Extracting prog: 12m12.270540842s
Minimizing prog: 24m35.247638223s
Simplifying prog options: 0s
Extracting C: 20.394707544s
Simplifying C: 12m27.349077564s


extracting reproducer from 24 programs
testing a last program of every proc
single: executing 4 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$dm_control-ioctl$DM_DEV_RENAME-munmap-mknodat-getrandom-syz_clone-syz_init_net_socket$bt_l2cap-setsockopt$sock_linger-syz_usb_connect-syz_usb_control_io$uac3-close
detailed listing:
executing program 0:
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$DM_DEV_RENAME(r0, 0xc138fd05, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x1c0, 0x138, 0x0, 0x0, 0x84010, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, @uuid={'LVM-syz', 0x0, '3\x00'}})
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
getrandom(0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x8000001, 0x1}, 0x8)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0)
syz_usb_control_io$uac3(r2, 0x0, 0x0)
close(r1)

program did not crash
program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bind$inet-connect$inet-setsockopt$inet_IP_XFRM_POLICY-write-openat$kvm-socket$inet6_tcp-fdatasync-setns-syz_usb_connect$midi-mmap$IORING_OFF_SQ_RING-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-openat$binderfs-ioctl$BINDER_WRITE_READ-ioctl$KVM_CHECK_EXTENSION-syz_ublk_setup_queues-syz_io_uring_setup
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x44}, @in=@rand_addr=0x640100ff, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x3, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x2, 0x0, 0x400000004}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x6c}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x3, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
write(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
fdatasync(r2)
setns(0xc9, 0x0)
syz_usb_connect$midi(0x5, 0x24, &(0x7f0000001700)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x763, 0x2012, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x6a, 0x50, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x8}}}}}]}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = openat$binderfs(0xffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001780)={0x20, 0x0, &(0x7f00000017c0)=[@request_death, @clear_death]})
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xc)
syz_ublk_setup_queues(r1, 0x0, &(0x7f00000000c0)={0x0, 0x8af0, 0x20, 0x0, 0x1c9}, &(0x7f00000003c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb5e7, 0x8000, 0x0, 0x26f}, <r5=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd197, 0x400, 0x2, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4364, 0x4000, 0x3, 0x295}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7567, 0x40, 0x1, 0x19f}}], 0x4, &(0x7f0000001640)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x0, 0x706, 0x0, &(0x7f0000000640)=@buf_512="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"}}, &(0x7f00000016c0))
syz_io_uring_setup(0x21c0, &(0x7f0000000340)={0x0, 0xca23, 0x4000, 0xfffffff7, 0x100019, 0x0, r5}, &(0x7f0000000300), &(0x7f0000ff4000), &(0x7f0000000080))

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-openat-mmap-socket$packet-socket$packet-fcntl$dupfd-fcntl$dupfd-read$FUSE-shutdown-bind$inet-setsockopt$sock_int-setsockopt$sock_int-mprotect-syz_create_resource$futex-futex-futex-recvmmsg-sendto$inet-mkdirat-mount$bpf-syz_open_procfs-syz_open_procfs-pread64-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_BLA_CLAIM-sendmsg$BATADV_CMD_GET_BLA_CLAIM
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file2\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
socket$packet(0x11, 0x2, 0x300) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
fcntl$dupfd(r2, 0x406, r2) (async)
r3 = fcntl$dupfd(r2, 0x406, r2)
read$FUSE(r3, &(0x7f0000004600)={0x2020}, 0x2020)
shutdown(r0, 0x1)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x4, 0x4) (async)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x4, 0x4)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r4 = syz_create_resource$futex(&(0x7f0000001380))
futex(r4, 0x80, 0xfffffffe, 0x0, 0x0, 0xbffffffd) (async)
futex(r4, 0x80, 0xfffffffe, 0x0, 0x0, 0xbffffffd)
recvmmsg(r0, &(0x7f0000004580)=[{{&(0x7f0000000200)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000004440)=[{&(0x7f0000000280)=""/250, 0xfa}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f0000004280)}, {&(0x7f00000042c0)=""/46, 0x2e}, {&(0x7f0000004300)=""/170, 0xaa}, {&(0x7f00000043c0)=""/74, 0x4a}], 0x7, &(0x7f00000044c0)=""/154, 0x9a}, 0x4}], 0x1, 0xa161, &(0x7f00000045c0)={0x0, 0x989680})
sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f00000001c0)={0x2, 0x4e20}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c6d6f64653d30303030303030303030b030303030303430312c0000000000"])
syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') (async)
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
pread64(r5, &(0x7f0000002280)=""/4096, 0x1000, 0xd33)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001440), r3)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="24ffff00", @ANYRES16=r6, @ANYBLOB="040027bd7000ffdbdf250b00000005003500070000000500380001000000"], 0x24}}, 0x80c1) (async)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="24ffff00", @ANYRES16=r6, @ANYBLOB="040027bd7000ffdbdf250b00000005003500070000000500380001000000"], 0x24}}, 0x80c1)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getpid-sched_setaffinity-connect$unix-syz_open_dev$hiddev-close-sched_setaffinity-socket-setsockopt$packet_tx_ring-socket-setsockopt$packet_tx_ring-recvmmsg$unix-recvmmsg-close-syz_usb_connect$uac2-socket$packet-ioctl$BTRFS_IOC_TREE_SEARCH
detailed listing:
executing program 0:
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x8, 0x400c00)
close(r1)
sched_setaffinity(r0, 0x0, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10)
recvmmsg$unix(r2, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000014c0)=""/32, 0x20}], 0x1}, 0x9}], 0x1, 0x100, 0x0)
close(r3)
syz_usb_connect$uac2(0x2, 0x9f, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x763, 0x2080, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0xda, 0x20, 0x8f, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x20, 0x7f}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x3, 0x15, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x6, 0x405, 0xf6, 0x4, 0x0, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xd, 0x2, 0x4e, 0xb1}, @as_header={0x10, 0x24, 0x1, 0x6, 0xff, 0x2, 0x4, 0x40, 0x200, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xf0, 0x3, 0x6, {0x8, 0x25, 0x1, 0x2, 0x33, 0x3, 0xb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x6, 0x40, {0x8, 0x25, 0x1, 0x0, 0x33, 0xc0, 0x6}}}}}}}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
r4 = socket$packet(0x11, 0x0, 0x300)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000001500)={{0x0, 0x3, 0x8001, 0x7, 0x4, 0x6, 0x3ff, 0x7, 0x4, 0x0, 0x8, 0x8, 0x8, 0x8, 0x101}})

program did not crash
single: failed to extract reproducer
bisect: bisecting 24 programs with base timeout 30s
testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 36, 26, 19, 24, 2, 12, 2, 5, 9, 7, 9, 21, 16, 18, 7, 9, 9, 7, 26, 19, 11, 18, 11]
detailed listing:
executing program 2:
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000007100), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000007140)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x9c10, 0x0, 0x0, {<r1=>0x0, {'syz', 0x0, '0\x00'}, @uuid={'LVM-syz', 0x0, '2\x00'}}})
ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x1d0, 0x138, 0x1, 0x0, 0x1000, 0x0, 0x0, @by_dev={r1}, [@crypt={0x0, 0x10, 0x0, 0x98, 'crypt\x00', {'aes-cbc-benbi', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '8', 0x20, {@ram={'/dev/ram', 0x0}, 0x20, '1'}, ' 1 sector_size:1024'}}]})
executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000004c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000500)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000580)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="9fd8da8e45bcce079f16b15e72c2bb973672753c8b8d7f0e", 0x18, 0xc0814, 0x0, 0x0)
pipe2(&(0x7f0000000040)={0x0, <r1=>0x0}, 0x0)
pipe2(&(0x7f0000000140)={<r2=>0x0, 0x0}, 0x0)
tee(r2, r1, 0xff, 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00501e90508394b5f18a4acffb000a8d113307e5c9b7e6228544ae38b6e3050f44bbb5de816b1715a565ee20204632cd28ce5b7a9c6bb8d2c26ee35c5ec5c1a5422fb3fe7de225c6817a1c3c2a19a0ac37378e806c65d2c77c130de55124511907d06e62fe2c5a236421cf7b95a11a732ddc727373cb73e294047239c894cca2c4a063f6a1acec5f30a439c1", @ANYRES16=0x0, @ANYBLOB="08002fbd7004fedbdfa55900000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000000)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000600)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4)
sendto$inet(r0, &(0x7f0000000680)='<', 0x381, 0x805, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @local}, 0x47) (async)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000004c0)=0x100000001, 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000500)=0x2, 0x4) (async)
connect$inet(r0, &(0x7f0000000580)={0x2, 0x4e21, @local}, 0x10) (async)
sendto$inet(r0, &(0x7f00000005c0)="9fd8da8e45bcce079f16b15e72c2bb973672753c8b8d7f0e", 0x18, 0xc0814, 0x0, 0x0) (async)
pipe2(&(0x7f0000000040)={0x0, 0x0}, 0x0) (async)
pipe2(&(0x7f0000000140)={0x0, 0x0}, 0x0) (async)
tee(r2, r1, 0xff, 0x8) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) (async)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00501e90508394b5f18a4acffb000a8d113307e5c9b7e6228544ae38b6e3050f44bbb5de816b1715a565ee20204632cd28ce5b7a9c6bb8d2c26ee35c5ec5c1a5422fb3fe7de225c6817a1c3c2a19a0ac37378e806c65d2c77c130de55124511907d06e62fe2c5a236421cf7b95a11a732ddc727373cb73e294047239c894cca2c4a063f6a1acec5f30a439c1", @ANYRES16=0x0, @ANYBLOB="08002fbd7004fedbdfa55900000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000000) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000600)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) (async)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) (async)
sendto$inet(r0, &(0x7f0000000680)='<', 0x381, 0x805, 0x0, 0x0) (async)
executing program 2:
ptrace(0x10, 0x0)
tkill(0x0, 0x30)
ptrace(0x10, 0x0)
ptrace$peeksig(0x4209, 0x0, &(0x7f00000000c0), &(0x7f0000000340))
capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000100)={0x200000, 0x1fffff, 0x4, 0x0, 0x2, 0x7})
pipe2(&(0x7f0000000140)={<r0=>0xffffffffffffffff}, 0x0)
r1 = accept4$tipc(r0, &(0x7f0000000180), &(0x7f00000001c0)=0xffffffffffffffd8, 0x180800)
fcntl$setpipe(r1, 0x407, 0x0)
unshare(0x20000000)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
r3 = landlock_create_ruleset(&(0x7f0000000200)={0x8000, 0x0, 0x0, 0x6007, 0x2c1dae4c6dc2442}, 0x30, 0x0)
landlock_restrict_self(r3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$SIOCGSTAMP(r4, 0x8906, 0x0)
recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40000102, 0x0)
sendmsg$802154_dgram(r4, &(0x7f0000000980)={&(0x7f00000009c0)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000a00)={0x0}}, 0x0)
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0xa8041, 0x0)
ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000280))
recvmsg$unix(r0, &(0x7f0000000940)={&(0x7f0000000380), 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/56, 0x38}, {&(0x7f0000000440)=""/218, 0xda}, {&(0x7f0000000540)=""/114, 0x72}, {&(0x7f00000005c0)=""/215, 0xd7}, {&(0x7f00000006c0)=""/224, 0xe0}], 0x5, &(0x7f0000000840)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x83)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
unshare(0x44000800)
syz_pidfd_open(r2, 0x0)
syz_clone3(&(0x7f0000000000)={0x6200, 0x0, 0x0, 0x0, {0xd}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r2], 0x1}, 0x58)
executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000380)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f00000003c0))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000001c0)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0xe24, 0x0, @empty, 0x80002}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000240), 0x3)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000280)=@ccm_128={{0x304}, "b6bb9f0a1c020095", "0000000000000400", "78ab0743", "30d03a79b6030909"}, 0x28)
writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000300)="94c002", 0x3}], 0x1)
r3 = syz_usb_connect(0x3, 0x39, &(0x7f0000000080)=ANY=[@ANYRESDEC=0x0], 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x143)
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x2)
setxattr$incfs_metadata(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0, 0x2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000000)=0x4, 0x4)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40)
syz_usb_connect(0x4, 0x4f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010213df6220f30c7a8119eb010203010902"], &(0x7f0000000100)={0x0, 0x0, 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB="050f020010030000000610400a14070000000000", @ANYRES32=r3]})
executing program 2:
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x199)
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101701)
ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000280)=@usbdevfs_connect={0x4})
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000180)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./mydev\x00', &(0x7f0000000480)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./mydev/ttyS0\x00', 0x2, 0xe1)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000500)={0x3, 0x8, 0x1000, 0x8, 0x38, "050052029851b42cd3010000000100"})
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./tracing\x00', &(0x7f0000000340)='tracefs\x00', 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000000002"})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracing/buffer_subbuf_size_kb\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='8', 0x1)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0xa, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2, 0x5, 0x2, 0x8, 0x2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x10}, 0x1, 0x7}, 0x20000000)
r5 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000104f0413b600000000000109022d000100001000090400060103008500092106006501221800090581030004021587090502031000030607"], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f00000005c0)={0xffffffffffffffa4, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x0}, 0x0)
accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000100)=0x10, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/locks\x00', 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bfe000/0x400000)=nil)
executing program 0:
r0 = syz_create_resource$binfmt(&(0x7f0000000180)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r1, &(0x7f00000005c0)="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", 0x2000, &(0x7f00000025c0)={&(0x7f0000002680)={0x50, 0x0, 0xffffffffffff439b, {0x7, 0x29, 0x100003, 0x24ff871999b13de6, 0xa39d, 0xa, 0x8, 0x8, 0x0, 0x0, 0x2, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000002700)="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", 0x2000, &(0x7f0000004700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000047c0)={0x78, 0xffffffffffffffda, 0x5, {0x8, 0x3d, 0x0, {0x4, 0x2b, 0x0, 0x400, 0xd, 0xfffffffffffffffa, 0x9ec, 0x8, 0x10004, 0x8000, 0x76, 0xee01, 0x0, 0x10, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/mapper/control\x00', 0x2, 0x82)
ioctl(r2, 0xc178fd0c, &(0x7f0000000100)="04000000000000000000000078010000380100000100000000000000000000000000000000000000003f")
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)
syz_fuse_handle_req(r1, &(0x7f0000004840)="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", 0x2000, &(0x7f0000023000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000006980)={0x18, 0xffffffffffffffda, 0x2, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 0:
mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil)
syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8e4, 0x17f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xa, 0xb0, 0xf, {0x8, 0xb, 0x0, 0x2, 0x1, 0x26, 0x30, 0x9e}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x120, 0x4, 0xa, 0x14, {0xa, 0x25, 0x25, 0x1ff, 0x50, 0xff6f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0xe2, 0x1, {0xa, 0x25, 0x25, 0x2, 0xd, 0x1}}}}}}}}]}}, 0x0)
executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00')
r1 = openat(r0, &(0x7f0000000040)='can/rcvlist_eff\x00', 0x0, 0x0)
read(r1, &(0x7f00000000c0), 0x1000) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x14, 0x1d, 0x1, 0x0, 0x2, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x0)
executing program 1:
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1b7)
mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f00000002c0)='./mnt\x00', 0x0, 0x8410, 0x0)
r0 = open$dir(&(0x7f0000000340)='./mnt\x00', 0x0, 0x2)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000380)={0x9, 0xffffffff000, 0x5, 0x6})
executing program 1:
r0 = fsopen(&(0x7f0000000100)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x1)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85)
lseek(r2, 0x501, 0x1)
getdents(r2, &(0x7f0000000180)=""/201, 0xc9)
executing program 1:
lseek(0xffffffffffffffff, 0xfffffffffffff800, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x4e1f, @local}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x16, {0x2, 0x4e20, @remote}, 'wg0\x00'})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x801)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)
executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)
chdir(&(0x7f0000000240)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x101000, 0x188)
getdents64(r0, &(0x7f00000002c0)=""/4085, 0xff5)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000004d80)=ANY=[@ANYBLOB="120100020000001043556400000000000001090224000100000800090400050103000300092101004001221800090581030004001587a5eae110d69685486f35acc6ab2afd472760e782fc75d17591a5237c52ead0aab90ba74186c2c134a2"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004f00), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000004f40)={0x4})
close_range(r2, 0xffffffffffffffff, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000004e00)={0x24, 0x0, 0x0, &(0x7f0000004e40)=ANY=[@ANYBLOB="002218000000050c08950109308102c0c0"], 0x0}, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000004e80), 0xa, 0x62080)
ioctl$HIDIOCSREPORT(r5, 0x400c4808, &(0x7f0000004ec0)={0x1, 0x100})
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000012c0)='./dev\x00', 0x1ff)
getgroups(0x2, &(0x7f0000004440)=[0xffffffffffffffff, 0xffffffffffffffff])
openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
executing program 2:
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x8, 0x400c00)
close(r1)
sched_setaffinity(r0, 0x0, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10)
recvmmsg$unix(r2, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000014c0)=""/32, 0x20}], 0x1}, 0x9}], 0x1, 0x100, 0x0)
close(r3)
syz_usb_connect$uac2(0x2, 0x9f, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x763, 0x2080, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0xda, 0x20, 0x8f, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x20, 0x7f}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x3, 0x15, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x6, 0x405, 0xf6, 0x4, 0x0, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xd, 0x2, 0x4e, 0xb1}, @as_header={0x10, 0x24, 0x1, 0x6, 0xff, 0x2, 0x4, 0x40, 0x200, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xf0, 0x3, 0x6, {0x8, 0x25, 0x1, 0x2, 0x33, 0x3, 0xb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x6, 0x40, {0x8, 0x25, 0x1, 0x0, 0x33, 0xc0, 0x6}}}}}}}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
r4 = socket$packet(0x11, 0x0, 0x300)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000001500)={{0x0, 0x3, 0x8001, 0x7, 0x4, 0x6, 0x3ff, 0x7, 0x4, 0x0, 0x8, 0x8, 0x8, 0x8, 0x101}})
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000002240)='./proc\x00', 0x1ff)
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x201, 0x0)
r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {<r2=>0x0, {'syz', 0x0, '0\x00'}}})
mknodat$dm(0xffffffffffffff9c, &(0x7f00000002c0)='./dm0\x00', 0x6180, r2)
ioctl$DM_DEV_SET_GEOMETRY(r0, 0xc138fd0f, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x190, 0x138, 0x0, 0x0, 0xc00, 0x0, 0x0, @by_dev={r2}, {0x11c, 0x20, 0x91, 0x20, 0x29, 0x20, 0x1968}})
mount(0x0, &(0x7f0000002280)='./proc\x00', &(0x7f00000022c0)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000002300)='./proc/modules\x00', 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0xc, 0x0, 0xfec00000})
r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x30, {"b80000c0fec70010000000c7401020000000c70011000000c74010000000ff"}}], 0x30})
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
pread64(r3, &(0x7f0000002340)=""/185, 0xb9, 0xe)
pread64(r3, &(0x7f0000002700)=""/131, 0x83, 0xffffffff)
executing program 3:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id='])
read$FUSE(r0, &(0x7f0000000cc0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_CREATE_OPEN(r0, &(0x7f0000002d00)={0xa0, 0x0, r1, {{0x2, 0x3, 0x100000001, 0x4792, 0x3, 0x6, {0x0, 0x8, 0x0, 0xe0, 0x81, 0x7fffffffffffffff, 0x2, 0x7, 0x3, 0x6000, 0x4, 0xee00, 0x0, 0x3, 0x7}}, {0x0, 0x4}}}, 0xa0)
mkdir(&(0x7f0000000a00)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0), 0x8, &(0x7f0000000b00)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
executing program 3:
r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000001100)='./file0\x00', 0x1ba)
mount$incfs(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', &(0x7f00000017c0), 0x82, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'lo\x00', &(0x7f0000000040)=@ethtool_per_queue_op={0x25, 0xe, [0x9, 0x1ff, 0x7fff, 0x1c2, 0x0, 0x7, 0x81, 0x7, 0x6, 0x5, 0x3ff, 0x80, 0x0, 0x942f, 0x10, 0x10000, 0xe157, 0x1000, 0x65, 0x9, 0x4, 0x8, 0x6, 0x2, 0x5, 0x3, 0x92, 0x1d, 0x1, 0x0, 0xf0000000, 0x3, 0x9, 0x6, 0x47cd, 0x3, 0x8, 0xff, 0x6, 0x9, 0xb2d5, 0xf045, 0x2, 0x1ff, 0x351, 0x9, 0x9, 0x1, 0x2, 0x80000000, 0x0, 0x7fff, 0x91, 0xb7c, 0xc, 0x7, 0x80000001, 0x8, 0x2, 0x4, 0x1, 0x41, 0x8000, 0x4, 0x20b, 0x2, 0x2, 0x9, 0x6, 0x6, 0x8b, 0xfffff91a, 0x4, 0x8a, 0x8, 0x101, 0x80000000, 0x8, 0x2, 0x2, 0x7, 0x81, 0xa, 0x4, 0x3, 0x6, 0xaf6, 0x1, 0x9, 0x5, 0x2, 0x6, 0x81, 0x19a400, 0xcb, 0x27, 0x9, 0xe, 0x4, 0x10001, 0x4c, 0x8, 0x3, 0x10000, 0x3, 0x4, 0x7, 0x6, 0xfffffffa, 0x20000, 0x8, 0xfffffffb, 0x0, 0x5, 0x0, 0x9, 0x1, 0x3, 0x0, 0xfb, 0x6, 0x8000, 0x7, 0x3, 0x9, 0x4, 0x6, 0x5]}})
r2 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./file0\x00', 0xc2c02e4d8eabe456, 0xd)
r3 = openat$incfs(r2, &(0x7f0000001840)='.pending_reads\x00', 0x20001, 0x130)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, &(0x7f0000002a00))
ioctl$TIOCL_GETKMSGREDIRECT(r3, 0xc058671e, 0x0)
executing program 3:
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1b7)
mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f00000002c0)='./mnt\x00', 0x0, 0x8410, 0x0)
r0 = open$dir(&(0x7f0000000340)='./mnt\x00', 0x0, 0x2)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000380)={0x9, 0xffffffff000, 0x5, 0x6})
executing program 3:
r0 = fsopen(&(0x7f0000000100)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x1)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x8880, 0x85)
lseek(r2, 0x501, 0x1)
getdents(r2, 0x0, 0x0)
executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file2\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
socket$packet(0x11, 0x2, 0x300) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
fcntl$dupfd(r2, 0x406, r2) (async)
r3 = fcntl$dupfd(r2, 0x406, r2)
read$FUSE(r3, &(0x7f0000004600)={0x2020}, 0x2020)
shutdown(r0, 0x1)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x4, 0x4) (async)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x4, 0x4)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r4 = syz_create_resource$futex(&(0x7f0000001380))
futex(r4, 0x80, 0xfffffffe, 0x0, 0x0, 0xbffffffd) (async)
futex(r4, 0x80, 0xfffffffe, 0x0, 0x0, 0xbffffffd)
recvmmsg(r0, &(0x7f0000004580)=[{{&(0x7f0000000200)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000004440)=[{&(0x7f0000000280)=""/250, 0xfa}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f0000004280)}, {&(0x7f00000042c0)=""/46, 0x2e}, {&(0x7f0000004300)=""/170, 0xaa}, {&(0x7f00000043c0)=""/74, 0x4a}], 0x7, &(0x7f00000044c0)=""/154, 0x9a}, 0x4}], 0x1, 0xa161, &(0x7f00000045c0)={0x0, 0x989680})
sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f00000001c0)={0x2, 0x4e20}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c6d6f64653d30303030303030303030b030303030303430312c0000000000"])
syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') (async)
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
pread64(r5, &(0x7f0000002280)=""/4096, 0x1000, 0xd33)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001440), r3)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="24ffff00", @ANYRES16=r6, @ANYBLOB="040027bd7000ffdbdf250b00000005003500070000000500380001000000"], 0x24}}, 0x80c1) (async)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="24ffff00", @ANYRES16=r6, @ANYBLOB="040027bd7000ffdbdf250b00000005003500070000000500380001000000"], 0x24}}, 0x80c1)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000680)='./tracing\x00', &(0x7f00000006c0)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000380)={'syztnl2\x00', <r2=>0x0, 0x700, 0x7, 0x7f5, 0x173, {{0x26, 0x4, 0x3, 0x3b, 0x98, 0x64, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @empty, {[@timestamp_prespec={0x44, 0x14, 0xbd, 0x3, 0x9, [{@private=0xa010100, 0x3}, {@broadcast, 0x21}]}, @timestamp={0x44, 0x8, 0x61, 0x0, 0x6, [0x4b]}, @noop, @noop, @generic={0x82, 0x4, "1893"}, @noop, @timestamp_addr={0x44, 0x3c, 0x75, 0x1, 0x6, [{@empty, 0x10000}, {@multicast1, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@broadcast, 0x10}, {@dev={0xac, 0x14, 0x14, 0x18}}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x81}]}, @timestamp={0x44, 0x24, 0x56, 0x0, 0x9, [0x7, 0x2, 0x50, 0x0, 0x3, 0xa2ab, 0x2, 0xa3]}]}}}}})
sendto$packet(r0, &(0x7f0000000300)="aa3d33eb608573d8f990726f5a2c5c02030e269e9b0f37bc4169b8b218f6bffc5a02459e12dc09fb9bc7d8337be1ef13861a662d4280ab718fb705bb3c29741060c5cafb4551f0cce64aae1b30df25f9a22d1874caa1d99ad1e01989c8a1e35de97a86610b4b21f4df60059534f411ce108047c52d318aaa11", 0x79, 0x28810, &(0x7f0000000480)={0x11, 0xc, r2, 0x1, 0x2, 0x6, @remote}, 0x14)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', 0x1, 0x0)
write(r3, &(0x7f00000001c0)="0059ec", 0x3)
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./trace\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./trace/events/sched/sched_switch/trigger\x00', 0x80b02, 0x0)
write(r5, &(0x7f0000000740)="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", 0x1000)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f0000000040))
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ustat(0x801, &(0x7f0000000440))
r1 = syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f0000000140)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f00000001c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}, 0xffffffffffffffff, 0x0, 0x0, <r5=>0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x58f9, 0x0, 0x1, 0x230}, 0xffffffffffffffff, 0x0, <r6=>0x0}], 0x1, 0x0, 0x0)
r7 = getpid()
ioprio_set$pid(0x3, r7, 0x4004)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0xfe, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}})
syz_io_uring_submit$UBLK(0x0, r6, r5, &(0x7f0000000980)=@ublk_ctrl_cmd_sqes={0x2e, 0x1, 0x0, r4, 0xc0207511, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, '\x00', @get_features_cmd={r1, 0xffff, 0x8, &(0x7f0000000940)}})
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x44}, @in=@rand_addr=0x640100ff, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x3, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x2, 0x0, 0x400000004}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x6c}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x3, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
write(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
fdatasync(r2)
setns(0xc9, 0x0)
syz_usb_connect$midi(0x5, 0x24, &(0x7f0000001700)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x763, 0x2012, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x6a, 0x50, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x8}}}}}]}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = openat$binderfs(0xffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001780)={0x20, 0x0, &(0x7f00000017c0)=[@request_death, @clear_death]})
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xc)
syz_ublk_setup_queues(r1, 0x0, &(0x7f00000000c0)={0x0, 0x8af0, 0x20, 0x0, 0x1c9}, &(0x7f00000003c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb5e7, 0x8000, 0x0, 0x26f}, <r5=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd197, 0x400, 0x2, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4364, 0x4000, 0x3, 0x295}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7567, 0x40, 0x1, 0x19f}}], 0x4, &(0x7f0000001640)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x0, 0x706, 0x0, &(0x7f0000000640)=@buf_512="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"}}, &(0x7f00000016c0))
syz_io_uring_setup(0x21c0, &(0x7f0000000340)={0x0, 0xca23, 0x4000, 0xfffffff7, 0x100019, 0x0, r5}, &(0x7f0000000300), &(0x7f0000ff4000), &(0x7f0000000080))
executing program 1:
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$DM_DEV_RENAME(r0, 0xc138fd05, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x1c0, 0x138, 0x0, 0x0, 0x84010, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, @uuid={'LVM-syz', 0x0, '3\x00'}})
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
getrandom(0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x8000001, 0x1}, 0x8)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0)
syz_usb_control_io$uac3(r2, 0x0, 0x0)
close(r1)

program crashed: WARNING in shmem_rmdir
bisect: bisecting 24 programs
bisect: split chunks (needed=false): <24>
bisect: split chunk #0 of len 24 into 3 parts
bisect: testing without sub-chunk 1/3
testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 9, 7, 9, 21, 16, 18, 7, 9, 9, 7, 26, 19, 11, 18, 11]
detailed listing:
executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00')
r1 = openat(r0, &(0x7f0000000040)='can/rcvlist_eff\x00', 0x0, 0x0)
read(r1, &(0x7f00000000c0), 0x1000) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x14, 0x1d, 0x1, 0x0, 0x2, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x0)
executing program 1:
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1b7)
mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f00000002c0)='./mnt\x00', 0x0, 0x8410, 0x0)
r0 = open$dir(&(0x7f0000000340)='./mnt\x00', 0x0, 0x2)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000380)={0x9, 0xffffffff000, 0x5, 0x6})
executing program 1:
r0 = fsopen(&(0x7f0000000100)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x1)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85)
lseek(r2, 0x501, 0x1)
getdents(r2, &(0x7f0000000180)=""/201, 0xc9)
executing program 1:
lseek(0xffffffffffffffff, 0xfffffffffffff800, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x4e1f, @local}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x16, {0x2, 0x4e20, @remote}, 'wg0\x00'})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x801)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)
executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)
chdir(&(0x7f0000000240)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x101000, 0x188)
getdents64(r0, &(0x7f00000002c0)=""/4085, 0xff5)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000004d80)=ANY=[@ANYBLOB="120100020000001043556400000000000001090224000100000800090400050103000300092101004001221800090581030004001587a5eae110d69685486f35acc6ab2afd472760e782fc75d17591a5237c52ead0aab90ba74186c2c134a2"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004f00), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000004f40)={0x4})
close_range(r2, 0xffffffffffffffff, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000004e00)={0x24, 0x0, 0x0, &(0x7f0000004e40)=ANY=[@ANYBLOB="002218000000050c08950109308102c0c0"], 0x0}, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000004e80), 0xa, 0x62080)
ioctl$HIDIOCSREPORT(r5, 0x400c4808, &(0x7f0000004ec0)={0x1, 0x100})
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000012c0)='./dev\x00', 0x1ff)
getgroups(0x2, &(0x7f0000004440)=[0xffffffffffffffff, 0xffffffffffffffff])
openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
executing program 2:
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x8, 0x400c00)
close(r1)
sched_setaffinity(r0, 0x0, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10)
recvmmsg$unix(r2, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000014c0)=""/32, 0x20}], 0x1}, 0x9}], 0x1, 0x100, 0x0)
close(r3)
syz_usb_connect$uac2(0x2, 0x9f, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x763, 0x2080, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0xda, 0x20, 0x8f, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x20, 0x7f}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x3, 0x15, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x6, 0x405, 0xf6, 0x4, 0x0, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xd, 0x2, 0x4e, 0xb1}, @as_header={0x10, 0x24, 0x1, 0x6, 0xff, 0x2, 0x4, 0x40, 0x200, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xf0, 0x3, 0x6, {0x8, 0x25, 0x1, 0x2, 0x33, 0x3, 0xb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x6, 0x40, {0x8, 0x25, 0x1, 0x0, 0x33, 0xc0, 0x6}}}}}}}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
r4 = socket$packet(0x11, 0x0, 0x300)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000001500)={{0x0, 0x3, 0x8001, 0x7, 0x4, 0x6, 0x3ff, 0x7, 0x4, 0x0, 0x8, 0x8, 0x8, 0x8, 0x101}})
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000002240)='./proc\x00', 0x1ff)
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x201, 0x0)
r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {<r2=>0x0, {'syz', 0x0, '0\x00'}}})
mknodat$dm(0xffffffffffffff9c, &(0x7f00000002c0)='./dm0\x00', 0x6180, r2)
ioctl$DM_DEV_SET_GEOMETRY(r0, 0xc138fd0f, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x190, 0x138, 0x0, 0x0, 0xc00, 0x0, 0x0, @by_dev={r2}, {0x11c, 0x20, 0x91, 0x20, 0x29, 0x20, 0x1968}})
mount(0x0, &(0x7f0000002280)='./proc\x00', &(0x7f00000022c0)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000002300)='./proc/modules\x00', 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0xc, 0x0, 0xfec00000})
r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x30, {"b80000c0fec70010000000c7401020000000c70011000000c74010000000ff"}}], 0x30})
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
pread64(r3, &(0x7f0000002340)=""/185, 0xb9, 0xe)
pread64(r3, &(0x7f0000002700)=""/131, 0x83, 0xffffffff)
executing program 3:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id='])
read$FUSE(r0, &(0x7f0000000cc0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_CREATE_OPEN(r0, &(0x7f0000002d00)={0xa0, 0x0, r1, {{0x2, 0x3, 0x100000001, 0x4792, 0x3, 0x6, {0x0, 0x8, 0x0, 0xe0, 0x81, 0x7fffffffffffffff, 0x2, 0x7, 0x3, 0x6000, 0x4, 0xee00, 0x0, 0x3, 0x7}}, {0x0, 0x4}}}, 0xa0)
mkdir(&(0x7f0000000a00)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0), 0x8, &(0x7f0000000b00)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
executing program 3:
r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000001100)='./file0\x00', 0x1ba)
mount$incfs(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', &(0x7f00000017c0), 0x82, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'lo\x00', &(0x7f0000000040)=@ethtool_per_queue_op={0x25, 0xe, [0x9, 0x1ff, 0x7fff, 0x1c2, 0x0, 0x7, 0x81, 0x7, 0x6, 0x5, 0x3ff, 0x80, 0x0, 0x942f, 0x10, 0x10000, 0xe157, 0x1000, 0x65, 0x9, 0x4, 0x8, 0x6, 0x2, 0x5, 0x3, 0x92, 0x1d, 0x1, 0x0, 0xf0000000, 0x3, 0x9, 0x6, 0x47cd, 0x3, 0x8, 0xff, 0x6, 0x9, 0xb2d5, 0xf045, 0x2, 0x1ff, 0x351, 0x9, 0x9, 0x1, 0x2, 0x80000000, 0x0, 0x7fff, 0x91, 0xb7c, 0xc, 0x7, 0x80000001, 0x8, 0x2, 0x4, 0x1, 0x41, 0x8000, 0x4, 0x20b, 0x2, 0x2, 0x9, 0x6, 0x6, 0x8b, 0xfffff91a, 0x4, 0x8a, 0x8, 0x101, 0x80000000, 0x8, 0x2, 0x2, 0x7, 0x81, 0xa, 0x4, 0x3, 0x6, 0xaf6, 0x1, 0x9, 0x5, 0x2, 0x6, 0x81, 0x19a400, 0xcb, 0x27, 0x9, 0xe, 0x4, 0x10001, 0x4c, 0x8, 0x3, 0x10000, 0x3, 0x4, 0x7, 0x6, 0xfffffffa, 0x20000, 0x8, 0xfffffffb, 0x0, 0x5, 0x0, 0x9, 0x1, 0x3, 0x0, 0xfb, 0x6, 0x8000, 0x7, 0x3, 0x9, 0x4, 0x6, 0x5]}})
r2 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./file0\x00', 0xc2c02e4d8eabe456, 0xd)
r3 = openat$incfs(r2, &(0x7f0000001840)='.pending_reads\x00', 0x20001, 0x130)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, &(0x7f0000002a00))
ioctl$TIOCL_GETKMSGREDIRECT(r3, 0xc058671e, 0x0)
executing program 3:
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1b7)
mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f00000002c0)='./mnt\x00', 0x0, 0x8410, 0x0)
r0 = open$dir(&(0x7f0000000340)='./mnt\x00', 0x0, 0x2)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000380)={0x9, 0xffffffff000, 0x5, 0x6})
executing program 3:
r0 = fsopen(&(0x7f0000000100)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x1)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x8880, 0x85)
lseek(r2, 0x501, 0x1)
getdents(r2, 0x0, 0x0)
executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file2\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
socket$packet(0x11, 0x2, 0x300) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
fcntl$dupfd(r2, 0x406, r2) (async)
r3 = fcntl$dupfd(r2, 0x406, r2)
read$FUSE(r3, &(0x7f0000004600)={0x2020}, 0x2020)
shutdown(r0, 0x1)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x4, 0x4) (async)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x4, 0x4)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r4 = syz_create_resource$futex(&(0x7f0000001380))
futex(r4, 0x80, 0xfffffffe, 0x0, 0x0, 0xbffffffd) (async)
futex(r4, 0x80, 0xfffffffe, 0x0, 0x0, 0xbffffffd)
recvmmsg(r0, &(0x7f0000004580)=[{{&(0x7f0000000200)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000004440)=[{&(0x7f0000000280)=""/250, 0xfa}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f0000004280)}, {&(0x7f00000042c0)=""/46, 0x2e}, {&(0x7f0000004300)=""/170, 0xaa}, {&(0x7f00000043c0)=""/74, 0x4a}], 0x7, &(0x7f00000044c0)=""/154, 0x9a}, 0x4}], 0x1, 0xa161, &(0x7f00000045c0)={0x0, 0x989680})
sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f00000001c0)={0x2, 0x4e20}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c6d6f64653d30303030303030303030b030303030303430312c0000000000"])
syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') (async)
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
pread64(r5, &(0x7f0000002280)=""/4096, 0x1000, 0xd33)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001440), r3)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="24ffff00", @ANYRES16=r6, @ANYBLOB="040027bd7000ffdbdf250b00000005003500070000000500380001000000"], 0x24}}, 0x80c1) (async)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="24ffff00", @ANYRES16=r6, @ANYBLOB="040027bd7000ffdbdf250b00000005003500070000000500380001000000"], 0x24}}, 0x80c1)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000680)='./tracing\x00', &(0x7f00000006c0)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000380)={'syztnl2\x00', <r2=>0x0, 0x700, 0x7, 0x7f5, 0x173, {{0x26, 0x4, 0x3, 0x3b, 0x98, 0x64, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @empty, {[@timestamp_prespec={0x44, 0x14, 0xbd, 0x3, 0x9, [{@private=0xa010100, 0x3}, {@broadcast, 0x21}]}, @timestamp={0x44, 0x8, 0x61, 0x0, 0x6, [0x4b]}, @noop, @noop, @generic={0x82, 0x4, "1893"}, @noop, @timestamp_addr={0x44, 0x3c, 0x75, 0x1, 0x6, [{@empty, 0x10000}, {@multicast1, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@broadcast, 0x10}, {@dev={0xac, 0x14, 0x14, 0x18}}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x81}]}, @timestamp={0x44, 0x24, 0x56, 0x0, 0x9, [0x7, 0x2, 0x50, 0x0, 0x3, 0xa2ab, 0x2, 0xa3]}]}}}}})
sendto$packet(r0, &(0x7f0000000300)="aa3d33eb608573d8f990726f5a2c5c02030e269e9b0f37bc4169b8b218f6bffc5a02459e12dc09fb9bc7d8337be1ef13861a662d4280ab718fb705bb3c29741060c5cafb4551f0cce64aae1b30df25f9a22d1874caa1d99ad1e01989c8a1e35de97a86610b4b21f4df60059534f411ce108047c52d318aaa11", 0x79, 0x28810, &(0x7f0000000480)={0x11, 0xc, r2, 0x1, 0x2, 0x6, @remote}, 0x14)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', 0x1, 0x0)
write(r3, &(0x7f00000001c0)="0059ec", 0x3)
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./trace\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./trace/events/sched/sched_switch/trigger\x00', 0x80b02, 0x0)
write(r5, &(0x7f0000000740)="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", 0x1000)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f0000000040))
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ustat(0x801, &(0x7f0000000440))
r1 = syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f0000000140)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f00000001c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}, 0xffffffffffffffff, 0x0, 0x0, <r5=>0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x58f9, 0x0, 0x1, 0x230}, 0xffffffffffffffff, 0x0, <r6=>0x0}], 0x1, 0x0, 0x0)
r7 = getpid()
ioprio_set$pid(0x3, r7, 0x4004)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0xfe, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}})
syz_io_uring_submit$UBLK(0x0, r6, r5, &(0x7f0000000980)=@ublk_ctrl_cmd_sqes={0x2e, 0x1, 0x0, r4, 0xc0207511, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, '\x00', @get_features_cmd={r1, 0xffff, 0x8, &(0x7f0000000940)}})
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x44}, @in=@rand_addr=0x640100ff, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x3, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x2, 0x0, 0x400000004}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x6c}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x3, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
write(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
fdatasync(r2)
setns(0xc9, 0x0)
syz_usb_connect$midi(0x5, 0x24, &(0x7f0000001700)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x763, 0x2012, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x6a, 0x50, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x8}}}}}]}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = openat$binderfs(0xffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001780)={0x20, 0x0, &(0x7f00000017c0)=[@request_death, @clear_death]})
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xc)
syz_ublk_setup_queues(r1, 0x0, &(0x7f00000000c0)={0x0, 0x8af0, 0x20, 0x0, 0x1c9}, &(0x7f00000003c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb5e7, 0x8000, 0x0, 0x26f}, <r5=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd197, 0x400, 0x2, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4364, 0x4000, 0x3, 0x295}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7567, 0x40, 0x1, 0x19f}}], 0x4, &(0x7f0000001640)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x0, 0x706, 0x0, &(0x7f0000000640)=@buf_512="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"}}, &(0x7f00000016c0))
syz_io_uring_setup(0x21c0, &(0x7f0000000340)={0x0, 0xca23, 0x4000, 0xfffffff7, 0x100019, 0x0, r5}, &(0x7f0000000300), &(0x7f0000ff4000), &(0x7f0000000080))
executing program 1:
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$DM_DEV_RENAME(r0, 0xc138fd05, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x1c0, 0x138, 0x0, 0x0, 0x84010, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, @uuid={'LVM-syz', 0x0, '3\x00'}})
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
getrandom(0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x8000001, 0x1}, 0x8)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0)
syz_usb_control_io$uac3(r2, 0x0, 0x0)
close(r1)

program crashed: WARNING in shmem_rmdir
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/3
testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 9, 7, 26, 19, 11, 18, 11]
detailed listing:
executing program 3:
r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000001100)='./file0\x00', 0x1ba)
mount$incfs(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', &(0x7f00000017c0), 0x82, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'lo\x00', &(0x7f0000000040)=@ethtool_per_queue_op={0x25, 0xe, [0x9, 0x1ff, 0x7fff, 0x1c2, 0x0, 0x7, 0x81, 0x7, 0x6, 0x5, 0x3ff, 0x80, 0x0, 0x942f, 0x10, 0x10000, 0xe157, 0x1000, 0x65, 0x9, 0x4, 0x8, 0x6, 0x2, 0x5, 0x3, 0x92, 0x1d, 0x1, 0x0, 0xf0000000, 0x3, 0x9, 0x6, 0x47cd, 0x3, 0x8, 0xff, 0x6, 0x9, 0xb2d5, 0xf045, 0x2, 0x1ff, 0x351, 0x9, 0x9, 0x1, 0x2, 0x80000000, 0x0, 0x7fff, 0x91, 0xb7c, 0xc, 0x7, 0x80000001, 0x8, 0x2, 0x4, 0x1, 0x41, 0x8000, 0x4, 0x20b, 0x2, 0x2, 0x9, 0x6, 0x6, 0x8b, 0xfffff91a, 0x4, 0x8a, 0x8, 0x101, 0x80000000, 0x8, 0x2, 0x2, 0x7, 0x81, 0xa, 0x4, 0x3, 0x6, 0xaf6, 0x1, 0x9, 0x5, 0x2, 0x6, 0x81, 0x19a400, 0xcb, 0x27, 0x9, 0xe, 0x4, 0x10001, 0x4c, 0x8, 0x3, 0x10000, 0x3, 0x4, 0x7, 0x6, 0xfffffffa, 0x20000, 0x8, 0xfffffffb, 0x0, 0x5, 0x0, 0x9, 0x1, 0x3, 0x0, 0xfb, 0x6, 0x8000, 0x7, 0x3, 0x9, 0x4, 0x6, 0x5]}})
r2 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./file0\x00', 0xc2c02e4d8eabe456, 0xd)
r3 = openat$incfs(r2, &(0x7f0000001840)='.pending_reads\x00', 0x20001, 0x130)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, &(0x7f0000002a00))
ioctl$TIOCL_GETKMSGREDIRECT(r3, 0xc058671e, 0x0)
executing program 3:
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1b7)
mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f00000002c0)='./mnt\x00', 0x0, 0x8410, 0x0)
r0 = open$dir(&(0x7f0000000340)='./mnt\x00', 0x0, 0x2)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000380)={0x9, 0xffffffff000, 0x5, 0x6})
executing program 3:
r0 = fsopen(&(0x7f0000000100)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x1)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x8880, 0x85)
lseek(r2, 0x501, 0x1)
getdents(r2, 0x0, 0x0)
executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file2\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
socket$packet(0x11, 0x2, 0x300) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
fcntl$dupfd(r2, 0x406, r2) (async)
r3 = fcntl$dupfd(r2, 0x406, r2)
read$FUSE(r3, &(0x7f0000004600)={0x2020}, 0x2020)
shutdown(r0, 0x1)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x4, 0x4) (async)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x4, 0x4)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r4 = syz_create_resource$futex(&(0x7f0000001380))
futex(r4, 0x80, 0xfffffffe, 0x0, 0x0, 0xbffffffd) (async)
futex(r4, 0x80, 0xfffffffe, 0x0, 0x0, 0xbffffffd)
recvmmsg(r0, &(0x7f0000004580)=[{{&(0x7f0000000200)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000004440)=[{&(0x7f0000000280)=""/250, 0xfa}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f0000004280)}, {&(0x7f00000042c0)=""/46, 0x2e}, {&(0x7f0000004300)=""/170, 0xaa}, {&(0x7f00000043c0)=""/74, 0x4a}], 0x7, &(0x7f00000044c0)=""/154, 0x9a}, 0x4}], 0x1, 0xa161, &(0x7f00000045c0)={0x0, 0x989680})
sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f00000001c0)={0x2, 0x4e20}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c6d6f64653d30303030303030303030b030303030303430312c0000000000"])
syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') (async)
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
pread64(r5, &(0x7f0000002280)=""/4096, 0x1000, 0xd33)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001440), r3)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="24ffff00", @ANYRES16=r6, @ANYBLOB="040027bd7000ffdbdf250b00000005003500070000000500380001000000"], 0x24}}, 0x80c1) (async)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="24ffff00", @ANYRES16=r6, @ANYBLOB="040027bd7000ffdbdf250b00000005003500070000000500380001000000"], 0x24}}, 0x80c1)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000680)='./tracing\x00', &(0x7f00000006c0)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000380)={'syztnl2\x00', <r2=>0x0, 0x700, 0x7, 0x7f5, 0x173, {{0x26, 0x4, 0x3, 0x3b, 0x98, 0x64, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @empty, {[@timestamp_prespec={0x44, 0x14, 0xbd, 0x3, 0x9, [{@private=0xa010100, 0x3}, {@broadcast, 0x21}]}, @timestamp={0x44, 0x8, 0x61, 0x0, 0x6, [0x4b]}, @noop, @noop, @generic={0x82, 0x4, "1893"}, @noop, @timestamp_addr={0x44, 0x3c, 0x75, 0x1, 0x6, [{@empty, 0x10000}, {@multicast1, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@broadcast, 0x10}, {@dev={0xac, 0x14, 0x14, 0x18}}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x81}]}, @timestamp={0x44, 0x24, 0x56, 0x0, 0x9, [0x7, 0x2, 0x50, 0x0, 0x3, 0xa2ab, 0x2, 0xa3]}]}}}}})
sendto$packet(r0, &(0x7f0000000300)="aa3d33eb608573d8f990726f5a2c5c02030e269e9b0f37bc4169b8b218f6bffc5a02459e12dc09fb9bc7d8337be1ef13861a662d4280ab718fb705bb3c29741060c5cafb4551f0cce64aae1b30df25f9a22d1874caa1d99ad1e01989c8a1e35de97a86610b4b21f4df60059534f411ce108047c52d318aaa11", 0x79, 0x28810, &(0x7f0000000480)={0x11, 0xc, r2, 0x1, 0x2, 0x6, @remote}, 0x14)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', 0x1, 0x0)
write(r3, &(0x7f00000001c0)="0059ec", 0x3)
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./trace\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./trace/events/sched/sched_switch/trigger\x00', 0x80b02, 0x0)
write(r5, &(0x7f0000000740)="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", 0x1000)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f0000000040))
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ustat(0x801, &(0x7f0000000440))
r1 = syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f0000000140)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f00000001c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}, 0xffffffffffffffff, 0x0, 0x0, <r5=>0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x58f9, 0x0, 0x1, 0x230}, 0xffffffffffffffff, 0x0, <r6=>0x0}], 0x1, 0x0, 0x0)
r7 = getpid()
ioprio_set$pid(0x3, r7, 0x4004)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0xfe, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}})
syz_io_uring_submit$UBLK(0x0, r6, r5, &(0x7f0000000980)=@ublk_ctrl_cmd_sqes={0x2e, 0x1, 0x0, r4, 0xc0207511, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, '\x00', @get_features_cmd={r1, 0xffff, 0x8, &(0x7f0000000940)}})
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x44}, @in=@rand_addr=0x640100ff, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x3, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x2, 0x0, 0x400000004}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x6c}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x3, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
write(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
fdatasync(r2)
setns(0xc9, 0x0)
syz_usb_connect$midi(0x5, 0x24, &(0x7f0000001700)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x763, 0x2012, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x6a, 0x50, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x8}}}}}]}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = openat$binderfs(0xffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001780)={0x20, 0x0, &(0x7f00000017c0)=[@request_death, @clear_death]})
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xc)
syz_ublk_setup_queues(r1, 0x0, &(0x7f00000000c0)={0x0, 0x8af0, 0x20, 0x0, 0x1c9}, &(0x7f00000003c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb5e7, 0x8000, 0x0, 0x26f}, <r5=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd197, 0x400, 0x2, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4364, 0x4000, 0x3, 0x295}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7567, 0x40, 0x1, 0x19f}}], 0x4, &(0x7f0000001640)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x0, 0x706, 0x0, &(0x7f0000000640)=@buf_512="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"}}, &(0x7f00000016c0))
syz_io_uring_setup(0x21c0, &(0x7f0000000340)={0x0, 0xca23, 0x4000, 0xfffffff7, 0x100019, 0x0, r5}, &(0x7f0000000300), &(0x7f0000ff4000), &(0x7f0000000080))
executing program 1:
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$DM_DEV_RENAME(r0, 0xc138fd05, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x1c0, 0x138, 0x0, 0x0, 0x84010, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, @uuid={'LVM-syz', 0x0, '3\x00'}})
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
getrandom(0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x8000001, 0x1}, 0x8)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0)
syz_usb_control_io$uac3(r2, 0x0, 0x0)
close(r1)

program did not crash
bisect: testing without sub-chunk 3/3
testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 9, 7, 9, 21, 16, 18, 7]
detailed listing:
executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00')
r1 = openat(r0, &(0x7f0000000040)='can/rcvlist_eff\x00', 0x0, 0x0)
read(r1, &(0x7f00000000c0), 0x1000) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x14, 0x1d, 0x1, 0x0, 0x2, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x0)
executing program 1:
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1b7)
mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f00000002c0)='./mnt\x00', 0x0, 0x8410, 0x0)
r0 = open$dir(&(0x7f0000000340)='./mnt\x00', 0x0, 0x2)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000380)={0x9, 0xffffffff000, 0x5, 0x6})
executing program 1:
r0 = fsopen(&(0x7f0000000100)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x1)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85)
lseek(r2, 0x501, 0x1)
getdents(r2, &(0x7f0000000180)=""/201, 0xc9)
executing program 1:
lseek(0xffffffffffffffff, 0xfffffffffffff800, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x4e1f, @local}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x16, {0x2, 0x4e20, @remote}, 'wg0\x00'})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x801)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)
executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)
chdir(&(0x7f0000000240)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x101000, 0x188)
getdents64(r0, &(0x7f00000002c0)=""/4085, 0xff5)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000004d80)=ANY=[@ANYBLOB="120100020000001043556400000000000001090224000100000800090400050103000300092101004001221800090581030004001587a5eae110d69685486f35acc6ab2afd472760e782fc75d17591a5237c52ead0aab90ba74186c2c134a2"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004f00), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000004f40)={0x4})
close_range(r2, 0xffffffffffffffff, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000004e00)={0x24, 0x0, 0x0, &(0x7f0000004e40)=ANY=[@ANYBLOB="002218000000050c08950109308102c0c0"], 0x0}, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000004e80), 0xa, 0x62080)
ioctl$HIDIOCSREPORT(r5, 0x400c4808, &(0x7f0000004ec0)={0x1, 0x100})
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000012c0)='./dev\x00', 0x1ff)
getgroups(0x2, &(0x7f0000004440)=[0xffffffffffffffff, 0xffffffffffffffff])
openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
executing program 2:
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x8, 0x400c00)
close(r1)
sched_setaffinity(r0, 0x0, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10)
recvmmsg$unix(r2, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000014c0)=""/32, 0x20}], 0x1}, 0x9}], 0x1, 0x100, 0x0)
close(r3)
syz_usb_connect$uac2(0x2, 0x9f, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x763, 0x2080, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0xda, 0x20, 0x8f, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x20, 0x7f}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x3, 0x15, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x6, 0x405, 0xf6, 0x4, 0x0, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xd, 0x2, 0x4e, 0xb1}, @as_header={0x10, 0x24, 0x1, 0x6, 0xff, 0x2, 0x4, 0x40, 0x200, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xf0, 0x3, 0x6, {0x8, 0x25, 0x1, 0x2, 0x33, 0x3, 0xb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x6, 0x40, {0x8, 0x25, 0x1, 0x0, 0x33, 0xc0, 0x6}}}}}}}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
r4 = socket$packet(0x11, 0x0, 0x300)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000001500)={{0x0, 0x3, 0x8001, 0x7, 0x4, 0x6, 0x3ff, 0x7, 0x4, 0x0, 0x8, 0x8, 0x8, 0x8, 0x101}})
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000002240)='./proc\x00', 0x1ff)
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x201, 0x0)
r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {<r2=>0x0, {'syz', 0x0, '0\x00'}}})
mknodat$dm(0xffffffffffffff9c, &(0x7f00000002c0)='./dm0\x00', 0x6180, r2)
ioctl$DM_DEV_SET_GEOMETRY(r0, 0xc138fd0f, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x190, 0x138, 0x0, 0x0, 0xc00, 0x0, 0x0, @by_dev={r2}, {0x11c, 0x20, 0x91, 0x20, 0x29, 0x20, 0x1968}})
mount(0x0, &(0x7f0000002280)='./proc\x00', &(0x7f00000022c0)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000002300)='./proc/modules\x00', 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0xc, 0x0, 0xfec00000})
r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x30, {"b80000c0fec70010000000c7401020000000c70011000000c74010000000ff"}}], 0x30})
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
pread64(r3, &(0x7f0000002340)=""/185, 0xb9, 0xe)
pread64(r3, &(0x7f0000002700)=""/131, 0x83, 0xffffffff)
executing program 3:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id='])
read$FUSE(r0, &(0x7f0000000cc0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_CREATE_OPEN(r0, &(0x7f0000002d00)={0xa0, 0x0, r1, {{0x2, 0x3, 0x100000001, 0x4792, 0x3, 0x6, {0x0, 0x8, 0x0, 0xe0, 0x81, 0x7fffffffffffffff, 0x2, 0x7, 0x3, 0x6000, 0x4, 0xee00, 0x0, 0x3, 0x7}}, {0x0, 0x4}}}, 0xa0)
mkdir(&(0x7f0000000a00)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0), 0x8, &(0x7f0000000b00)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

program crashed: WARNING in shmem_rmdir
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <8>
bisect: split chunk #0 of len 8 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 16, 18, 7]
detailed listing:
executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)
chdir(&(0x7f0000000240)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x101000, 0x188)
getdents64(r0, &(0x7f00000002c0)=""/4085, 0xff5)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000004d80)=ANY=[@ANYBLOB="120100020000001043556400000000000001090224000100000800090400050103000300092101004001221800090581030004001587a5eae110d69685486f35acc6ab2afd472760e782fc75d17591a5237c52ead0aab90ba74186c2c134a2"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004f00), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000004f40)={0x4})
close_range(r2, 0xffffffffffffffff, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000004e00)={0x24, 0x0, 0x0, &(0x7f0000004e40)=ANY=[@ANYBLOB="002218000000050c08950109308102c0c0"], 0x0}, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000004e80), 0xa, 0x62080)
ioctl$HIDIOCSREPORT(r5, 0x400c4808, &(0x7f0000004ec0)={0x1, 0x100})
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000012c0)='./dev\x00', 0x1ff)
getgroups(0x2, &(0x7f0000004440)=[0xffffffffffffffff, 0xffffffffffffffff])
openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
executing program 2:
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x8, 0x400c00)
close(r1)
sched_setaffinity(r0, 0x0, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10)
recvmmsg$unix(r2, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000014c0)=""/32, 0x20}], 0x1}, 0x9}], 0x1, 0x100, 0x0)
close(r3)
syz_usb_connect$uac2(0x2, 0x9f, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x763, 0x2080, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0xda, 0x20, 0x8f, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x20, 0x7f}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x3, 0x15, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x6, 0x405, 0xf6, 0x4, 0x0, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xd, 0x2, 0x4e, 0xb1}, @as_header={0x10, 0x24, 0x1, 0x6, 0xff, 0x2, 0x4, 0x40, 0x200, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xf0, 0x3, 0x6, {0x8, 0x25, 0x1, 0x2, 0x33, 0x3, 0xb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x6, 0x40, {0x8, 0x25, 0x1, 0x0, 0x33, 0xc0, 0x6}}}}}}}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
r4 = socket$packet(0x11, 0x0, 0x300)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000001500)={{0x0, 0x3, 0x8001, 0x7, 0x4, 0x6, 0x3ff, 0x7, 0x4, 0x0, 0x8, 0x8, 0x8, 0x8, 0x101}})
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000002240)='./proc\x00', 0x1ff)
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x201, 0x0)
r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {<r2=>0x0, {'syz', 0x0, '0\x00'}}})
mknodat$dm(0xffffffffffffff9c, &(0x7f00000002c0)='./dm0\x00', 0x6180, r2)
ioctl$DM_DEV_SET_GEOMETRY(r0, 0xc138fd0f, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x190, 0x138, 0x0, 0x0, 0xc00, 0x0, 0x0, @by_dev={r2}, {0x11c, 0x20, 0x91, 0x20, 0x29, 0x20, 0x1968}})
mount(0x0, &(0x7f0000002280)='./proc\x00', &(0x7f00000022c0)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000002300)='./proc/modules\x00', 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0xc, 0x0, 0xfec00000})
r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x30, {"b80000c0fec70010000000c7401020000000c70011000000c74010000000ff"}}], 0x30})
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
pread64(r3, &(0x7f0000002340)=""/185, 0xb9, 0xe)
pread64(r3, &(0x7f0000002700)=""/131, 0x83, 0xffffffff)
executing program 3:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id='])
read$FUSE(r0, &(0x7f0000000cc0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_CREATE_OPEN(r0, &(0x7f0000002d00)={0xa0, 0x0, r1, {{0x2, 0x3, 0x100000001, 0x4792, 0x3, 0x6, {0x0, 0x8, 0x0, 0xe0, 0x81, 0x7fffffffffffffff, 0x2, 0x7, 0x3, 0x6000, 0x4, 0xee00, 0x0, 0x3, 0x7}}, {0x0, 0x4}}}, 0xa0)
mkdir(&(0x7f0000000a00)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0), 0x8, &(0x7f0000000b00)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

program crashed: WARNING in shmem_rmdir
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <4>
bisect: split chunk #0 of len 4 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 7]
detailed listing:
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000002240)='./proc\x00', 0x1ff)
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x201, 0x0)
r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {<r2=>0x0, {'syz', 0x0, '0\x00'}}})
mknodat$dm(0xffffffffffffff9c, &(0x7f00000002c0)='./dm0\x00', 0x6180, r2)
ioctl$DM_DEV_SET_GEOMETRY(r0, 0xc138fd0f, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x190, 0x138, 0x0, 0x0, 0xc00, 0x0, 0x0, @by_dev={r2}, {0x11c, 0x20, 0x91, 0x20, 0x29, 0x20, 0x1968}})
mount(0x0, &(0x7f0000002280)='./proc\x00', &(0x7f00000022c0)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000002300)='./proc/modules\x00', 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0xc, 0x0, 0xfec00000})
r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x30, {"b80000c0fec70010000000c7401020000000c70011000000c74010000000ff"}}], 0x30})
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
pread64(r3, &(0x7f0000002340)=""/185, 0xb9, 0xe)
pread64(r3, &(0x7f0000002700)=""/131, 0x83, 0xffffffff)
executing program 3:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id='])
read$FUSE(r0, &(0x7f0000000cc0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_CREATE_OPEN(r0, &(0x7f0000002d00)={0xa0, 0x0, r1, {{0x2, 0x3, 0x100000001, 0x4792, 0x3, 0x6, {0x0, 0x8, 0x0, 0xe0, 0x81, 0x7fffffffffffffff, 0x2, 0x7, 0x3, 0x6000, 0x4, 0xee00, 0x0, 0x3, 0x7}}, {0x0, 0x4}}}, 0xa0)
mkdir(&(0x7f0000000a00)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0), 0x8, &(0x7f0000000b00)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 16]
detailed listing:
executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)
chdir(&(0x7f0000000240)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x101000, 0x188)
getdents64(r0, &(0x7f00000002c0)=""/4085, 0xff5)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000004d80)=ANY=[@ANYBLOB="120100020000001043556400000000000001090224000100000800090400050103000300092101004001221800090581030004001587a5eae110d69685486f35acc6ab2afd472760e782fc75d17591a5237c52ead0aab90ba74186c2c134a2"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004f00), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000004f40)={0x4})
close_range(r2, 0xffffffffffffffff, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000004e00)={0x24, 0x0, 0x0, &(0x7f0000004e40)=ANY=[@ANYBLOB="002218000000050c08950109308102c0c0"], 0x0}, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000004e80), 0xa, 0x62080)
ioctl$HIDIOCSREPORT(r5, 0x400c4808, &(0x7f0000004ec0)={0x1, 0x100})
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000012c0)='./dev\x00', 0x1ff)
getgroups(0x2, &(0x7f0000004440)=[0xffffffffffffffff, 0xffffffffffffffff])
openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
executing program 2:
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x8, 0x400c00)
close(r1)
sched_setaffinity(r0, 0x0, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10)
recvmmsg$unix(r2, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000014c0)=""/32, 0x20}], 0x1}, 0x9}], 0x1, 0x100, 0x0)
close(r3)
syz_usb_connect$uac2(0x2, 0x9f, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x763, 0x2080, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0xda, 0x20, 0x8f, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x20, 0x7f}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x3, 0x15, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x6, 0x405, 0xf6, 0x4, 0x0, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xd, 0x2, 0x4e, 0xb1}, @as_header={0x10, 0x24, 0x1, 0x6, 0xff, 0x2, 0x4, 0x40, 0x200, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xf0, 0x3, 0x6, {0x8, 0x25, 0x1, 0x2, 0x33, 0x3, 0xb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x6, 0x40, {0x8, 0x25, 0x1, 0x0, 0x33, 0xc0, 0x6}}}}}}}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
r4 = socket$packet(0x11, 0x0, 0x300)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000001500)={{0x0, 0x3, 0x8001, 0x7, 0x4, 0x6, 0x3ff, 0x7, 0x4, 0x0, 0x8, 0x8, 0x8, 0x8, 0x101}})

program crashed: WARNING in shmem_rmdir
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <2>
bisect: split chunk #0 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getpid-sched_setaffinity-connect$unix-syz_open_dev$hiddev-close-sched_setaffinity-socket-setsockopt$packet_tx_ring-socket-setsockopt$packet_tx_ring-recvmmsg$unix-recvmmsg-close-syz_usb_connect$uac2-socket$packet-ioctl$BTRFS_IOC_TREE_SEARCH
detailed listing:
executing program 2:
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x8, 0x400c00)
close(r1)
sched_setaffinity(r0, 0x0, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10)
recvmmsg$unix(r2, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000014c0)=""/32, 0x20}], 0x1}, 0x9}], 0x1, 0x100, 0x0)
close(r3)
syz_usb_connect$uac2(0x2, 0x9f, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x763, 0x2080, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0xda, 0x20, 0x8f, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x20, 0x7f}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x3, 0x15, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x6, 0x405, 0xf6, 0x4, 0x0, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xd, 0x2, 0x4e, 0xb1}, @as_header={0x10, 0x24, 0x1, 0x6, 0xff, 0x2, 0x4, 0x40, 0x200, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xf0, 0x3, 0x6, {0x8, 0x25, 0x1, 0x2, 0x33, 0x3, 0xb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x6, 0x40, {0x8, 0x25, 0x1, 0x0, 0x33, 0xc0, 0x6}}}}}}}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
r4 = socket$packet(0x11, 0x0, 0x300)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000001500)={{0x0, 0x3, 0x8001, 0x7, 0x4, 0x6, 0x3ff, 0x7, 0x4, 0x0, 0x8, 0x8, 0x8, 0x8, 0x101}})

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$tipc-mkdir-mount$incfs-chdir-openat$dir-getdents64-syz_usb_connect$hid-syz_usb_control_io$hid-socket$inet6_tcp-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_DEVICE-close_range-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCSREPORT-ioctl$sock_SIOCBRDELBR-mkdirat-getgroups-openat$zero
detailed listing:
executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)
chdir(&(0x7f0000000240)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x101000, 0x188)
getdents64(r0, &(0x7f00000002c0)=""/4085, 0xff5)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000004d80)=ANY=[@ANYBLOB="120100020000001043556400000000000001090224000100000800090400050103000300092101004001221800090581030004001587a5eae110d69685486f35acc6ab2afd472760e782fc75d17591a5237c52ead0aab90ba74186c2c134a2"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004f00), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000004f40)={0x4})
close_range(r2, 0xffffffffffffffff, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000004e00)={0x24, 0x0, 0x0, &(0x7f0000004e40)=ANY=[@ANYBLOB="002218000000050c08950109308102c0c0"], 0x0}, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000004e80), 0xa, 0x62080)
ioctl$HIDIOCSREPORT(r5, 0x400c4808, &(0x7f0000004ec0)={0x1, 0x100})
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000012c0)='./dev\x00', 0x1ff)
getgroups(0x2, &(0x7f0000004440)=[0xffffffffffffffff, 0xffffffffffffffff])
openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)

program crashed: WARNING in shmem_rmdir
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <1>
bisect: split chunk #0 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: 1 programs left: 

executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)
chdir(&(0x7f0000000240)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x101000, 0x188)
getdents64(r0, &(0x7f00000002c0)=""/4085, 0xff5)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000004d80)=ANY=[@ANYBLOB="120100020000001043556400000000000001090224000100000800090400050103000300092101004001221800090581030004001587a5eae110d69685486f35acc6ab2afd472760e782fc75d17591a5237c52ead0aab90ba74186c2c134a2"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004f00), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000004f40)={0x4})
close_range(r2, 0xffffffffffffffff, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000004e00)={0x24, 0x0, 0x0, &(0x7f0000004e40)=ANY=[@ANYBLOB="002218000000050c08950109308102c0c0"], 0x0}, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000004e80), 0xa, 0x62080)
ioctl$HIDIOCSREPORT(r5, 0x400c4808, &(0x7f0000004ec0)={0x1, 0x100})
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000012c0)='./dev\x00', 0x1ff)
getgroups(0x2, &(0x7f0000004440)=[0xffffffffffffffff, 0xffffffffffffffff])
openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)


bisect: trying to concatenate
bisect: concatenate 1 entries
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$tipc-mkdir-mount$incfs-chdir-openat$dir-getdents64-syz_usb_connect$hid-syz_usb_control_io$hid-socket$inet6_tcp-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_DEVICE-close_range-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCSREPORT-ioctl$sock_SIOCBRDELBR-mkdirat-getgroups-openat$zero
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)
chdir(&(0x7f0000000240)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x101000, 0x188)
getdents64(r0, &(0x7f00000002c0)=""/4085, 0xff5)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000004d80)=ANY=[@ANYBLOB="120100020000001043556400000000000001090224000100000800090400050103000300092101004001221800090581030004001587a5eae110d69685486f35acc6ab2afd472760e782fc75d17591a5237c52ead0aab90ba74186c2c134a2"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004f00), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000004f40)={0x4})
close_range(r2, 0xffffffffffffffff, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000004e00)={0x24, 0x0, 0x0, &(0x7f0000004e40)=ANY=[@ANYBLOB="002218000000050c08950109308102c0c0"], 0x0}, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000004e80), 0xa, 0x62080)
ioctl$HIDIOCSREPORT(r5, 0x400c4808, &(0x7f0000004ec0)={0x1, 0x100})
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000012c0)='./dev\x00', 0x1ff)
getgroups(0x2, &(0x7f0000004440)=[0xffffffffffffffff, 0xffffffffffffffff])
openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)

program crashed: WARNING in shmem_rmdir
bisect: concatenation succeeded
found reproducer with 21 syscalls
minimizing guilty program
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$tipc-mkdir-mount$incfs-chdir-openat$dir-getdents64-syz_usb_connect$hid-syz_usb_control_io$hid-socket$inet6_tcp-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_DEVICE-close_range-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCSREPORT-ioctl$sock_SIOCBRDELBR-mkdirat-getgroups
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)
chdir(&(0x7f0000000240)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x101000, 0x188)
getdents64(r0, &(0x7f00000002c0)=""/4085, 0xff5)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000004d80)=ANY=[@ANYBLOB="120100020000001043556400000000000001090224000100000800090400050103000300092101004001221800090581030004001587a5eae110d69685486f35acc6ab2afd472760e782fc75d17591a5237c52ead0aab90ba74186c2c134a2"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004f00), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000004f40)={0x4})
close_range(r2, 0xffffffffffffffff, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000004e00)={0x24, 0x0, 0x0, &(0x7f0000004e40)=ANY=[@ANYBLOB="002218000000050c08950109308102c0c0"], 0x0}, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000004e80), 0xa, 0x62080)
ioctl$HIDIOCSREPORT(r5, 0x400c4808, &(0x7f0000004ec0)={0x1, 0x100})
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000012c0)='./dev\x00', 0x1ff)
getgroups(0x2, &(0x7f0000004440)=[0xffffffffffffffff, 0xffffffffffffffff])

program crashed: WARNING in shmem_rmdir
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$tipc-mkdir-mount$incfs-chdir-openat$dir-getdents64-syz_usb_connect$hid-syz_usb_control_io$hid-socket$inet6_tcp-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_DEVICE-close_range-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCSREPORT-ioctl$sock_SIOCBRDELBR-mkdirat
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)
chdir(&(0x7f0000000240)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x101000, 0x188)
getdents64(r0, &(0x7f00000002c0)=""/4085, 0xff5)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000004d80)=ANY=[@ANYBLOB="120100020000001043556400000000000001090224000100000800090400050103000300092101004001221800090581030004001587a5eae110d69685486f35acc6ab2afd472760e782fc75d17591a5237c52ead0aab90ba74186c2c134a2"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004f00), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000004f40)={0x4})
close_range(r2, 0xffffffffffffffff, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000004e00)={0x24, 0x0, 0x0, &(0x7f0000004e40)=ANY=[@ANYBLOB="002218000000050c08950109308102c0c0"], 0x0}, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000004e80), 0xa, 0x62080)
ioctl$HIDIOCSREPORT(r5, 0x400c4808, &(0x7f0000004ec0)={0x1, 0x100})
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000012c0)='./dev\x00', 0x1ff)

program crashed: WARNING in shmem_rmdir
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$tipc-mkdir-mount$incfs-chdir-openat$dir-getdents64-syz_usb_connect$hid-syz_usb_control_io$hid-socket$inet6_tcp-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_DEVICE-close_range-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCSREPORT-ioctl$sock_SIOCBRDELBR
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)
chdir(&(0x7f0000000240)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x101000, 0x188)
getdents64(r0, &(0x7f00000002c0)=""/4085, 0xff5)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000004d80)=ANY=[@ANYBLOB="120100020000001043556400000000000001090224000100000800090400050103000300092101004001221800090581030004001587a5eae110d69685486f35acc6ab2afd472760e782fc75d17591a5237c52ead0aab90ba74186c2c134a2"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004f00), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000004f40)={0x4})
close_range(r2, 0xffffffffffffffff, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000004e00)={0x24, 0x0, 0x0, &(0x7f0000004e40)=ANY=[@ANYBLOB="002218000000050c08950109308102c0c0"], 0x0}, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000004e80), 0xa, 0x62080)
ioctl$HIDIOCSREPORT(r5, 0x400c4808, &(0x7f0000004ec0)={0x1, 0x100})
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0)

program crashed: WARNING in shmem_rmdir
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$tipc-mkdir-mount$incfs-chdir-openat$dir-getdents64-syz_usb_connect$hid-syz_usb_control_io$hid-socket$inet6_tcp-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_DEVICE-close_range-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCSREPORT
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)
chdir(&(0x7f0000000240)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x101000, 0x188)
getdents64(r0, &(0x7f00000002c0)=""/4085, 0xff5)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000004d80)=ANY=[@ANYBLOB="120100020000001043556400000000000001090224000100000800090400050103000300092101004001221800090581030004001587a5eae110d69685486f35acc6ab2afd472760e782fc75d17591a5237c52ead0aab90ba74186c2c134a2"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004f00), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000004f40)={0x4})
close_range(r2, 0xffffffffffffffff, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000004e00)={0x24, 0x0, 0x0, &(0x7f0000004e40)=ANY=[@ANYBLOB="002218000000050c08950109308102c0c0"], 0x0}, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000004e80), 0xa, 0x62080)
ioctl$HIDIOCSREPORT(r5, 0x400c4808, &(0x7f0000004ec0)={0x1, 0x100})

program crashed: WARNING in shmem_rmdir
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$tipc-mkdir-mount$incfs-chdir-openat$dir-getdents64-syz_usb_connect$hid-syz_usb_control_io$hid-socket$inet6_tcp-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_DEVICE-close_range-syz_usb_control_io$hid-syz_open_dev$hiddev
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)
chdir(&(0x7f0000000240)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x101000, 0x188)
getdents64(r0, &(0x7f00000002c0)=""/4085, 0xff5)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000004d80)=ANY=[@ANYBLOB="120100020000001043556400000000000001090224000100000800090400050103000300092101004001221800090581030004001587a5eae110d69685486f35acc6ab2afd472760e782fc75d17591a5237c52ead0aab90ba74186c2c134a2"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004f00), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000004f40)={0x4})
close_range(r2, 0xffffffffffffffff, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000004e00)={0x24, 0x0, 0x0, &(0x7f0000004e40)=ANY=[@ANYBLOB="002218000000050c08950109308102c0c0"], 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000004e80), 0xa, 0x62080)

program crashed: WARNING in shmem_rmdir
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$tipc-mkdir-mount$incfs-chdir-openat$dir-getdents64-syz_usb_connect$hid-syz_usb_control_io$hid-socket$inet6_tcp-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_DEVICE-close_range-syz_usb_control_io$hid
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)
chdir(&(0x7f0000000240)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x101000, 0x188)
getdents64(r0, &(0x7f00000002c0)=""/4085, 0xff5)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000004d80)=ANY=[@ANYBLOB="120100020000001043556400000000000001090224000100000800090400050103000300092101004001221800090581030004001587a5eae110d69685486f35acc6ab2afd472760e782fc75d17591a5237c52ead0aab90ba74186c2c134a2"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004f00), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000004f40)={0x4})
close_range(r2, 0xffffffffffffffff, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000004e00)={0x24, 0x0, 0x0, &(0x7f0000004e40)=ANY=[@ANYBLOB="002218000000050c08950109308102c0c0"], 0x0}, 0x0)

program crashed: WARNING in shmem_rmdir
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$tipc-mkdir-mount$incfs-chdir-openat$dir-getdents64-syz_usb_connect$hid-syz_usb_control_io$hid-socket$inet6_tcp-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_DEVICE-close_range
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)
chdir(&(0x7f0000000240)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x101000, 0x188)
getdents64(r0, &(0x7f00000002c0)=""/4085, 0xff5)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000004d80)=ANY=[@ANYBLOB="120100020000001043556400000000000001090224000100000800090400050103000300092101004001221800090581030004001587a5eae110d69685486f35acc6ab2afd472760e782fc75d17591a5237c52ead0aab90ba74186c2c134a2"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004f00), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000004f40)={0x4})
close_range(r2, 0xffffffffffffffff, 0x0)

program crashed: WARNING in shmem_rmdir
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$tipc-mkdir-mount$incfs-chdir-openat$dir-getdents64-syz_usb_connect$hid-syz_usb_control_io$hid-socket$inet6_tcp-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_DEVICE
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)
chdir(&(0x7f0000000240)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x101000, 0x188)
getdents64(r0, &(0x7f00000002c0)=""/4085, 0xff5)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000004d80)=ANY=[@ANYBLOB="120100020000001043556400000000000001090224000100000800090400050103000300092101004001221800090581030004001587a5eae110d69685486f35acc6ab2afd472760e782fc75d17591a5237c52ead0aab90ba74186c2c134a2"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004f00), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000004f40)={0x4})

program crashed: WARNING in shmem_rmdir
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$tipc-mkdir-mount$incfs-chdir-openat$dir-getdents64-syz_usb_connect$hid-syz_usb_control_io$hid-socket$inet6_tcp-openat$kvm-ioctl$KVM_CREATE_VM
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)
chdir(&(0x7f0000000240)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x101000, 0x188)
getdents64(r0, &(0x7f00000002c0)=""/4085, 0xff5)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000004d80)=ANY=[@ANYBLOB="120100020000001043556400000000000001090224000100000800090400050103000300092101004001221800090581030004001587a5eae110d69685486f35acc6ab2afd472760e782fc75d17591a5237c52ead0aab90ba74186c2c134a2"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004f00), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)

program crashed: WARNING in shmem_rmdir
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$tipc-mkdir-mount$incfs-chdir-openat$dir-getdents64-syz_usb_connect$hid-syz_usb_control_io$hid-socket$inet6_tcp-openat$kvm
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)
chdir(&(0x7f0000000240)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x101000, 0x188)
getdents64(r0, &(0x7f00000002c0)=""/4085, 0xff5)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000004d80)=ANY=[@ANYBLOB="120100020000001043556400000000000001090224000100000800090400050103000300092101004001221800090581030004001587a5eae110d69685486f35acc6ab2afd472760e782fc75d17591a5237c52ead0aab90ba74186c2c134a2"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000004f00), 0x0, 0x0)

program crashed: WARNING in shmem_rmdir
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$tipc-mkdir-mount$incfs-chdir-openat$dir-getdents64-syz_usb_connect$hid-syz_usb_control_io$hid-socket$inet6_tcp
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)
chdir(&(0x7f0000000240)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x101000, 0x188)
getdents64(r0, &(0x7f00000002c0)=""/4085, 0xff5)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000004d80)=ANY=[@ANYBLOB="120100020000001043556400000000000001090224000100000800090400050103000300092101004001221800090581030004001587a5eae110d69685486f35acc6ab2afd472760e782fc75d17591a5237c52ead0aab90ba74186c2c134a2"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

program crashed: WARNING in shmem_rmdir
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$tipc-mkdir-mount$incfs-chdir-openat$dir-getdents64-syz_usb_connect$hid-syz_usb_control_io$hid
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)
chdir(&(0x7f0000000240)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x101000, 0x188)
getdents64(r0, &(0x7f00000002c0)=""/4085, 0xff5)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000004d80)=ANY=[@ANYBLOB="120100020000001043556400000000000001090224000100000800090400050103000300092101004001221800090581030004001587a5eae110d69685486f35acc6ab2afd472760e782fc75d17591a5237c52ead0aab90ba74186c2c134a2"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)

program crashed: WARNING in shmem_rmdir
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$tipc-mkdir-mount$incfs-chdir-openat$dir-getdents64-syz_usb_connect$hid
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)
chdir(&(0x7f0000000240)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x101000, 0x188)
getdents64(r0, &(0x7f00000002c0)=""/4085, 0xff5)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000004d80)=ANY=[@ANYBLOB="120100020000001043556400000000000001090224000100000800090400050103000300092101004001221800090581030004001587a5eae110d69685486f35acc6ab2afd472760e782fc75d17591a5237c52ead0aab90ba74186c2c134a2"], 0x0)

program crashed: WARNING in shmem_rmdir
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$tipc-mkdir-mount$incfs-chdir-openat$dir-getdents64
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)
chdir(&(0x7f0000000240)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x101000, 0x188)
getdents64(r0, &(0x7f00000002c0)=""/4085, 0xff5)

program crashed: WARNING in shmem_rmdir
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$tipc-mkdir-mount$incfs-chdir-openat$dir
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)
chdir(&(0x7f0000000240)='./bus\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x101000, 0x188)

program crashed: WARNING in shmem_rmdir
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$tipc-mkdir-mount$incfs-chdir
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)
chdir(&(0x7f0000000240)='./bus\x00')

program crashed: WARNING in shmem_rmdir
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$tipc-mkdir-mount$incfs
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)

program crashed: WARNING in shmem_rmdir
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$tipc-mkdir
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$tipc-mount$incfs
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-mkdir-mount$incfs
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)

program crashed: WARNING in shmem_rmdir
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
detailed listing:
executing program 0:
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)

program crashed: WARNING in shmem_rmdir
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
detailed listing:
executing program 0:
mkdir(0x0, 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
detailed listing:
executing program 0:
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
detailed listing:
executing program 0:
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', 0x0, &(0x7f0000000140), 0xc002, 0x0)

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
detailed listing:
executing program 0:
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0xc002, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
program crashed: WARNING in shmem_rmdir
simplifying C reproducer
testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
program crashed: WARNING in shmem_rmdir
testing compiled C program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
program did not crash
testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
program crashed: WARNING in shmem_rmdir
testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
program did not crash
testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
program crashed: WARNING in shmem_rmdir
testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
program crashed: WARNING in shmem_rmdir
testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
program crashed: WARNING in shmem_rmdir
testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
program crashed: WARNING in shmem_rmdir
testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
program crashed: WARNING in shmem_rmdir
testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
program crashed: WARNING in shmem_rmdir
testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
program did not crash
testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
program crashed: WARNING in shmem_rmdir
testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
program crashed: WARNING in shmem_rmdir
testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
program crashed: WARNING in shmem_rmdir
testing program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
detailed listing:
executing program 0:
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)

program crashed: WARNING in shmem_rmdir
validation run: crashed=true
testing program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
detailed listing:
executing program 0:
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)

program crashed: WARNING in shmem_rmdir
validation run: crashed=true
testing program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
detailed listing:
executing program 0:
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0)

program crashed: WARNING in shmem_rmdir
validation run: crashed=true
reproducing took 52m27.167877752s
repro crashed as (corrupted=false):
veth0_vlan: entered promiscuous mode
veth1_macvtap: entered promiscuous mode
------------[ cut here ]------------
WARNING: CPU: 0 PID: 375 at fs/inode.c:340 drop_nlink+0xce/0x110 fs/inode.c:340
Modules linked in:
CPU: 0 UID: 0 PID: 375 Comm: syz-executor Not tainted syzkaller #0 fb4d83c2a69de87362621e77e54386714fae73a9
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
RIP: 0010:drop_nlink+0xce/0x110 fs/inode.c:340
Code: 04 00 00 be 08 00 00 00 e8 3f 07 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 14 b8 03 cc e8 42 47 94 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c
RSP: 0018:ffffc9000105fc88 EFLAGS: 00010293
RAX: ffffffff81f5228e RBX: ffff88811356a958 RCX: ffff888108312780
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000105fcb0 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffff5200020bf80 R12: dffffc0000000000
R13: 1ffff110226ad534 R14: ffff88811356a9a0 R15: 0000000000000000
FS:  0000555592772500(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000555592795958 CR3: 000000013049e000 CR4: 00000000003526b0
Call Trace:
 <TASK>
 shmem_rmdir+0x5f/0x90 mm/shmem.c:3820
 vfs_rmdir+0x3db/0x560 fs/namei.c:4348
 incfs_kill_sb+0x102/0x220 fs/incfs/vfs.c:1970
 deactivate_locked_super+0xd5/0x270 fs/super.c:478
 deactivate_super+0xb8/0xe0 fs/super.c:511
 cleanup_mnt+0x438/0x4d0 fs/namespace.c:1380
 __cleanup_mnt+0x1d/0x40 fs/namespace.c:1387
 task_work_run+0x1e8/0x260 kernel/task_work.c:246
 resume_user_mode_work+0x35/0x50 include/linux/resume_user_mode.h:50
 exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x63/0xb0 kernel/entry/common.c:218
 do_syscall_64+0x63/0xf0 arch/x86/entry/common.c:84
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f8d6c3a0d57
Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
RSP: 002b:00007ffc23bbdcd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8d6c3a0d57
RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc23bbdd90
RBP: 00007ffc23bbdd90 R08: 00007ffc23bbed90 R09: 00000000ffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc23bbee20
R13: 00007f8d6c436fb3 R14: 0000000000008826 R15: 00007ffc23bbee60
 </TASK>
---[ end trace 0000000000000000 ]---
==================================================================
BUG: KASAN: null-ptr-deref in instrument_atomic_read_write include/linux/instrumented.h:96 [inline]
BUG: KASAN: null-ptr-deref in atomic_inc_return include/linux/atomic/atomic-instrumented.h:453 [inline]
BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 fs/inode.c:452
Write of size 4 at addr 0000000000000168 by task syz-executor/375

CPU: 1 UID: 0 PID: 375 Comm: syz-executor Tainted: G        W          syzkaller #0 fb4d83c2a69de87362621e77e54386714fae73a9
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
Call Trace:
 <TASK>
 __dump_stack+0x21/0x30 lib/dump_stack.c:94
 dump_stack_lvl+0x140/0x1c0 lib/dump_stack.c:120
 print_report+0x3d/0x70 mm/kasan/report.c:484
 kasan_report+0x162/0x1a0 mm/kasan/report.c:594
 check_region_inline mm/kasan/generic.c:-1 [inline]
 kasan_check_range+0x25a/0x2b0 mm/kasan/generic.c:189
 __kasan_check_write+0x18/0x20 mm/kasan/shadow.c:37
 instrument_atomic_read_write include/linux/instrumented.h:96 [inline]
 atomic_inc_return include/linux/atomic/atomic-instrumented.h:453 [inline]
 ihold+0x24/0x70 fs/inode.c:452
 d_delete_notify include/linux/fsnotify.h:357 [inline]
 vfs_rmdir+0x25c/0x560 fs/namei.c:4361
 incfs_kill_sb+0x102/0x220 fs/incfs/vfs.c:1970
 deactivate_locked_super+0xd5/0x270 fs/super.c:478
 deactivate_super+0xb8/0xe0 fs/super.c:511
 cleanup_mnt+0x438/0x4d0 fs/namespace.c:1380
 __cleanup_mnt+0x1d/0x40 fs/namespace.c:1387
 task_work_run+0x1e8/0x260 kernel/task_work.c:246
 resume_user_mode_work+0x35/0x50 include/linux/resume_user_mode.h:50
 exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x63/0xb0 kernel/entry/common.c:218
 do_syscall_64+0x63/0xf0 arch/x86/entry/common.c:84
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f8d6c3a0d57
Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
RSP: 002b:00007ffc23bbdcd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8d6c3a0d57
RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc23bbdd90
RBP: 00007ffc23bbdd90 R08: 00007ffc23bbed90 R09: 00000000ffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc23bbee20
R13: 00007f8d6c436fb3 R14: 0000000000008826 R15: 00007ffc23bbee60
 </TASK>
==================================================================
BUG: kernel NULL pointer dereference, address: 0000000000000168
#PF: supervisor write access in kernel mode
#PF: error_code(0x0002) - not-present page
PGD 8000000114318067 P4D 8000000114318067 PUD 0 
Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI
CPU: 1 UID: 0 PID: 375 Comm: syz-executor Tainted: G    B   W          syzkaller #0 fb4d83c2a69de87362621e77e54386714fae73a9
Tainted: [B]=BAD_PAGE, [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
RIP: 0010:arch_atomic_add_return arch/x86/include/asm/atomic.h:85 [inline]
RIP: 0010:raw_atomic_add_return include/linux/atomic/atomic-arch-fallback.h:564 [inline]
RIP: 0010:raw_atomic_inc_return include/linux/atomic/atomic-arch-fallback.h:1020 [inline]
RIP: 0010:atomic_inc_return include/linux/atomic/atomic-instrumented.h:454 [inline]
RIP: 0010:ihold+0x2a/0x70 fs/inode.c:452
Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 2d 3e 94 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 fc fd ed ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 3d
RSP: 0018:ffffc9000105fcc8 EFLAGS: 00010246
RAX: ffff888108312700 RBX: 0000000000000000 RCX: ffff888108312780
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000105fcd8 R08: ffffffff893d8967 R09: 1ffffffff127b12c
R10: dffffc0000000000 R11: fffffbfff127b12d R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000
FS:  0000555592772500(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000168 CR3: 000000013049e000 CR4: 00000000003526b0
Call Trace:
 <TASK>
 d_delete_notify include/linux/fsnotify.h:357 [inline]
 vfs_rmdir+0x25c/0x560 fs/namei.c:4361
 incfs_kill_sb+0x102/0x220 fs/incfs/vfs.c:1970
 deactivate_locked_super+0xd5/0x270 fs/super.c:478
 deactivate_super+0xb8/0xe0 fs/super.c:511
 cleanup_mnt+0x438/0x4d0 fs/namespace.c:1380
 __cleanup_mnt+0x1d/0x40 fs/namespace.c:1387
 task_work_run+0x1e8/0x260 kernel/task_work.c:246
 resume_user_mode_work+0x35/0x50 include/linux/resume_user_mode.h:50
 exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x63/0xb0 kernel/entry/common.c:218
 do_syscall_64+0x63/0xf0 arch/x86/entry/common.c:84
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f8d6c3a0d57
Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
RSP: 002b:00007ffc23bbdcd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8d6c3a0d57
RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc23bbdd90
RBP: 00007ffc23bbdd90 R08: 00007ffc23bbed90 R09: 00000000ffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc23bbee20
R13: 00007f8d6c436fb3 R14: 0000000000008826 R15: 00007ffc23bbee60
 </TASK>
Modules linked in:
CR2: 0000000000000168
---[ end trace 0000000000000000 ]---
RIP: 0010:arch_atomic_add_return arch/x86/include/asm/atomic.h:85 [inline]
RIP: 0010:raw_atomic_add_return include/linux/atomic/atomic-arch-fallback.h:564 [inline]
RIP: 0010:raw_atomic_inc_return include/linux/atomic/atomic-arch-fallback.h:1020 [inline]
RIP: 0010:atomic_inc_return include/linux/atomic/atomic-instrumented.h:454 [inline]
RIP: 0010:ihold+0x2a/0x70 fs/inode.c:452
Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 2d 3e 94 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 fc fd ed ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 3d
RSP: 0018:ffffc9000105fcc8 EFLAGS: 00010246
RAX: ffff888108312700 RBX: 0000000000000000 RCX: ffff888108312780
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000105fcd8 R08: ffffffff893d8967 R09: 1ffffffff127b12c
R10: dffffc0000000000 R11: fffffbfff127b12d R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000
FS:  0000555592772500(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000168 CR3: 000000013049e000 CR4: 00000000003526b0
----------------
Code disassembly (best guess):
   0:	f3 0f 1e fa          	endbr64
   4:	55                   	push   %rbp
   5:	48 89 e5             	mov    %rsp,%rbp
   8:	41 56                	push   %r14
   a:	53                   	push   %rbx
   b:	48 89 fb             	mov    %rdi,%rbx
   e:	e8 2d 3e 94 ff       	call   0xff943e40
  13:	48 8d bb 68 01 00 00 	lea    0x168(%rbx),%rdi
  1a:	be 04 00 00 00       	mov    $0x4,%esi
  1f:	e8 fc fd ed ff       	call   0xffedfe20
  24:	41 be 01 00 00 00    	mov    $0x1,%r14d
* 2a:	f0 44 0f c1 b3 68 01 	lock xadd %r14d,0x168(%rbx) <-- trapping instruction
  31:	00 00
  33:	41 ff c6             	inc    %r14d
  36:	bf 02 00 00 00       	mov    $0x2,%edi
  3b:	44 89 f6             	mov    %r14d,%esi
  3e:	e8                   	.byte 0xe8
  3f:	3d                   	.byte 0x3d

final repro crashed as (corrupted=false):
veth0_vlan: entered promiscuous mode
veth1_macvtap: entered promiscuous mode
------------[ cut here ]------------
WARNING: CPU: 0 PID: 375 at fs/inode.c:340 drop_nlink+0xce/0x110 fs/inode.c:340
Modules linked in:
CPU: 0 UID: 0 PID: 375 Comm: syz-executor Not tainted syzkaller #0 fb4d83c2a69de87362621e77e54386714fae73a9
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
RIP: 0010:drop_nlink+0xce/0x110 fs/inode.c:340
Code: 04 00 00 be 08 00 00 00 e8 3f 07 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 14 b8 03 cc e8 42 47 94 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c
RSP: 0018:ffffc9000105fc88 EFLAGS: 00010293
RAX: ffffffff81f5228e RBX: ffff88811356a958 RCX: ffff888108312780
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000105fcb0 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffff5200020bf80 R12: dffffc0000000000
R13: 1ffff110226ad534 R14: ffff88811356a9a0 R15: 0000000000000000
FS:  0000555592772500(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000555592795958 CR3: 000000013049e000 CR4: 00000000003526b0
Call Trace:
 <TASK>
 shmem_rmdir+0x5f/0x90 mm/shmem.c:3820
 vfs_rmdir+0x3db/0x560 fs/namei.c:4348
 incfs_kill_sb+0x102/0x220 fs/incfs/vfs.c:1970
 deactivate_locked_super+0xd5/0x270 fs/super.c:478
 deactivate_super+0xb8/0xe0 fs/super.c:511
 cleanup_mnt+0x438/0x4d0 fs/namespace.c:1380
 __cleanup_mnt+0x1d/0x40 fs/namespace.c:1387
 task_work_run+0x1e8/0x260 kernel/task_work.c:246
 resume_user_mode_work+0x35/0x50 include/linux/resume_user_mode.h:50
 exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x63/0xb0 kernel/entry/common.c:218
 do_syscall_64+0x63/0xf0 arch/x86/entry/common.c:84
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f8d6c3a0d57
Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
RSP: 002b:00007ffc23bbdcd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8d6c3a0d57
RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc23bbdd90
RBP: 00007ffc23bbdd90 R08: 00007ffc23bbed90 R09: 00000000ffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc23bbee20
R13: 00007f8d6c436fb3 R14: 0000000000008826 R15: 00007ffc23bbee60
 </TASK>
---[ end trace 0000000000000000 ]---
==================================================================
BUG: KASAN: null-ptr-deref in instrument_atomic_read_write include/linux/instrumented.h:96 [inline]
BUG: KASAN: null-ptr-deref in atomic_inc_return include/linux/atomic/atomic-instrumented.h:453 [inline]
BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 fs/inode.c:452
Write of size 4 at addr 0000000000000168 by task syz-executor/375

CPU: 1 UID: 0 PID: 375 Comm: syz-executor Tainted: G        W          syzkaller #0 fb4d83c2a69de87362621e77e54386714fae73a9
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
Call Trace:
 <TASK>
 __dump_stack+0x21/0x30 lib/dump_stack.c:94
 dump_stack_lvl+0x140/0x1c0 lib/dump_stack.c:120
 print_report+0x3d/0x70 mm/kasan/report.c:484
 kasan_report+0x162/0x1a0 mm/kasan/report.c:594
 check_region_inline mm/kasan/generic.c:-1 [inline]
 kasan_check_range+0x25a/0x2b0 mm/kasan/generic.c:189
 __kasan_check_write+0x18/0x20 mm/kasan/shadow.c:37
 instrument_atomic_read_write include/linux/instrumented.h:96 [inline]
 atomic_inc_return include/linux/atomic/atomic-instrumented.h:453 [inline]
 ihold+0x24/0x70 fs/inode.c:452
 d_delete_notify include/linux/fsnotify.h:357 [inline]
 vfs_rmdir+0x25c/0x560 fs/namei.c:4361
 incfs_kill_sb+0x102/0x220 fs/incfs/vfs.c:1970
 deactivate_locked_super+0xd5/0x270 fs/super.c:478
 deactivate_super+0xb8/0xe0 fs/super.c:511
 cleanup_mnt+0x438/0x4d0 fs/namespace.c:1380
 __cleanup_mnt+0x1d/0x40 fs/namespace.c:1387
 task_work_run+0x1e8/0x260 kernel/task_work.c:246
 resume_user_mode_work+0x35/0x50 include/linux/resume_user_mode.h:50
 exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x63/0xb0 kernel/entry/common.c:218
 do_syscall_64+0x63/0xf0 arch/x86/entry/common.c:84
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f8d6c3a0d57
Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
RSP: 002b:00007ffc23bbdcd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8d6c3a0d57
RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc23bbdd90
RBP: 00007ffc23bbdd90 R08: 00007ffc23bbed90 R09: 00000000ffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc23bbee20
R13: 00007f8d6c436fb3 R14: 0000000000008826 R15: 00007ffc23bbee60
 </TASK>
==================================================================
BUG: kernel NULL pointer dereference, address: 0000000000000168
#PF: supervisor write access in kernel mode
#PF: error_code(0x0002) - not-present page
PGD 8000000114318067 P4D 8000000114318067 PUD 0 
Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI
CPU: 1 UID: 0 PID: 375 Comm: syz-executor Tainted: G    B   W          syzkaller #0 fb4d83c2a69de87362621e77e54386714fae73a9
Tainted: [B]=BAD_PAGE, [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
RIP: 0010:arch_atomic_add_return arch/x86/include/asm/atomic.h:85 [inline]
RIP: 0010:raw_atomic_add_return include/linux/atomic/atomic-arch-fallback.h:564 [inline]
RIP: 0010:raw_atomic_inc_return include/linux/atomic/atomic-arch-fallback.h:1020 [inline]
RIP: 0010:atomic_inc_return include/linux/atomic/atomic-instrumented.h:454 [inline]
RIP: 0010:ihold+0x2a/0x70 fs/inode.c:452
Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 2d 3e 94 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 fc fd ed ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 3d
RSP: 0018:ffffc9000105fcc8 EFLAGS: 00010246
RAX: ffff888108312700 RBX: 0000000000000000 RCX: ffff888108312780
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000105fcd8 R08: ffffffff893d8967 R09: 1ffffffff127b12c
R10: dffffc0000000000 R11: fffffbfff127b12d R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000
FS:  0000555592772500(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000168 CR3: 000000013049e000 CR4: 00000000003526b0
Call Trace:
 <TASK>
 d_delete_notify include/linux/fsnotify.h:357 [inline]
 vfs_rmdir+0x25c/0x560 fs/namei.c:4361
 incfs_kill_sb+0x102/0x220 fs/incfs/vfs.c:1970
 deactivate_locked_super+0xd5/0x270 fs/super.c:478
 deactivate_super+0xb8/0xe0 fs/super.c:511
 cleanup_mnt+0x438/0x4d0 fs/namespace.c:1380
 __cleanup_mnt+0x1d/0x40 fs/namespace.c:1387
 task_work_run+0x1e8/0x260 kernel/task_work.c:246
 resume_user_mode_work+0x35/0x50 include/linux/resume_user_mode.h:50
 exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x63/0xb0 kernel/entry/common.c:218
 do_syscall_64+0x63/0xf0 arch/x86/entry/common.c:84
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f8d6c3a0d57
Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
RSP: 002b:00007ffc23bbdcd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8d6c3a0d57
RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc23bbdd90
RBP: 00007ffc23bbdd90 R08: 00007ffc23bbed90 R09: 00000000ffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc23bbee20
R13: 00007f8d6c436fb3 R14: 0000000000008826 R15: 00007ffc23bbee60
 </TASK>
Modules linked in:
CR2: 0000000000000168
---[ end trace 0000000000000000 ]---
RIP: 0010:arch_atomic_add_return arch/x86/include/asm/atomic.h:85 [inline]
RIP: 0010:raw_atomic_add_return include/linux/atomic/atomic-arch-fallback.h:564 [inline]
RIP: 0010:raw_atomic_inc_return include/linux/atomic/atomic-arch-fallback.h:1020 [inline]
RIP: 0010:atomic_inc_return include/linux/atomic/atomic-instrumented.h:454 [inline]
RIP: 0010:ihold+0x2a/0x70 fs/inode.c:452
Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 2d 3e 94 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 fc fd ed ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 3d
RSP: 0018:ffffc9000105fcc8 EFLAGS: 00010246
RAX: ffff888108312700 RBX: 0000000000000000 RCX: ffff888108312780
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000105fcd8 R08: ffffffff893d8967 R09: 1ffffffff127b12c
R10: dffffc0000000000 R11: fffffbfff127b12d R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000
FS:  0000555592772500(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000168 CR3: 000000013049e000 CR4: 00000000003526b0
----------------
Code disassembly (best guess):
   0:	f3 0f 1e fa          	endbr64
   4:	55                   	push   %rbp
   5:	48 89 e5             	mov    %rsp,%rbp
   8:	41 56                	push   %r14
   a:	53                   	push   %rbx
   b:	48 89 fb             	mov    %rdi,%rbx
   e:	e8 2d 3e 94 ff       	call   0xff943e40
  13:	48 8d bb 68 01 00 00 	lea    0x168(%rbx),%rdi
  1a:	be 04 00 00 00       	mov    $0x4,%esi
  1f:	e8 fc fd ed ff       	call   0xffedfe20
  24:	41 be 01 00 00 00    	mov    $0x1,%r14d
* 2a:	f0 44 0f c1 b3 68 01 	lock xadd %r14d,0x168(%rbx) <-- trapping instruction
  31:	00 00
  33:	41 ff c6             	inc    %r14d
  36:	bf 02 00 00 00       	mov    $0x2,%edi
  3b:	44 89 f6             	mov    %r14d,%esi
  3e:	e8                   	.byte 0xe8
  3f:	3d                   	.byte 0x3d