$FUSE-openat$tun-ioctl$TUNSETIFF-openat$kvm-ioctl$sock_SIOCETHTOOL-ioctl$TUNSETQUEUE-sendmsg$TIPC_CMD_ENABLE_BEARER-mkdir detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) preadv2(r0, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x24000001) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000180)=0x5, 0x4) (async) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r4, 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async) ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x4000000) (async, rerun: 64) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (rerun: 64) program crashed: INFO: task hung in rtnl_lock testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat$full-preadv2-socket$unix-ioctl$sock_SIOCETHTOOL-syz_genetlink_get_family_id$batadv-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$BATADV_CMD_SET_MESH-setsockopt$MRT6_FLUSH-mount$tmpfs-syz_open_procfs-read$FUSE-openat$tun-ioctl$TUNSETIFF-openat$kvm-ioctl$sock_SIOCETHTOOL-ioctl$TUNSETQUEUE-sendmsg$TIPC_CMD_ENABLE_BEARER detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) preadv2(r0, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x24000001) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000180)=0x5, 0x4) (async) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r4, 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async) ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x4000000) (async, rerun: 64) program crashed: INFO: task hung in rtnl_lock testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat$full-preadv2-socket$unix-ioctl$sock_SIOCETHTOOL-syz_genetlink_get_family_id$batadv-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$BATADV_CMD_SET_MESH-setsockopt$MRT6_FLUSH-mount$tmpfs-syz_open_procfs-read$FUSE-openat$tun-ioctl$TUNSETIFF-openat$kvm-ioctl$sock_SIOCETHTOOL-ioctl$TUNSETQUEUE detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) preadv2(r0, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x24000001) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000180)=0x5, 0x4) (async) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r4, 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async) ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0) (async) program crashed: INFO: task hung in rtnl_lock testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat$full-preadv2-socket$unix-ioctl$sock_SIOCETHTOOL-syz_genetlink_get_family_id$batadv-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$BATADV_CMD_SET_MESH-setsockopt$MRT6_FLUSH-mount$tmpfs-syz_open_procfs-read$FUSE-openat$tun-ioctl$TUNSETIFF-openat$kvm-ioctl$sock_SIOCETHTOOL detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) preadv2(r0, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x24000001) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000180)=0x5, 0x4) (async) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r4, 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async) program crashed: INFO: task hung in rtnl_lock testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat$full-preadv2-socket$unix-ioctl$sock_SIOCETHTOOL-syz_genetlink_get_family_id$batadv-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$BATADV_CMD_SET_MESH-setsockopt$MRT6_FLUSH-mount$tmpfs-syz_open_procfs-read$FUSE-openat$tun-ioctl$TUNSETIFF-openat$kvm detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) preadv2(r0, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x24000001) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000180)=0x5, 0x4) (async) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r4, 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) program crashed: INFO: task hung in rtnl_lock testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat$full-preadv2-socket$unix-ioctl$sock_SIOCETHTOOL-syz_genetlink_get_family_id$batadv-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$BATADV_CMD_SET_MESH-setsockopt$MRT6_FLUSH-mount$tmpfs-syz_open_procfs-read$FUSE-openat$tun-ioctl$TUNSETIFF detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) preadv2(r0, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x24000001) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000180)=0x5, 0x4) (async) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r4, 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) (async) program crashed: INFO: task hung in rtnl_lock testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat$full-preadv2-socket$unix-ioctl$sock_SIOCETHTOOL-syz_genetlink_get_family_id$batadv-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$BATADV_CMD_SET_MESH-setsockopt$MRT6_FLUSH-mount$tmpfs-syz_open_procfs-read$FUSE-openat$tun detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) preadv2(r0, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x24000001) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000180)=0x5, 0x4) (async) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r4, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) program crashed: INFO: task hung in rtnl_lock testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat$full-preadv2-socket$unix-ioctl$sock_SIOCETHTOOL-syz_genetlink_get_family_id$batadv-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$BATADV_CMD_SET_MESH-setsockopt$MRT6_FLUSH-mount$tmpfs-syz_open_procfs-read$FUSE detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) preadv2(r0, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x24000001) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000180)=0x5, 0x4) (async) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r4, 0x0, 0x0) (async) program crashed: INFO: task hung in rtnl_lock testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat$full-preadv2-socket$unix-ioctl$sock_SIOCETHTOOL-syz_genetlink_get_family_id$batadv-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$BATADV_CMD_SET_MESH-setsockopt$MRT6_FLUSH-mount$tmpfs-syz_open_procfs detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) preadv2(r0, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x24000001) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000180)=0x5, 0x4) (async) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0) (async) syz_open_procfs(0xffffffffffffffff, 0x0) program crashed: INFO: task hung in rtnl_lock testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat$full-preadv2-socket$unix-ioctl$sock_SIOCETHTOOL-syz_genetlink_get_family_id$batadv-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$BATADV_CMD_SET_MESH-setsockopt$MRT6_FLUSH-mount$tmpfs detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) preadv2(r0, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x24000001) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000180)=0x5, 0x4) (async) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0) (async) program crashed: INFO: task hung in rtnl_lock testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat$full-preadv2-socket$unix-ioctl$sock_SIOCETHTOOL-syz_genetlink_get_family_id$batadv-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$BATADV_CMD_SET_MESH-setsockopt$MRT6_FLUSH detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) preadv2(r0, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x24000001) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000180)=0x5, 0x4) (async) program crashed: INFO: task hung in rtnl_lock testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat$full-preadv2-socket$unix-ioctl$sock_SIOCETHTOOL-syz_genetlink_get_family_id$batadv-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$BATADV_CMD_SET_MESH detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) preadv2(r0, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x24000001) program crashed: INFO: task hung in rtnl_lock testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat$full-preadv2-socket$unix-ioctl$sock_SIOCETHTOOL-syz_genetlink_get_family_id$batadv-ioctl$ifreq_SIOCGIFINDEX_batadv_hard detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) preadv2(r0, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00'}) program crashed: INFO: task hung in rtnl_lock testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat$full-preadv2-socket$unix-ioctl$sock_SIOCETHTOOL-syz_genetlink_get_family_id$batadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) preadv2(r0, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) program crashed: INFO: task hung in rtnl_lock testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat$full-preadv2-socket$unix-ioctl$sock_SIOCETHTOOL detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) preadv2(r0, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) program crashed: INFO: task hung in rtnl_lock testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat$full-preadv2-socket$unix detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) preadv2(r0, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) (async) socket$unix(0x1, 0x5, 0x0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat$full-preadv2-ioctl$sock_SIOCETHTOOL detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) preadv2(r0, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat$full-socket$unix-ioctl$sock_SIOCETHTOOL detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) program crashed: INFO: task hung in rtnl_lock testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket$unix-ioctl$sock_SIOCETHTOOL detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) program crashed: INFO: task hung in rtnl_lock testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCETHTOOL detailed listing: executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) program crashed: INFO: task hung in rtnl_lock testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCETHTOOL detailed listing: executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, 0x0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCETHTOOL detailed listing: executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', 0x0}) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCETHTOOL detailed listing: executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs}) program did not crash extracting C reproducer testing compiled C program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCETHTOOL program crashed: no output from test machine a never seen crash title: no output from test machine, ignore simplifying guilty program options testing program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCETHTOOL detailed listing: executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) program crashed: INFO: task hung in rtnl_lock extracting C reproducer testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCETHTOOL program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCETHTOOL detailed listing: executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) program did not crash reproducing took 5h0m4.296336271s repro crashed as (corrupted=false): INFO: task kworker/u8:2:46 blocked for more than 122 seconds. Not tainted 6.12.30-syzkaller-g22d634eb24e3 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:2 state:D stack:0 pid:46 tgid:46 ppid:2 flags:0x00004000 Workqueue: ipv6_addrconf addrconf_dad_work Call Trace: context_switch kernel/sched/core.c:5924 [inline] __schedule+0x145b/0x1f10 kernel/sched/core.c:7750 __schedule_loop kernel/sched/core.c:7831 [inline] schedule+0xc6/0x240 kernel/sched/core.c:7846 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7903 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0x836/0x1b60 kernel/locking/mutex.c:786 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1117 mutex_lock+0x102/0x1c0 kernel/locking/mutex.c:270 rtnl_lock+0x19/0x20 net/core/rtnetlink.c:79 addrconf_dad_work+0xca/0x14e0 net/ipv6/addrconf.c:4240 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0x7d2/0x1020 kernel/workqueue.c:3319 worker_thread+0xc58/0x1250 kernel/workqueue.c:3400 kthread+0x2ca/0x370 kernel/kthread.c:389 ret_from_fork+0x64/0xa0 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: task kworker/u8:4:368 blocked for more than 123 seconds. Not tainted 6.12.30-syzkaller-g22d634eb24e3 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:4 state:D stack:0 pid:368 tgid:368 ppid:2 flags:0x00004000 Workqueue: events_unbound linkwatch_event Call Trace: context_switch kernel/sched/core.c:5924 [inline] __schedule+0x145b/0x1f10 kernel/sched/core.c:7750 __schedule_loop kernel/sched/core.c:7831 [inline] schedule+0xc6/0x240 kernel/sched/core.c:7846 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7903 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0x836/0x1b60 kernel/locking/mutex.c:786 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1117 mutex_lock+0x102/0x1c0 kernel/locking/mutex.c:270 rtnl_lock+0x19/0x20 net/core/rtnetlink.c:79 linkwatch_event+0x12/0x60 net/core/link_watch.c:285 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0x7d2/0x1020 kernel/workqueue.c:3319 worker_thread+0xc58/0x1250 kernel/workqueue.c:3400 kthread+0x2ca/0x370 kernel/kthread.c:389 ret_from_fork+0x64/0xa0 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: task syz-executor:407 blocked for more than 124 seconds. Not tainted 6.12.30-syzkaller-g22d634eb24e3 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:0 pid:407 tgid:407 ppid:1 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5924 [inline] __schedule+0x145b/0x1f10 kernel/sched/core.c:7750 __schedule_loop kernel/sched/core.c:7831 [inline] schedule+0xc6/0x240 kernel/sched/core.c:7846 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7903 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0x836/0x1b60 kernel/locking/mutex.c:786 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1117 mutex_lock+0x102/0x1c0 kernel/locking/mutex.c:270 rtnl_lock net/core/rtnetlink.c:79 [inline] rtnetlink_rcv_msg+0x75f/0xa00 net/core/rtnetlink.c:6675 netlink_rcv_skb+0x22e/0x4a0 net/netlink/af_netlink.c:2537 rtnetlink_rcv+0x20/0x30 net/core/rtnetlink.c:6696 netlink_unicast_kernel net/netlink/af_netlink.c:1316 [inline] netlink_unicast+0x8c6/0xa60 net/netlink/af_netlink.c:1342 netlink_sendmsg+0x7f0/0xaf0 net/netlink/af_netlink.c:1886 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] __sys_sendto+0x66d/0x6f0 net/socket.c:2217 __do_sys_sendto net/socket.c:2229 [inline] __se_sys_sendto net/socket.c:2225 [inline] __x64_sys_sendto+0xe9/0x100 net/socket.c:2225 x64_sys_call+0x2c2c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:45 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f9ec7390763 RSP: 002b:00007ffcca825958 EFLAGS: 00000202 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007f9ec80e4620 RCX: 00007f9ec7390763 RDX: 0000000000000028 RSI: 00007f9ec80e4670 RDI: 0000000000000003 RBP: 0000000000000001 R08: 00007ffcca825974 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 R13: 0000000000000000 R14: 00007f9ec80e4670 R15: 0000000000000000 INFO: task syz-executor:409 blocked for more than 127 seconds. Not tainted 6.12.30-syzkaller-g22d634eb24e3 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:0 pid:409 tgid:409 ppid:1 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5924 [inline] __schedule+0x145b/0x1f10 kernel/sched/core.c:7750 __schedule_loop kernel/sched/core.c:7831 [inline] schedule+0xc6/0x240 kernel/sched/core.c:7846 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7903 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0x836/0x1b60 kernel/locking/mutex.c:786 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1117 mutex_lock+0x102/0x1c0 kernel/locking/mutex.c:270 rtnl_lock net/core/rtnetlink.c:79 [inline] rtnetlink_rcv_msg+0x75f/0xa00 net/core/rtnetlink.c:6675 netlink_rcv_skb+0x22e/0x4a0 net/netlink/af_netlink.c:2537 rtnetlink_rcv+0x20/0x30 net/core/rtnetlink.c:6696 netlink_unicast_kernel net/netlink/af_netlink.c:1316 [inline] netlink_unicast+0x8c6/0xa60 net/netlink/af_netlink.c:1342 netlink_sendmsg+0x7f0/0xaf0 net/netlink/af_netlink.c:1886 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] __sys_sendto+0x66d/0x6f0 net/socket.c:2217 __do_sys_sendto net/socket.c:2229 [inline] __se_sys_sendto net/socket.c:2225 [inline] __x64_sys_sendto+0xe9/0x100 net/socket.c:2225 x64_sys_call+0x2c2c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:45 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f2e7c390763 RSP: 002b:00007fffd4fbefc8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007f2e7d0e4620 RCX: 00007f2e7c390763 RDX: 000000000000002c RSI: 00007f2e7d0e4670 RDI: 0000000000000003 RBP: 0000000000000001 R08: 00007fffd4fbefe4 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 R13: 0000000000000000 R14: 00007f2e7d0e4670 R15: 0000000000000000 INFO: task syz-executor:411 blocked for more than 130 seconds. Not tainted 6.12.30-syzkaller-g22d634eb24e3 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:0 pid:411 tgid:411 ppid:1 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5924 [inline] __schedule+0x145b/0x1f10 kernel/sched/core.c:7750 __schedule_loop kernel/sched/core.c:7831 [inline] schedule+0xc6/0x240 kernel/sched/core.c:7846 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7903 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0x836/0x1b60 kernel/locking/mutex.c:786 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1117 mutex_lock+0x102/0x1c0 kernel/locking/mutex.c:270 rtnl_lock net/core/rtnetlink.c:79 [inline] rtnetlink_rcv_msg+0x75f/0xa00 net/core/rtnetlink.c:6675 netlink_rcv_skb+0x22e/0x4a0 net/netlink/af_netlink.c:2537 rtnetlink_rcv+0x20/0x30 net/core/rtnetlink.c:6696 netlink_unicast_kernel net/netlink/af_netlink.c:1316 [inline] netlink_unicast+0x8c6/0xa60 net/netlink/af_netlink.c:1342 netlink_sendmsg+0x7f0/0xaf0 net/netlink/af_netlink.c:1886 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] __sys_sendto+0x66d/0x6f0 net/socket.c:2217 __do_sys_sendto net/socket.c:2229 [inline] __se_sys_sendto net/socket.c:2225 [inline] __x64_sys_sendto+0xe9/0x100 net/socket.c:2225 x64_sys_call+0x2c2c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:45 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f7e99590763 RSP: 002b:00007fffcfc43148 EFLAGS: 00000202 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007f7e9a2e4620 RCX: 00007f7e99590763 RDX: 000000000000002c RSI: 00007f7e9a2e4670 RDI: 0000000000000003 RBP: 0000000000000001 R08: 00007fffcfc43164 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 R13: 0000000000000000 R14: 00007f7e9a2e4670 R15: 0000000000000000 INFO: task syz-executor:415 blocked for more than 132 seconds. Not tainted 6.12.30-syzkaller-g22d634eb24e3 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:0 pid:415 tgid:415 ppid:1 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5924 [inline] __schedule+0x145b/0x1f10 kernel/sched/core.c:7750 __schedule_loop kernel/sched/core.c:7831 [inline] schedule+0xc6/0x240 kernel/sched/core.c:7846 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7903 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0x836/0x1b60 kernel/locking/mutex.c:786 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1117 mutex_lock+0x102/0x1c0 kernel/locking/mutex.c:270 rtnl_lock net/core/rtnetlink.c:79 [inline] rtnetlink_rcv_msg+0x75f/0xa00 net/core/rtnetlink.c:6675 netlink_rcv_skb+0x22e/0x4a0 net/netlink/af_netlink.c:2537 rtnetlink_rcv+0x20/0x30 net/core/rtnetlink.c:6696 netlink_unicast_kernel net/netlink/af_netlink.c:1316 [inline] netlink_unicast+0x8c6/0xa60 net/netlink/af_netlink.c:1342 netlink_sendmsg+0x7f0/0xaf0 net/netlink/af_netlink.c:1886 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] __sys_sendto+0x66d/0x6f0 net/socket.c:2217 __do_sys_sendto net/socket.c:2229 [inline] __se_sys_sendto net/socket.c:2225 [inline] __x64_sys_sendto+0xe9/0x100 net/socket.c:2225 x64_sys_call+0x2c2c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:45 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f34a5590763 RSP: 002b:00007fffef01d508 EFLAGS: 00000202 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007f34a62e4620 RCX: 00007f34a5590763 RDX: 0000000000000028 RSI: 00007f34a62e4670 RDI: 0000000000000003 RBP: 0000000000000001 R08: 00007fffef01d524 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 R13: 0000000000000000 R14: 00007f34a62e4670 R15: 0000000000000000 final repro crashed as (corrupted=false): INFO: task kworker/u8:2:46 blocked for more than 122 seconds. Not tainted 6.12.30-syzkaller-g22d634eb24e3 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:2 state:D stack:0 pid:46 tgid:46 ppid:2 flags:0x00004000 Workqueue: ipv6_addrconf addrconf_dad_work Call Trace: context_switch kernel/sched/core.c:5924 [inline] __schedule+0x145b/0x1f10 kernel/sched/core.c:7750 __schedule_loop kernel/sched/core.c:7831 [inline] schedule+0xc6/0x240 kernel/sched/core.c:7846 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7903 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0x836/0x1b60 kernel/locking/mutex.c:786 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1117 mutex_lock+0x102/0x1c0 kernel/locking/mutex.c:270 rtnl_lock+0x19/0x20 net/core/rtnetlink.c:79 addrconf_dad_work+0xca/0x14e0 net/ipv6/addrconf.c:4240 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0x7d2/0x1020 kernel/workqueue.c:3319 worker_thread+0xc58/0x1250 kernel/workqueue.c:3400 kthread+0x2ca/0x370 kernel/kthread.c:389 ret_from_fork+0x64/0xa0 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: task kworker/u8:4:368 blocked for more than 123 seconds. Not tainted 6.12.30-syzkaller-g22d634eb24e3 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:4 state:D stack:0 pid:368 tgid:368 ppid:2 flags:0x00004000 Workqueue: events_unbound linkwatch_event Call Trace: context_switch kernel/sched/core.c:5924 [inline] __schedule+0x145b/0x1f10 kernel/sched/core.c:7750 __schedule_loop kernel/sched/core.c:7831 [inline] schedule+0xc6/0x240 kernel/sched/core.c:7846 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7903 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0x836/0x1b60 kernel/locking/mutex.c:786 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1117 mutex_lock+0x102/0x1c0 kernel/locking/mutex.c:270 rtnl_lock+0x19/0x20 net/core/rtnetlink.c:79 linkwatch_event+0x12/0x60 net/core/link_watch.c:285 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0x7d2/0x1020 kernel/workqueue.c:3319 worker_thread+0xc58/0x1250 kernel/workqueue.c:3400 kthread+0x2ca/0x370 kernel/kthread.c:389 ret_from_fork+0x64/0xa0 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: task syz-executor:407 blocked for more than 124 seconds. Not tainted 6.12.30-syzkaller-g22d634eb24e3 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:0 pid:407 tgid:407 ppid:1 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5924 [inline] __schedule+0x145b/0x1f10 kernel/sched/core.c:7750 __schedule_loop kernel/sched/core.c:7831 [inline] schedule+0xc6/0x240 kernel/sched/core.c:7846 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7903 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0x836/0x1b60 kernel/locking/mutex.c:786 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1117 mutex_lock+0x102/0x1c0 kernel/locking/mutex.c:270 rtnl_lock net/core/rtnetlink.c:79 [inline] rtnetlink_rcv_msg+0x75f/0xa00 net/core/rtnetlink.c:6675 netlink_rcv_skb+0x22e/0x4a0 net/netlink/af_netlink.c:2537 rtnetlink_rcv+0x20/0x30 net/core/rtnetlink.c:6696 netlink_unicast_kernel net/netlink/af_netlink.c:1316 [inline] netlink_unicast+0x8c6/0xa60 net/netlink/af_netlink.c:1342 netlink_sendmsg+0x7f0/0xaf0 net/netlink/af_netlink.c:1886 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] __sys_sendto+0x66d/0x6f0 net/socket.c:2217 __do_sys_sendto net/socket.c:2229 [inline] __se_sys_sendto net/socket.c:2225 [inline] __x64_sys_sendto+0xe9/0x100 net/socket.c:2225 x64_sys_call+0x2c2c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:45 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f9ec7390763 RSP: 002b:00007ffcca825958 EFLAGS: 00000202 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007f9ec80e4620 RCX: 00007f9ec7390763 RDX: 0000000000000028 RSI: 00007f9ec80e4670 RDI: 0000000000000003 RBP: 0000000000000001 R08: 00007ffcca825974 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 R13: 0000000000000000 R14: 00007f9ec80e4670 R15: 0000000000000000 INFO: task syz-executor:409 blocked for more than 127 seconds. Not tainted 6.12.30-syzkaller-g22d634eb24e3 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:0 pid:409 tgid:409 ppid:1 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5924 [inline] __schedule+0x145b/0x1f10 kernel/sched/core.c:7750 __schedule_loop kernel/sched/core.c:7831 [inline] schedule+0xc6/0x240 kernel/sched/core.c:7846 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7903 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0x836/0x1b60 kernel/locking/mutex.c:786 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1117 mutex_lock+0x102/0x1c0 kernel/locking/mutex.c:270 rtnl_lock net/core/rtnetlink.c:79 [inline] rtnetlink_rcv_msg+0x75f/0xa00 net/core/rtnetlink.c:6675 netlink_rcv_skb+0x22e/0x4a0 net/netlink/af_netlink.c:2537 rtnetlink_rcv+0x20/0x30 net/core/rtnetlink.c:6696 netlink_unicast_kernel net/netlink/af_netlink.c:1316 [inline] netlink_unicast+0x8c6/0xa60 net/netlink/af_netlink.c:1342 netlink_sendmsg+0x7f0/0xaf0 net/netlink/af_netlink.c:1886 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] __sys_sendto+0x66d/0x6f0 net/socket.c:2217 __do_sys_sendto net/socket.c:2229 [inline] __se_sys_sendto net/socket.c:2225 [inline] __x64_sys_sendto+0xe9/0x100 net/socket.c:2225 x64_sys_call+0x2c2c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:45 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f2e7c390763 RSP: 002b:00007fffd4fbefc8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007f2e7d0e4620 RCX: 00007f2e7c390763 RDX: 000000000000002c RSI: 00007f2e7d0e4670 RDI: 0000000000000003 RBP: 0000000000000001 R08: 00007fffd4fbefe4 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 R13: 0000000000000000 R14: 00007f2e7d0e4670 R15: 0000000000000000 INFO: task syz-executor:411 blocked for more than 130 seconds. Not tainted 6.12.30-syzkaller-g22d634eb24e3 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:0 pid:411 tgid:411 ppid:1 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5924 [inline] __schedule+0x145b/0x1f10 kernel/sched/core.c:7750 __schedule_loop kernel/sched/core.c:7831 [inline] schedule+0xc6/0x240 kernel/sched/core.c:7846 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7903 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0x836/0x1b60 kernel/locking/mutex.c:786 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1117 mutex_lock+0x102/0x1c0 kernel/locking/mutex.c:270 rtnl_lock net/core/rtnetlink.c:79 [inline] rtnetlink_rcv_msg+0x75f/0xa00 net/core/rtnetlink.c:6675 netlink_rcv_skb+0x22e/0x4a0 net/netlink/af_netlink.c:2537 rtnetlink_rcv+0x20/0x30 net/core/rtnetlink.c:6696 netlink_unicast_kernel net/netlink/af_netlink.c:1316 [inline] netlink_unicast+0x8c6/0xa60 net/netlink/af_netlink.c:1342 netlink_sendmsg+0x7f0/0xaf0 net/netlink/af_netlink.c:1886 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] __sys_sendto+0x66d/0x6f0 net/socket.c:2217 __do_sys_sendto net/socket.c:2229 [inline] __se_sys_sendto net/socket.c:2225 [inline] __x64_sys_sendto+0xe9/0x100 net/socket.c:2225 x64_sys_call+0x2c2c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:45 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f7e99590763 RSP: 002b:00007fffcfc43148 EFLAGS: 00000202 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007f7e9a2e4620 RCX: 00007f7e99590763 RDX: 000000000000002c RSI: 00007f7e9a2e4670 RDI: 0000000000000003 RBP: 0000000000000001 R08: 00007fffcfc43164 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 R13: 0000000000000000 R14: 00007f7e9a2e4670 R15: 0000000000000000 INFO: task syz-executor:415 blocked for more than 132 seconds. Not tainted 6.12.30-syzkaller-g22d634eb24e3 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:0 pid:415 tgid:415 ppid:1 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5924 [inline] __schedule+0x145b/0x1f10 kernel/sched/core.c:7750 __schedule_loop kernel/sched/core.c:7831 [inline] schedule+0xc6/0x240 kernel/sched/core.c:7846 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7903 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0x836/0x1b60 kernel/locking/mutex.c:786 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1117 mutex_lock+0x102/0x1c0 kernel/locking/mutex.c:270 rtnl_lock net/core/rtnetlink.c:79 [inline] rtnetlink_rcv_msg+0x75f/0xa00 net/core/rtnetlink.c:6675 netlink_rcv_skb+0x22e/0x4a0 net/netlink/af_netlink.c:2537 rtnetlink_rcv+0x20/0x30 net/core/rtnetlink.c:6696 netlink_unicast_kernel net/netlink/af_netlink.c:1316 [inline] netlink_unicast+0x8c6/0xa60 net/netlink/af_netlink.c:1342 netlink_sendmsg+0x7f0/0xaf0 net/netlink/af_netlink.c:1886 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] __sys_sendto+0x66d/0x6f0 net/socket.c:2217 __do_sys_sendto net/socket.c:2229 [inline] __se_sys_sendto net/socket.c:2225 [inline] __x64_sys_sendto+0xe9/0x100 net/socket.c:2225 x64_sys_call+0x2c2c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:45 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f34a5590763 RSP: 002b:00007fffef01d508 EFLAGS: 00000202 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007f34a62e4620 RCX: 00007f34a5590763 RDX: 0000000000000028 RSI: 00007f34a62e4670 RDI: 0000000000000003 RBP: 0000000000000001 R08: 00007fffef01d524 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 R13: 0000000000000000 R14: 00007f34a62e4670 R15: 0000000000000000