Extracting prog: 19m53.215684594s
Minimizing prog: 12m41.401865578s
Simplifying prog options: 0s
Extracting C: 36.040010105s
Simplifying C: 18m51.407920527s


extracting reproducer from 73 programs
testing a last program of every proc
single: executing 23 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-openat$uhid-write$UHID_INPUT2-socket$nl_xfrm-prctl$PR_SET_MM-prctl$PR_SET_MM-sendmsg$nl_xfrm-socket$nl_xfrm-sendmsg$nl_xfrm
detailed listing:
executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_INPUT2(r1, &(0x7f0000000040), 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffa000/0x3000)=nil)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffb000/0x2000)=nil)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x38, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x2, 0x200000000000000}}}, 0xb8}}, 0x2c000010)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_CREATE_VM-socket$inet6-setsockopt$SO_ATTACH_FILTER-sendto$inet6-syncfs-mount$binderfs
detailed listing:
executing program 0:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2a)
r1 = socket$inet6(0x10, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x7, 0x6}, {0x16, 0x0, 0x9b}]}, 0x10)
sendto$inet6(r1, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
syncfs(r0)
mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000080)=ANY=[@ANYBLOB="64697273790025e0693e6fb36c789ec81581d1df749fe2a03c0feafcd7389bdf305d1d6dd0f61fcae2c9509caa62933fcf281b7c13094a599ed8c117708337e56f9140c9dab4a816ff1968e092893ba188e7ed215a37d85f9236e987752e1d4d04561524ba1d53522c5bcd08237e878bf00a1d807733419f901d66d115d26a710cd9ac339389139ecb09b659fa96b4cdedf622d30a47ebf1b180b8244a10dbeed7c6c462de0c9888a24179c67cd6b73ec180f00de1a05712f9d6bb7a7213b47af26cdadd4a5a45605ac42530b7bc846641a7f2775a3287109b3d6e0fa7d66fbb68592b0c05ea4135"])

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-madvise-mlock-munlockall-madvise-madvise-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mount$binderfs-syz_kvm_setup_cpu$x86-syz_clone-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats='])
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000d50000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0x0)
syz_clone(0x1e6100, &(0x7f00000001c0)="fd3e1e01b6cbce8955e9f7a61f6d2a1ae65176434c68a5c43641b73854675946270dca53ca964b42217a4697c071fde08b0e7aa8f24479f806a44cae7703ba280fa9e10613c02af9e0a7fc18b9296cb78aaf0b323a38a9a4279696bad6d84bbbe15e0031ac06aa5bf49f8a2bf2832601dae507305af505d1557a3c440705d76f927d8e02e1ec4c441c1e6d8236ec3377a8a535b440d6f2d3ee1db90f1596ca08a18e29fc52d01f7f014d8b46b5a7be18f776dcab814159402403fbdfa7424e43f1f354fdda4c6b9f1ab2b6690a2a288e57c757f14f6edd4cb9e8d1bc1b6722ee62efe5b68bb2283788", 0xe9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000002c0)="f79987e56412065d127ed8b36fc8f6b04c5ae8adba82ee9483796bab3337988b16496d64abb218c353da21b12be860ff02e53e6997dd09165b4343f492138d4a0f53d616a14772909569c360cb34ce0b6bf374b344f6f11eeed658d8c9b6ee0f8f030ccd8d905da3d03074a5deb7ec5fadb988ef3ed4206bab8d8646d396b7636b35497190f73bb461a4d578db3eaf078f045e004b3df4af93705dbd2d90766ce027b65f4864b2814e9cc8b6d0cbba89fc010c69a89b2b315ff84cec8a81b9da0551822e919aae7b72dcc8c29b6a05ebe9ff817a9803b3f83c324f23dee4c66b3553cc6d7450817b27708dc1b41e510791f9cbc5a4")
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x61, &(0x7f0000000100)=[@cr4={0x1, 0x9e2}], 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$selinux_policy-syz_genetlink_get_family_id$batadv-socket$netlink-socket$netlink-socket$nl_audit-socket$inet6_tcp-setsockopt$inet6_tcp_int-connect$inet6-connect$inet6-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-socket$inet6_tcp-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_int-connect$inet6-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-mmap-writev-setsockopt$inet6_tcp_TCP_REPAIR_QUEUE-setsockopt$inet6_tcp_TCP_REPAIR_QUEUE-ioctl$int_in-writev-syz_usb_connect-socket$nl_generic-mount$fuse-mount$fuse-dup-dup-ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED-ioctl$TUNSETIFF-pipe-pipe-socket$inet_udp-close-close-mknodat$loop-mknodat$loop-openat$fuse
detailed listing:
executing program 0:
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0)
socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
connect$inet6(r2, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "551d346b9cd35e04", "b05119f2d5e7b8ffe800000009000080", "dc015707", "66b65927b706631c"}, 0x28)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x11, r1, 0xc678e000)
writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x1)
writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x11)
syz_usb_connect(0x3, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12015002550719103d1bcb01b100010203010902240001090900e90904e900029bb92d0009050b0040007f080e09050f10d70709083c163ff88ee9b622d52a19af7cadc4dad43076afab2e3ed5bbeca950014e6b5985db6e64c9e5085637173edd3ad04fa3f93aef1ce0d2aa201bbca4447ebb0f1609aca3a67a0557e6029cf0efaeff8b669b0e5541a8b02db6e0d52e3e911a0eeb2fcd50be991d4d675cad77e767116048e569b666f1cc59"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
socket$nl_generic(0x10, 0x3, 0x10)
mount$fuse(0x0, 0x0, 0x0, 0x2000010, 0x0) (async)
mount$fuse(0x0, 0x0, 0x0, 0x2000010, 0x0)
dup(0xffffffffffffffff) (async)
r4 = dup(0xffffffffffffffff)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
pipe(&(0x7f00000002c0)) (async)
pipe(&(0x7f00000002c0))
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5) (async)
close(r5)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) (async)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$selinux_policy-syz_genetlink_get_family_id$batadv-socket$netlink-socket$netlink-socket$nl_audit-socket$inet6_tcp-setsockopt$inet6_tcp_int-connect$inet6-connect$inet6-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-socket$inet6_tcp-setsockopt$inet6_tcp_int-setsockopt$inet6_tcp_int-connect$inet6-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-mmap-writev-setsockopt$inet6_tcp_TCP_REPAIR_QUEUE-setsockopt$inet6_tcp_TCP_REPAIR_QUEUE-ioctl$int_in-writev-syz_usb_connect-socket$nl_generic-mount$fuse-mount$fuse-dup-dup-ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED-ioctl$TUNSETIFF-pipe-pipe-socket$inet_udp-close-close-mknodat$loop-mknodat$loop-openat$fuse
detailed listing:
executing program 0:
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0)
socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
connect$inet6(r2, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "551d346b9cd35e04", "b05119f2d5e7b8ffe800000009000080", "dc015707", "66b65927b706631c"}, 0x28)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x11, r1, 0xc678e000)
writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x1)
writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x11)
syz_usb_connect(0x3, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12015002550719103d1bcb01b100010203010902240001090900e90904e900029bb92d0009050b0040007f080e09050f10d70709083c163ff88ee9b622d52a19af7cadc4dad43076afab2e3ed5bbeca950014e6b5985db6e64c9e5085637173edd3ad04fa3f93aef1ce0d2aa201bbca4447ebb0f1609aca3a67a0557e6029cf0efaeff8b669b0e5541a8b02db6e0d52e3e911a0eeb2fcd50be991d4d675cad77e767116048e569b666f1cc59"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
socket$nl_generic(0x10, 0x3, 0x10)
mount$fuse(0x0, 0x0, 0x0, 0x2000010, 0x0) (async)
mount$fuse(0x0, 0x0, 0x0, 0x2000010, 0x0)
dup(0xffffffffffffffff) (async)
r4 = dup(0xffffffffffffffff)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
pipe(&(0x7f00000002c0)) (async)
pipe(&(0x7f00000002c0))
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5) (async)
close(r5)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) (async)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_kvm_setup_cpu$x86-open-fstat-socket$nl_generic-syz_genetlink_get_family_id$tipc2-sendmsg$TIPC_NL_MEDIA_GET-syz_open_dev$usbfs-mkdirat-mount$bind-mount$bind-ioctl$sock_SIOCETHTOOL-mprotect-ioctl$USBDEVFS_CONTROL
detailed listing:
executing program 0:
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x5b, 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
fstat(r0, &(0x7f00000000c0))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), r1)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf250b0000000c000580"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'bridge0\x00', 0x0})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0xffffffffffffffb9, 0x7ff, 0x0})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_kvm_setup_cpu$x86-open-fstat-socket$nl_generic-syz_genetlink_get_family_id$tipc2-sendmsg$TIPC_NL_MEDIA_GET-syz_open_dev$usbfs-mkdirat-mount$bind-mount$bind-ioctl$sock_SIOCETHTOOL-mprotect-ioctl$USBDEVFS_CONTROL
detailed listing:
executing program 0:
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x5b, 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
fstat(r0, &(0x7f00000000c0))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), r1)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf250b0000000c000580"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'bridge0\x00', 0x0})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0xffffffffffffffb9, 0x7ff, 0x0})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ttyS3-socket$nl_route-socket-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_generic-recvmsg$inet_nvme-setsockopt$netlink_NETLINK_NO_ENOBUFS-sendmsg$netlink-openat$cgroup_ro-ioctl$KVM_CREATE_VM-write$UHID_CREATE2-mmap-ioctl$KVM_X86_SETUP_MCE-sendmmsg$inet6-sendmmsg$inet6-ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL-add_key$user-sendmsg-syz_clone-ptrace-ptrace$setregs-ptrace$cont-ioctl$TCSETSF-writev
detailed listing:
executing program 0:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007b40)=ANY=[@ANYBLOB="200000002200010a"], 0x20}, 0x1, 0x0, 0x0, 0x4044000}, 0x0)
recvmsg$inet_nvme(r2, &(0x7f0000000340)={&(0x7f0000000180)=@can, 0x80, &(0x7f0000000000)=[{&(0x7f0000000200)=""/180, 0xb4}, {&(0x7f00000002c0)=""/84, 0x54}, {&(0x7f0000000400)=""/229, 0xe5}], 0x3, &(0x7f0000000500)=""/175, 0xaf}, 0x100)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b00)={0x1c, 0x5a, 0x1, 0x0, 0x0, "", [@nested={0x4}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="cff80291"]}]}, 0x1c}], 0x1}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
write$UHID_CREATE2(r3, 0x0, 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8014)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40804)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x1, 0x5, 0x4, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x1, 0x1d, 0x7fffffff}})
add_key$user(0x0, 0x0, &(0x7f0000000080)='YC', 0x2, 0xffffffffffffffff)
sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="f0", 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x4044081)
r4 = syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000540))
ptrace$cont(0x20, r4, 0x0, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x1002, 0x319, 0x1, 0x5, 0x15, "5af81a4b1ac928d392359b00776cc2f8395730"})
writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ttyS3-socket$nl_route-socket-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_generic-recvmsg$inet_nvme-setsockopt$netlink_NETLINK_NO_ENOBUFS-sendmsg$netlink-openat$cgroup_ro-ioctl$KVM_CREATE_VM-write$UHID_CREATE2-mmap-ioctl$KVM_X86_SETUP_MCE-sendmmsg$inet6-sendmmsg$inet6-ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL-add_key$user-sendmsg-syz_clone-ptrace-ptrace$setregs-ptrace$cont-ioctl$TCSETSF-writev
detailed listing:
executing program 0:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007b40)=ANY=[@ANYBLOB="200000002200010a"], 0x20}, 0x1, 0x0, 0x0, 0x4044000}, 0x0)
recvmsg$inet_nvme(r2, &(0x7f0000000340)={&(0x7f0000000180)=@can, 0x80, &(0x7f0000000000)=[{&(0x7f0000000200)=""/180, 0xb4}, {&(0x7f00000002c0)=""/84, 0x54}, {&(0x7f0000000400)=""/229, 0xe5}], 0x3, &(0x7f0000000500)=""/175, 0xaf}, 0x100)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b00)={0x1c, 0x5a, 0x1, 0x0, 0x0, "", [@nested={0x4}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="cff80291"]}]}, 0x1c}], 0x1}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
write$UHID_CREATE2(r3, 0x0, 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8014)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40804)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x1, 0x5, 0x4, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x1, 0x1d, 0x7fffffff}})
add_key$user(0x0, 0x0, &(0x7f0000000080)='YC', 0x2, 0xffffffffffffffff)
sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="f0", 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x4044081)
r4 = syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000540))
ptrace$cont(0x20, r4, 0x0, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x1002, 0x319, 0x1, 0x5, 0x15, "5af81a4b1ac928d392359b00776cc2f8395730"})
writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-openat$ashmem-syz_usb_connect-ioctl$ASHMEM_SET_SIZE-ioctl$sock_FIOGETOWN-recvmmsg-utimensat-syz_open_procfs-socket$nl_generic-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK-sendmsg$NL80211_CMD_SET_MCAST_RATE-mmap-mremap-prlimit64-syz_io_uring_setup-prctl$PR_SET_THP_DISABLE-prctl$PR_SET_THP_DISABLE-ioctl$KVM_SET_SREGS-userfaultfd-ioctl$UFFDIO_API-mprotect-ioctl$UFFDIO_COPY-write$FUSE_INIT-rt_sigsuspend-ioctl$sock_bt_hidp_HIDPCONNDEL
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x1a9b42, 0x0)
syz_usb_connect(0x1, 0x36, &(0x7f00000012c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f0104000000090583"], 0x0)
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x10000003)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=<r2=>0x0)
recvmmsg(r0, &(0x7f0000000380)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000680)=""/183, 0xb7}, {&(0x7f0000000580)=""/103, 0x67}, {&(0x7f0000000240)=""/18, 0x12}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000000740)=""/224, 0xe0}, {&(0x7f0000000840)=""/189, 0xbd}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000002300)=""/4096, 0x1000}], 0x8, &(0x7f0000000a80)=""/131, 0x83}, 0x5}], 0x1, 0x20, &(0x7f0000000b40)={0x0, 0x989680})
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100)
r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/ip_mr_cache\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="614cf9daec3bb82bf5672011d82a053a0b31690bffcbb3eeb332a8a0b1f9d627d34ee35a7c6742a9ceaeb3b10be79b84fe9a19f41dbff1f3777c941c4817bbff57b8f47091f676986dbcef2173", @ANYRES16=r5, @ANYBLOB="010029bd7000ffffffff3900000018000d8014000280070001006c1804000500060000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8040000}, 0x44844)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="08002dbd7000fcdbdf255c0000000c009900faffffff6a00000008006b003700000008006b006e00000008006b001c020000"], 0x38}}, 0x0)
mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000009, 0x13, r1, 0x954c3000)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
syz_io_uring_setup(0x4755, &(0x7f0000000600)={0x0, 0x5946, 0x400, 0x0, 0x2c5}, 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0x41, 0x3)
prctl$PR_SET_THP_DISABLE(0x42, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0000, 0xc, 0x1, 0x81, 0x0, 0x0, 0x20}, {0x10000, 0xdddd1000, 0xc, 0xfc, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x5, 0xfc}, {0x3000, 0x8080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x4}, {0x80a0000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x7}, {0x5000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x8, 0x4}, {0x4000, 0x1000, 0xb, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5, 0xc0}, {0x3000, 0x100000, 0x10, 0x8, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x2}, {0x0, 0x3000, 0xe, 0x2, 0x2, 0x54, 0x7, 0xfd, 0x0, 0x9, 0x7, 0x5}, {0x2000, 0x1}, {}, 0x9df9ffdf, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x2000, [0xdd41, 0x1, 0x2]})
r6 = userfaultfd(0x1)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
rt_sigsuspend(&(0x7f0000000040)={[0x1]}, 0x8)
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-openat$ashmem-syz_usb_connect-ioctl$ASHMEM_SET_SIZE-ioctl$sock_FIOGETOWN-recvmmsg-utimensat-syz_open_procfs-socket$nl_generic-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK-sendmsg$NL80211_CMD_SET_MCAST_RATE-mmap-mremap-prlimit64-syz_io_uring_setup-prctl$PR_SET_THP_DISABLE-prctl$PR_SET_THP_DISABLE-ioctl$KVM_SET_SREGS-userfaultfd-ioctl$UFFDIO_API-mprotect-ioctl$UFFDIO_COPY-write$FUSE_INIT-rt_sigsuspend-ioctl$sock_bt_hidp_HIDPCONNDEL
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x1a9b42, 0x0)
syz_usb_connect(0x1, 0x36, &(0x7f00000012c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f0104000000090583"], 0x0)
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x10000003)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=<r2=>0x0)
recvmmsg(r0, &(0x7f0000000380)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000680)=""/183, 0xb7}, {&(0x7f0000000580)=""/103, 0x67}, {&(0x7f0000000240)=""/18, 0x12}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000000740)=""/224, 0xe0}, {&(0x7f0000000840)=""/189, 0xbd}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000002300)=""/4096, 0x1000}], 0x8, &(0x7f0000000a80)=""/131, 0x83}, 0x5}], 0x1, 0x20, &(0x7f0000000b40)={0x0, 0x989680})
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100)
r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/ip_mr_cache\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="614cf9daec3bb82bf5672011d82a053a0b31690bffcbb3eeb332a8a0b1f9d627d34ee35a7c6742a9ceaeb3b10be79b84fe9a19f41dbff1f3777c941c4817bbff57b8f47091f676986dbcef2173", @ANYRES16=r5, @ANYBLOB="010029bd7000ffffffff3900000018000d8014000280070001006c1804000500060000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8040000}, 0x44844)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="08002dbd7000fcdbdf255c0000000c009900faffffff6a00000008006b003700000008006b006e00000008006b001c020000"], 0x38}}, 0x0)
mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000009, 0x13, r1, 0x954c3000)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
syz_io_uring_setup(0x4755, &(0x7f0000000600)={0x0, 0x5946, 0x400, 0x0, 0x2c5}, 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0x41, 0x3)
prctl$PR_SET_THP_DISABLE(0x42, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0000, 0xc, 0x1, 0x81, 0x0, 0x0, 0x20}, {0x10000, 0xdddd1000, 0xc, 0xfc, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x5, 0xfc}, {0x3000, 0x8080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x4}, {0x80a0000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x7}, {0x5000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x8, 0x4}, {0x4000, 0x1000, 0xb, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5, 0xc0}, {0x3000, 0x100000, 0x10, 0x8, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x2}, {0x0, 0x3000, 0xe, 0x2, 0x2, 0x54, 0x7, 0xfd, 0x0, 0x9, 0x7, 0x5}, {0x2000, 0x1}, {}, 0x9df9ffdf, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x2000, [0xdd41, 0x1, 0x2]})
r6 = userfaultfd(0x1)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
rt_sigsuspend(&(0x7f0000000040)={[0x1]}, 0x8)
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-getsockopt$packet_int-socket$inet6_udp-getsockopt$inet6_int-getsockopt$IP6T_SO_GET_REVISION_MATCH-syz_usb_control_io$uac1-syz_open_procfs-pread64-syz_usb_connect$uac1-syz_usb_connect-syz_usb_control_io$cdc_ecm
detailed listing:
executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000480))
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, &(0x7f0000000040))
getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000002380)='net/udp\x00')
pread64(r2, &(0x7f0000000080)=""/233, 0xfe58, 0x800000094)
syz_usb_connect$uac1(0x5, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x19, &(0x7f0000000540)=ANY=[@ANYBLOB="050f190002eca19d5606a6c427e475"], 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x809}}]})
r3 = syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0)
syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000580)={0x14, &(0x7f0000000340)={0x40, 0x5, 0x16, {0x16, 0xd, "faa8ff6efe5e7d068941a2b8e928545d3e0540c8"}}, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x1c, &(0x7f00000005c0)={0x20, 0x3, 0x87, "95f3e561ee16629c03ddd00b04b319ec9e94ec4d4aa113e4eb2369db71495493dd8273bf1c338b708089f83529ec3ee4c19e2c1fe34f985957f3d41483df9ac03daed6fa130fc9d17032e7e3cfea8d79ffd2bc26d5dc538acafb5f1191c9021f04580c6c2fb66c42d46861fc626d45cf9bb0bf9464c3489b6e4db9d9e0645a420c9e2a72877176"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0xe}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x7}})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-getsockopt$packet_int-socket$inet6_udp-getsockopt$inet6_int-getsockopt$IP6T_SO_GET_REVISION_MATCH-syz_usb_control_io$uac1-syz_open_procfs-pread64-syz_usb_connect$uac1-syz_usb_connect-syz_usb_control_io$cdc_ecm
detailed listing:
executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000480))
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, &(0x7f0000000040))
getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000002380)='net/udp\x00')
pread64(r2, &(0x7f0000000080)=""/233, 0xfe58, 0x800000094)
syz_usb_connect$uac1(0x5, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x19, &(0x7f0000000540)=ANY=[@ANYBLOB="050f190002eca19d5606a6c427e475"], 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x809}}]})
r3 = syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0)
syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000580)={0x14, &(0x7f0000000340)={0x40, 0x5, 0x16, {0x16, 0xd, "faa8ff6efe5e7d068941a2b8e928545d3e0540c8"}}, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x1c, &(0x7f00000005c0)={0x20, 0x3, 0x87, "95f3e561ee16629c03ddd00b04b319ec9e94ec4d4aa113e4eb2369db71495493dd8273bf1c338b708089f83529ec3ee4c19e2c1fe34f985957f3d41483df9ac03daed6fa130fc9d17032e7e3cfea8d79ffd2bc26d5dc538acafb5f1191c9021f04580c6c2fb66c42d46861fc626d45cf9bb0bf9464c3489b6e4db9d9e0645a420c9e2a72877176"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0xe}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x7}})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-mprotect-ioctl$F2FS_IOC_MOVE_RANGE-ioctl$UFFDIO_POISON-socket$inet_udp-setsockopt$ARPT_SO_SET_REPLACE
detailed listing:
executing program 0:
mount(0x0, 0x0, &(0x7f0000000040)='binder\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000400)={<r0=>0xffffffffffffffff, 0x3, 0x4, 0x8})
ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f0000000440)={{&(0x7f0000001000/0x2000)=nil, 0x2000}})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3a0, 0xe8, 0x1d0, 0xe8, 0x2b8, 0x2b8, 0x2b8, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010100, @empty, 0x0, 0x0, 0xa, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x4b8, 0x1}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x3, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'bridge_slave_0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-mprotect-ioctl$F2FS_IOC_MOVE_RANGE-ioctl$UFFDIO_POISON-socket$inet_udp-setsockopt$ARPT_SO_SET_REPLACE
detailed listing:
executing program 0:
mount(0x0, 0x0, &(0x7f0000000040)='binder\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000400)={<r0=>0xffffffffffffffff, 0x3, 0x4, 0x8})
ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f0000000440)={{&(0x7f0000001000/0x2000)=nil, 0x2000}})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3a0, 0xe8, 0x1d0, 0xe8, 0x2b8, 0x2b8, 0x2b8, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010100, @empty, 0x0, 0x0, 0xa, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x4b8, 0x1}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x3, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'bridge_slave_0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$cgroup_ro-mmap-sendfile-socket$key-ioctl$TCSETSF-sendmsg$key
detailed listing:
executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x100000001, 0x4)
r1 = socket$key(0xf, 0x3, 0x2)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0xfffffbec, 0x7ff, 0x7fffffff, 0xf, "b4f31f401b55c155df8b52773cc7c58e3295ee"})
sendmsg$key(r1, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x5, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private=0x400}}, @sadb_x_policy={0x8, 0x12, 0x3, 0x1, 0x0, 0x0, 0x3, {0x6, 0xff, 0x0, 0x1, 0x0, 0x6, 0x0, @in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @sadb_address={0x3, 0x5, 0x6c, 0x20, 0x0, @in={0x2, 0x0, @rand_addr=0x64010101}}]}, 0x80}, 0x1, 0x7}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$cgroup_ro-mmap-sendfile-socket$key-ioctl$TCSETSF-sendmsg$key
detailed listing:
executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x100000001, 0x4)
r1 = socket$key(0xf, 0x3, 0x2)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0xfffffbec, 0x7ff, 0x7fffffff, 0xf, "b4f31f401b55c155df8b52773cc7c58e3295ee"})
sendmsg$key(r1, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x5, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private=0x400}}, @sadb_x_policy={0x8, 0x12, 0x3, 0x1, 0x0, 0x0, 0x3, {0x6, 0xff, 0x0, 0x1, 0x0, 0x6, 0x0, @in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @sadb_address={0x3, 0x5, 0x6c, 0x20, 0x0, @in={0x2, 0x0, @rand_addr=0x64010101}}]}, 0x80}, 0x1, 0x7}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-ioctl$KVM_GET_STATS_FD_vm-sendmsg$NFT_BATCH-ioctl$sock_SIOCETHTOOL-ioctl$BTRFS_IOC_QUOTA_RESCAN-syz_genetlink_get_family_id$ethtool-fsconfig$FSCONFIG_CMD_RECONFIGURE-sendmsg$ETHTOOL_MSG_LINKMODES_SET
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x70, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8000}, [@NFTA_TABLE_USERDATA={0x5c, 0x6, "5c45aac8878b67cdf0a6eed1dbb4391ba0c26d1e78884cb6b0b20a21044a9df4438478fe4845759d5eecdd46960bdad7ee38905933bdfff20c9864897e8d9d8dbc3e40eca137cb7b98f915fed5ffca5a72feca48fae199b7"}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1b}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x20050800) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x600, 0xf, 0x80, 0x0, 0x0, 0xfc, 0x1, 0x80, 0x4, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x2]}})
ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000080)={0x0, 0x7fff, [0x8, 0x2, 0x7, 0x3, 0x4, 0xfffffffffffff800]}) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="dfffffff", @ANYRES16=r2, @ANYBLOB="01000000000000ff000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800090001"], 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-madvise-syz_clone-read$FUSE-ppoll-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_SET_VCPU_EVENTS-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) (async, rerun: 32)
ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x2022}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0xe7c1}], 0x3, 0x0, 0x0, 0x0) (async, rerun: 32)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) (async)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$selinux_load-write$selinux_load-syz_usb_connect$midi-socket$nl_netfilter-sendmsg$NFULNL_MSG_CONFIG-socket-write-recvmmsg-sendmmsg-openat$selinux_load-write$selinux_load-syz_usb_connect$midi-socket$nl_netfilter-sendmsg$NFULNL_MSG_CONFIG-socket-write-recvmmsg-sendmmsg
detailed listing:
executing program 0:
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000004d80), 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf90800"], 0x20)
syz_usb_connect$midi(0x0, 0x3a, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x582, 0x114, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x28, 0x1, 0x1, 0x1, 0x10, 0x10, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x81, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x12, 0x1}], [{{0x9, 0x5, 0x6, 0x0, 0x10, 0x10, 0x8, 0x8, {0x7, 0x25, 0x1, 0x3, "5693e6"}}}]}}}}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x40800)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8070000001d00000000000100", 0x1c)
recvmmsg(r2, &(0x7f0000001900)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20, 0x0)
sendmmsg(r1, &(0x7f00000027c0)=[{{&(0x7f0000000080)=@caif, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000100)="843dead945f20d86b63ae7a19ca4d834b7f0d4e894a9a6ea6ffc412053eae1a72f2461d3f7da4e0960e7148543e1ac50b33db89c07c15eefca01a014f5fedc19ac39e70c6eba128b035dd17c3316f94f093f498cebb3f61714e11ec76a9836c3905da69b8a9a8a87e34a4df6cc03422032e085efbb516e1b69eb82a3f525e2c54ba906e613ef26e3034bc4ff0af0e96e21583b97", 0x94}, {&(0x7f0000000380)="fe1f345c28de764fb1bc165f8fe31ec41724c61ef4419f54538f1b6875cd4d2cdcb022d85ed8bbf51e27b1b2dee572d6d324e8a88d96778c1c9a21e987964854c9df5c93b56734be540fd6c67e6839eea2bd71d858cf43db375e39e5a897f0e73e81ab28ef8cbbd1c1cc102f8b64167822cf950cebaf620ebb8dee03a679ed63014078d175976879e733341157df7b7cde0b24f8ce5a651d1a49ee5f427b5b5efa2963c30f8369e629c3bf9dba0e1faf4088d9c9da2a8cdd9d4b1af0a1be02f2b9741d0dad517ea04a4cbd8228bc7c0fc8af57b3764bd884c211b676097950f8c33026b85be144bfd9f7fe65c748f41f1c35e2f5cf7250049e297538841871439335eb12911d790237769cd83b4466d8f3f75240b9568becd858770ff072f38d5f013b859e257a446c607349a041af62073535b431035cac052dca4c86ad4644e491de27e09134f1f442113aa30b946d66c899d6fab9605b83c82e112a08820900f156e98fa52c0038411e1827e800bc75a538feca2c88db0810e59cd1d0ce894a1f27e3e9ef43833ceaa6c73aef6f70a0e38335f2ef7df5e70c943188599e5ef00c952a3009b20e31ab7b9fdc6b6d889ed809c59c64f763f729ba0b4ba0bc52af9510d838eb872062da36f43693cc89a9f45cbfa9522ab2583b20a516d262677fc5f07807612c7fb4e773896ee4c75958ab44abfb3d8d957217af9a6c89a7e3ea1dd6f7eacd4e6ab1d71181a63f2bfc46f0066846a716c80c76bf28c3ef3a7eecd4151aaa518d4e7c35ff129a8bfd7a71aa4e3151a1679a764de56305f2b0cbccf2b7d8aa57e522f7ae34b16076d329472f56dd31d17ba3124d7ea839b79c928d9a25c2b5710911179a27bdf548cd992dc60f4b2b2ff97f8f54a993e57515dc6c987d96d68521a703bac2c48243a7a2ad33c8b47a607c5f1d5dd42d5d8243394ffc76399d27aed204bdd2129ac247401c62e4eefa73e4ea6d6b912336cc52ac0a4a01f9525735b82f085946706218de2244a1fc889afa43ae50dedc6d23f7cdc922c6d25612cb12e68c4c7785924e4173a3bdbed26d7f47c9a246b504ca42c283bc6e542f6523b75832b469a98c38e86cc3e7b02276abecb5ccc8b23fa932e47164feb4bac4486114c9f8e8e540fe032d44878b6582d64f6032ac088cea83c0ab9762aa129661419175b2acacf912cc00afe8864bfb5c844b6ce6b9cad1b9675f3342e7fbabd4b219ae26b9ec9f8f8f89e0dade18415de16a8faa182fe8d52c9b694bad70a57466e0029d4ad595d81c11a14daf9a333126d5cd064971c8888b348b5aa846af5270a22e977738f1f0a902e8d370f3fd82319a32cffc1b1ccb4831724c749327731d2b8b83b80c3788c8514248cb26db333ec815a52a163feb63fe4a288aebcb1e362d541818ccdd9397b04d57b8c2d307b31f7abed5d123f13f4d08ceedc8857cb0f2454223207252e19b8d820ab826c81be0133e000a65dfe87d7d9b1f9ba9970ec7ecc0fe450b33dbd9cd23a707e477a09d356f0fba47a87ec81dbc8fec92028a36d3bc1aec5344dc6bf0435ee7a02bd45840101e3554ddfdead6a6d25499650d5c5dee8df9f5cd0058659b888f1274e029d8d7eaa9271e7c649ffa8530a58fda1769a244a32c6347d6ea9b9d4fd83febb3c566a23d8560a40fc87af807805529d50a7e67bf44f2cfbb8a698c7ac25265be20d7d12fd5847d4427aa88e1fc0f9accc2efc445e9b6f90e41bd77a38da60371d51f692e2213f560cfd91e51488236f88ad9276dbde19996c6ffa2eb682b3b940182759b0f17e3942787f4e070a50b71f18d589818640da232f6c961ad6fe91c846878f0731e5d2b9c87d462eedef8233959af632344022c1e7924ba95ec465ea5c92d223dd9fdfd9f9f79bad3f75d2deaadf4a208891b2186dc8ffc6cd9cc2d7d89c0e42e16c898da4472c30b5783070daab9ab6e3c49c0d186c849ff851bd9240f2e372bda3f64561a564dd87388a921c0bc2aa72b4bc0ec2a600706f4f00dc3712e2f27ed0ede3994ae34b11ad1606572129c50526054f74fc5f46304a196bbc3483879ac5103fd7165374e746b14e4dac471be640e5e1f05c3c93fdd792976da1fad1a1652635aef2e1d17f387060e20f4fe063e2496ae7e7452836e5804ffd44aeff6491625f16f45523dd8ce692c78ba678bb919cb67977af263a2403e40eea8756361967feea689f0d4ca9a75a03c75af793b6fa07368adb0962da60dc86370ee4e86434c55a964efd8cc199a77be950bb6d48a4a5558614dc18616d8ecbf7e179348d623f073a514781ccc116fa1a932370fb1551ae5fd998b263897450eb41f8a56bac75cf02272e10d4d089a23553a6a07b30c88fe213ac57911be19317a04d325f3697c7b17f209912bc4c9de5e81740358fe22977c4e5f8572127184a866794d3c37facaa35e597160fe8449bc3e067904b79f860177ab2e9e44ecce83eb8f3bc8ad59a436685919f5e2cbbb7d4b1162ec3cfef83f065d02a64c6cb05e795eab4eed10a685f4a7ac44628266938fe2c605a08f7dea07a4a397ee41fda890ec08fd4076f0797601fd6e022e0533912c5d6fd73d66491797d73b7094096a97c36e9c3e7a92baf533cc2531e7f0d12ed0e81d0a4bf895cd1b13601b1cec5aa4229968b1d14a38d2f3cdf708654557967ba1ea081ab9d452836139507ae8921c51953b4ddcef48ec77844971f1f471d7648c83d94080abb85f276cf2d1c8459213670553ac01b8f43122a7fb6b0dd3838dee4779450c7783ccd5bea94d8ac38d973c9c3343955a88a6e38c80bc2a2f16a3c30e0dbec314a3e4754b840db280e81845de5ad1f5d4d9eb34d8c005a8f92b17dafbb4d8b9ac3d5d4a26b853f9eaa439204026d1ad2cf0212e630cbf7e4caecbbfff463cd59ae9f84843ff26cb9f0d3b33c90211f4b5387c10b77cc9056f66f4fa671d4539b9b8547a26e5dd4db24ea77ec1cac76b84610a1edd4990880870d6e8054abdefe43d648bd0250631e0c778e60e0f79914ad2a6e97d8d94d754e55e3b65d0494c3c9b74340b38f60ebabbf71121d9afa3aaa91d1ed6d98def980b58c036afb68aa0de191e9212d561e2c05ea7d9d882a570848479c2e3b166d3fc679eb25aab0e4f797b47fb93bae92567cc641238edeb20efa099e62e4af7bdfb9d4991b719402ee6aede7ad28e714aba6d5d8b6bfee036f6b0317de5a862ecebefcc526658f3309952fcf3f2f180adcc510a43782ff0acb6ce880ef097b27b5ea8921f63bd4efb8b769341d49067e5c6fc08f7f911e034f45a5846c748e20aa5873fea6889126b60671a54a34b4df1fea1bda7c0c17ca113d1495cf2a05b99c4b194bbc0c20772e164b06b49faef02671b25d515f043e38ceaa8ed538b99c1c28d7d869d8c6498ee753dd8bf8b3c6740ee5b7bdbc0c2c23d99e3363a3d2aa0e71967e95e40f9ba4181588e6be2f8875b7af4ffb1417080d3aa3e507903a690b3a97cb124d017728b98e594dfd00b0bf696cf5084a4e4e04347724f60d81280a108b76d2cf2c23da351d9ea6117dc140e91d8966ea6612ca66af84f6bc60049af47f036cbecaa99951e1d244fadedf50053f41ffe6811e762bcf9f75effc5043abb99848984a774798b8d315c7a5a3f139a44c562f918d6a16f0214fdffc07d888a0b15b5bd25831969a5dd537ac9cb22eb659abb5e5dec569540db5a4c447808d99d727f7a6eb9fe5df801b0ec8a00d2e4f1bb8c6deef79310c8bc2ac8479dce271b6b12eb8a2cdcd42da8131f2ba7fcf557809891419c15fe2db9a1c5faa35c3a5579c114797b16b7c0c81487f0794765da31b1c9c45bc55f5ea21ff3eb695e437f3ebca026ade45e7b6456abe36e0899b78b2bb51aea1875157328b625f06931fba099d0e080557752ab466e93ce78b329901cd09c6b5ac128b37750afe86ccec7874df9463f45c4fc0b24cda9c0a75620c9b9705c2e1e0ee001d6b681ea5c9f054fca0db78a63a9b78cb248252cd09fcdd17174a496151272bc7c533756dc5c2cfbdea327fe847fead4a26e4a7bebe515761496f31c344ae78b85b667b4baee3dcbf3af8ef63e528832ccdaf911ca131d15a270262487876ce8996267e9a864035578da687a6d27519d4d91ae0d9ad61e147cf31f7e87351bf5f0f629d02e3cdfc009abfda2043053d004efb6f9441ae2153b3db68d4d5f13b2686f21b42adc219af3b83ca5bf75caa89c0ef552858319952eff84b2978d4ccfeff06ca5fb852054188f4e0960554dd5fe641e65dfc5add6605c931e1938ae8de9710e7ae7e09c88d0158bddedb35093966fd80b6360ce78c9bd791aea8415760ecb5e5c692408459ad1e3e8c603a2bfd2e1c277802cef8af3aeedfbd1d6f91765c5c8c635870df9c334b248e7effcd3d3586745e7b5f39ba240d0cd697dcf569ba2b7f9c2dc1ce162be2f883a526f373973ab6807af0d3c330497f0b2384ae73291de34cd6398a79a49e49faf15b9c863f4a27b83ed2a654e91b10ae9703b4e9c0d0f3698a5ebd3d2a27639e82d136f6fbac24cbb93d79b1e67975337440bad1c4968bfd3e28c628fa9f6b5ea4561c49ef36ff4991c97ad07e2b0cfb58832f571e4acc379a0ef2c81b92c6087c53560ef1b97699b5206b8e6592c63088d0fef9af9077ba0343f6eebdad7a9d5d901c215d9eb56e0c1114e529470503d4b556f8681d9364ee39f8a19ef6b5e7866e86c21f13967f620b034fbb5bbfb5ddc76ca76f7d22ba97ccc895bd42e437224814086f89341795f1829c95fa00d0a0fa274248241d414ae3c4094e98016926688f42344635f50e3a5d551bfec4d961b5445edbb5e08070dfed849eb8efa9a69c5fc2f57beafd49a350a1c3fdff9b222d1351c9a4a7fd8b0e909097690358ad345debde788fa1cae1cff69c6beab84d0b89825d76e7c3bf95eca4bad5ed6a6c077d787165b32d3f1f82fd2b6cd7e3c572efa2606dc18599c721088705c1ef606257f861ff2469997b56b20a138b395a2ba265718ebc5a67b120f63e3fb31935b5e14df50f24c95824a7aaba1672508e98c6a31368e1633015c05068e3a30c508f4f27e7cd35eba6878ce8a9da203ebc535d85c8d9734ed1675c8c349be1c51abb1752f955db2f156522ce5eef2487c20b16ab295727a2116e7e93f543d8dc05aa238e4fd8da434e22705fe0d036a9aa8dc97bf82a1cc84582940a634a7b25139db2627af32de34f797f28637e660d094812ac1f71ef337e194f83ece87c7e8aff6a58e83e03134cb4b8b49d944f9b35929e18175e04bd6388f7ebd994ef9fdf308f20cd13f752c483592cee29d100ef0a7a969664a28966b989278b6567d94f61f91eec98160058302c0a1397b458e3255c28d95568aec856b870e97da21e1a81229e01965a7597d173177fb3633759e097b5e4710c62f22e5d923a256526b6aad2a5da12b2732cbae63e7b75eefb9f8fd66d72a3f4dfea995fa87b6fd2ac8202625f3f4f73287f3cf5b22f0acc6aa619b4b6e3710fde630c43e06bd97c8227de2c6449dec523c32643a7eb0a57bd916ca29b9bd34dc87d46d40f5696b7cd18314fd88f8e997ed348c24f56230058fc804521efadbdc5a0080f2c6b57a588551d50822543898524f0a5e58dedc91d78a241b27cf57f4e0700cdf75c9efd6603b4d4d25e4d5312f7c0de13daae7e5155139f6ad6ad947822a217e7d5ddc387ad3ecd60127161fc3cb75b5d158b008a0662b3b2c38485911ee8d0b36326f0519d41012a9159072390885d5", 0x1000}, {&(0x7f00000001c0)="5ef2994137014e96a0a1b84762ded5d1dcf3ed769191b97ae4b72751b790f12193a99964d4313ab984c4a4dc37d443d555f6de778386c971d9e5b314b59bc06a93cd", 0x42}, {}, {&(0x7f0000000240)="9dae9a03323e1e21402208767a9c6183a68030ab70df6de3a0b1aee714fdd2b31f5398386bc8b8e16a83ce0948a58d1bee4500a2f7de986c5742075c708b202dd6ae62fd506db47e81b0403d33e77baccd32ad2c66e1b9fef67837bb879d95cf5aaf3a384ab3966b9ceb7ac30818b5748cd707760aed79348a7f3dd20dcfc7b0598958bcb416e55d381ff07861a6e0490d3e1a1ca8b563bdaccdfcfeaece201a4d0057c4b384582098b8960bbabf0c6a7c255c7ad6e47b2c225f", 0xba}, {&(0x7f0000001380)="888a6166aac887436e9cc64052fa8c4d0941c4c2e9d64a15447ce6e0cd9a97dff7dce2104f50b9ca6ee66eb589c82b539db29abe08c6657e714f8964874ba10519dc535d5f503b234c76e14b3bdfac2797a387131ac5cc7a2e745197df2b83d4c1ad27b3c9650acf1336bf4e0b5fd845b528fae6ea02fc1f2226a89a638034e073e4db1a97dbfa29aedbc23578682c5064", 0x91}, {&(0x7f0000001440)="c97dbd1f411a7b28e34c8cab6bf87893fef7eb3224788120745bfeff2489e80c8c1374b6fa581144b3b6a37cc64d92fb6044486b7459f6050d933b5b05b95f9e8e167db11646eaec002342965c82bca30dbe0de35d30bc43fea205210307b86d9c0bb61d9260eaf723dcb2328a17014aec313cf0a0d3518c5ead8fdb755dbb90e3b8aac4ed5582db928cf139b8e38847ec0a55c87220b561b4ba7199060dfba5dcc5058b221eef0e1cb504578ce50cacad95d19cb0", 0xb5}, {&(0x7f0000001500)="38985e4b1ba94e8d65e42689f08fd4d3e57d17ad762d4428cb6127aa4f0051458555bc158e3b91dfda1b1c9bc034c968e76f33097f6eadbe8bc63ad063f87c9f78db04baa9e4bec0cdac9096e9186e8fb7bfe66a301e200150ccb0fb3d635b9d3159c6280def9ff9c4aa67cba0071933ce5c6ffbd2d8a93ba4c57f3d6fdbc39412bdff480ae23bd8fc023c2603e0b0380d6a04c67c338f0d008b67ea6694c89b2d3d", 0xa2}, {&(0x7f0000000300)="094fee513a24ee9c5c27357aba29a2b6d3", 0x11}], 0x9, &(0x7f0000002800)=ANY=[@ANYBLOB="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"], 0x1108}}], 0x1, 0x4080)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000004d80), 0x2, 0x0) (async)
write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf90800"], 0x20) (async)
syz_usb_connect$midi(0x0, 0x3a, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x582, 0x114, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x28, 0x1, 0x1, 0x1, 0x10, 0x10, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x81, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x12, 0x1}], [{{0x9, 0x5, 0x6, 0x0, 0x10, 0x10, 0x8, 0x8, {0x7, 0x25, 0x1, 0x3, "5693e6"}}}]}}}}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x40800) (async)
socket(0x10, 0x3, 0x0) (async)
write(r2, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8070000001d00000000000100", 0x1c) (async)
recvmmsg(r2, &(0x7f0000001900)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20, 0x0) (async)
sendmmsg(r1, &(0x7f00000027c0)=[{{&(0x7f0000000080)=@caif, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000100)="843dead945f20d86b63ae7a19ca4d834b7f0d4e894a9a6ea6ffc412053eae1a72f2461d3f7da4e0960e7148543e1ac50b33db89c07c15eefca01a014f5fedc19ac39e70c6eba128b035dd17c3316f94f093f498cebb3f61714e11ec76a9836c3905da69b8a9a8a87e34a4df6cc03422032e085efbb516e1b69eb82a3f525e2c54ba906e613ef26e3034bc4ff0af0e96e21583b97", 0x94}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f00000001c0)="5ef2994137014e96a0a1b84762ded5d1dcf3ed769191b97ae4b72751b790f12193a99964d4313ab984c4a4dc37d443d555f6de778386c971d9e5b314b59bc06a93cd", 0x42}, {}, {&(0x7f0000000240)="9dae9a03323e1e21402208767a9c6183a68030ab70df6de3a0b1aee714fdd2b31f5398386bc8b8e16a83ce0948a58d1bee4500a2f7de986c5742075c708b202dd6ae62fd506db47e81b0403d33e77baccd32ad2c66e1b9fef67837bb879d95cf5aaf3a384ab3966b9ceb7ac30818b5748cd707760aed79348a7f3dd20dcfc7b0598958bcb416e55d381ff07861a6e0490d3e1a1ca8b563bdaccdfcfeaece201a4d0057c4b384582098b8960bbabf0c6a7c255c7ad6e47b2c225f", 0xba}, {&(0x7f0000001380)="888a6166aac887436e9cc64052fa8c4d0941c4c2e9d64a15447ce6e0cd9a97dff7dce2104f50b9ca6ee66eb589c82b539db29abe08c6657e714f8964874ba10519dc535d5f503b234c76e14b3bdfac2797a387131ac5cc7a2e745197df2b83d4c1ad27b3c9650acf1336bf4e0b5fd845b528fae6ea02fc1f2226a89a638034e073e4db1a97dbfa29aedbc23578682c5064", 0x91}, {&(0x7f0000001440)="c97dbd1f411a7b28e34c8cab6bf87893fef7eb3224788120745bfeff2489e80c8c1374b6fa581144b3b6a37cc64d92fb6044486b7459f6050d933b5b05b95f9e8e167db11646eaec002342965c82bca30dbe0de35d30bc43fea205210307b86d9c0bb61d9260eaf723dcb2328a17014aec313cf0a0d3518c5ead8fdb755dbb90e3b8aac4ed5582db928cf139b8e38847ec0a55c87220b561b4ba7199060dfba5dcc5058b221eef0e1cb504578ce50cacad95d19cb0", 0xb5}, {&(0x7f0000001500)="38985e4b1ba94e8d65e42689f08fd4d3e57d17ad762d4428cb6127aa4f0051458555bc158e3b91dfda1b1c9bc034c968e76f33097f6eadbe8bc63ad063f87c9f78db04baa9e4bec0cdac9096e9186e8fb7bfe66a301e200150ccb0fb3d635b9d3159c6280def9ff9c4aa67cba0071933ce5c6ffbd2d8a93ba4c57f3d6fdbc39412bdff480ae23bd8fc023c2603e0b0380d6a04c67c338f0d008b67ea6694c89b2d3d", 0xa2}, {&(0x7f0000000300)="094fee513a24ee9c5c27357aba29a2b6d3", 0x11}], 0x9, &(0x7f0000002800)=ANY=[@ANYBLOB="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"], 0x1108}}], 0x1, 0x4080) (async)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ashmem-mmap-ioctl$ASHMEM_SET_NAME-ioctl$ASHMEM_SET_NAME
detailed listing:
executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x109200, 0x0)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x4, 0x13, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000dc0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2<Z l\xdfDh\xa1\x99Bj<\r\x87\xa3\xd1?$\x8b\x02\x00\x00\x00h\x1b\x01\x00\x00\x00\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x91Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:\x14\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[<Y4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@iC\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v<H\x8cmD\x8e\x9e\x18\xf7\xac\xa5\x17\x89\xc6\x88\x86\xe9\x15\x87WV\xfbF\xb1\x1fo\x85t\xf1\r\x8a\x9c\xe8\xac^\x19cp\xcceJ\xa6\x0e_\aE\bZ\x9f\xfa\xdf$\xad\xf0\xa5E\xeb\xd6\x80\xb7 \rd\xcc\x92\b\x01\x1bG\xb4su\x90\xcfs\x18LQ\x81^\x17\x80\xca\xdc\xe2\xb3\x01\x85\xa4r\x87G\xb8\x92\xdaJt\xa2g\xb7Azy+\x8f\xee\xb9\xa9\xa6\x04\xd1a\xca1~\x03\xbc\x87\xd1\xbaY\xf3\x8ai\xff[\xde\xde\xc6\xb1\xb9T{\xe2>\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\xb5\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9')
ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000600)='\x00\x00\x100\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4*<.\x88\xda\xcf3=\x97\xdd\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\x00\x01\x00\x00\x00\x00\x00\x00\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00I\x1b[\xeb\xd8\x06\xfd\xe5J\x1eJ\xb6\xce!]%UR\xbb\xa7\x96')

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$KVM_VCPU-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-readv-syz_memcpy_off$KVM_EXIT_MMIO-ioctl$UFFDIO_ZEROPAGE-mkdir-openat$fuse-mount_setattr-mount$fuse-socket$inet_tcp-bind$inet-setsockopt$sock_int-connect$inet-sendmmsg$inet-syz_open_procfs-read$FUSE-socket$inet6_tcp-listen-socket$tipc-setsockopt$TIPC_GROUP_JOIN-socketpair$tipc-setsockopt$TIPC_GROUP_JOIN-socket$netlink-writev-write$FUSE_DIRENTPLUS
detailed listing:
executing program 0:
r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
readv(r1, &(0x7f0000000400)=[{&(0x7f0000000140)=""/222, 0xde}], 0x1)
syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f0000000200)={0x100020, 0x1000f3, 0x40000}, 0x20)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000200), 0x3841022, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg$inet(r3, &(0x7f0000006040)=[{{0x0, 0x80000, &(0x7f0000000700)=[{&(0x7f00000003c0)="0f2f", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f00000000c0)='_', 0xfe3c}], 0xa6}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000100)="19", 0x1}], 0x100002e6}}, {{0x0, 0x0, &(0x7f00000025c0), 0x1}}], 0x4, 0x608d8d0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00')
read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0xfff)
r6 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1fd}, 0x10)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a060f0200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000200ffffffff", 0x58}], 0x1)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r2], 0x10)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs-chdir-mount$incfs-openat$binderfs-openat$binderfs
detailed listing:
executing program 0:
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)

program crashed: WARNING in shmem_rmdir
single: successfully extracted reproducer
found reproducer with 6 syscalls
minimizing guilty program
testing program (duration=31.439342712s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs-chdir-mount$incfs-openat$binderfs
detailed listing:
executing program 0:
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)

program crashed: WARNING in shmem_rmdir
testing program (duration=31.439342712s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs-chdir-mount$incfs
detailed listing:
executing program 0:
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)

program crashed: WARNING in shmem_rmdir
testing program (duration=31.439342712s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs-chdir
detailed listing:
executing program 0:
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')

program crashed: WARNING in shmem_rmdir
testing program (duration=31.439342712s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
detailed listing:
executing program 0:
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)

program crashed: WARNING in shmem_rmdir
testing program (duration=31.439342712s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir
detailed listing:
executing program 0:
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)

program did not crash
testing program (duration=31.439342712s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$incfs
detailed listing:
executing program 0:
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)

program did not crash
testing program (duration=31.439342712s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
detailed listing:
executing program 0:
mkdir(0x0, 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)

program did not crash
testing program (duration=31.439342712s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
detailed listing:
executing program 0:
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$incfs(0x0, &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)

program did not crash
testing program (duration=31.439342712s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
detailed listing:
executing program 0:
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', 0x0, &(0x7f0000000840), 0x1004002, 0x0)

program did not crash
testing program (duration=31.439342712s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
detailed listing:
executing program 0:
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', 0x0, 0x1004002, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=31.439342712s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
program crashed: WARNING in shmem_rmdir
simplifying C reproducer
testing compiled C program (duration=31.439342712s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
program crashed: WARNING in shmem_rmdir
testing compiled C program (duration=31.439342712s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
program did not crash
testing compiled C program (duration=31.439342712s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
program crashed: WARNING in shmem_rmdir
testing compiled C program (duration=31.439342712s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
program did not crash
testing compiled C program (duration=31.439342712s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
program crashed: WARNING in shmem_rmdir
testing compiled C program (duration=31.439342712s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
program crashed: WARNING in shmem_rmdir
testing compiled C program (duration=31.439342712s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
program crashed: WARNING in shmem_rmdir
testing compiled C program (duration=31.439342712s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
program crashed: WARNING in shmem_rmdir
testing compiled C program (duration=31.439342712s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
program crashed: WARNING in shmem_rmdir
testing compiled C program (duration=31.439342712s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
program crashed: WARNING in shmem_rmdir
testing compiled C program (duration=31.439342712s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
program did not crash
testing compiled C program (duration=31.439342712s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
program crashed: WARNING in shmem_rmdir
testing compiled C program (duration=31.439342712s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
program crashed: WARNING in shmem_rmdir
testing compiled C program (duration=31.439342712s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
program crashed: WARNING in shmem_rmdir
testing program (duration=31.439342712s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
detailed listing:
executing program 0:
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)

program crashed: WARNING in shmem_rmdir
validation run: crashed=true
testing program (duration=31.439342712s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
detailed listing:
executing program 0:
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)

program crashed: WARNING in shmem_rmdir
validation run: crashed=true
testing program (duration=31.439342712s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs
detailed listing:
executing program 0:
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)

program crashed: WARNING in shmem_rmdir
validation run: crashed=true
reproducing took 55m36.455056977s
repro crashed as (corrupted=false):
veth0_vlan: entered promiscuous mode
veth1_macvtap: entered promiscuous mode
------------[ cut here ]------------
WARNING: CPU: 1 PID: 371 at fs/inode.c:340 drop_nlink+0xce/0x110 fs/inode.c:340
Modules linked in:
CPU: 1 UID: 0 PID: 371 Comm: syz-executor Not tainted syzkaller #0 6e9554c60025b20768244e67b1d15d7ce813f552
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
RIP: 0010:drop_nlink+0xce/0x110 fs/inode.c:340
Code: 04 00 00 be 08 00 00 00 e8 ef 16 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 92 ee 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c
RSP: 0018:ffffc9000123fc60 EFLAGS: 00010293
RAX: ffffffff81f1b4be RBX: ffff88812fe0e958 RCX: ffff88811335b900
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000123fc88 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffff52000247f7c R12: dffffc0000000000
R13: 1ffff11025fc1d34 R14: ffff88812fe0e9a0 R15: 0000000000000000
FS:  000055555ff29500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055555ff4c948 CR3: 0000000114aa8000 CR4: 00000000003526b0
Call Trace:
 <TASK>
 shmem_rmdir+0x5f/0x90 mm/shmem.c:3758
 vfs_rmdir+0x3e3/0x560 fs/namei.c:4348
 incfs_kill_sb+0x109/0x230 fs/incfs/vfs.c:1968
 deactivate_locked_super+0xd5/0x2a0 fs/super.c:478
 deactivate_super+0xb8/0xe0 fs/super.c:511
 cleanup_mnt+0x406/0x4a0 fs/namespace.c:1380
 __cleanup_mnt+0x1d/0x40 fs/namespace.c:1387
 task_work_run+0x1e8/0x260 kernel/task_work.c:246
 resume_user_mode_work+0x35/0x50 include/linux/resume_user_mode.h:50
 exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x63/0xb0 kernel/entry/common.c:218
 do_syscall_64+0x63/0xf0 arch/x86/entry/common.c:84
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f4b2699d9d7
Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
RSP: 002b:00007fff70b7dfd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4b2699d9d7
RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff70b7e090
RBP: 00007fff70b7e090 R08: 00007fff70b7f090 R09: 00000000ffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff70b7f120
R13: 00007f4b26a32050 R14: 00000000000065d9 R15: 00007fff70b7f160
 </TASK>
---[ end trace 0000000000000000 ]---
==================================================================
BUG: KASAN: null-ptr-deref in instrument_atomic_read_write include/linux/instrumented.h:96 [inline]
BUG: KASAN: null-ptr-deref in atomic_inc_return include/linux/atomic/atomic-instrumented.h:453 [inline]
BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 fs/inode.c:452
Write of size 4 at addr 0000000000000168 by task syz-executor/371

CPU: 0 UID: 0 PID: 371 Comm: syz-executor Tainted: G        W          syzkaller #0 6e9554c60025b20768244e67b1d15d7ce813f552
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
Call Trace:
 <TASK>
 __dump_stack+0x21/0x30 lib/dump_stack.c:94
 dump_stack_lvl+0x140/0x1c0 lib/dump_stack.c:120
 print_report+0x3d/0x70 mm/kasan/report.c:484
 kasan_report+0x162/0x1a0 mm/kasan/report.c:594
 check_region_inline mm/kasan/generic.c:-1 [inline]
 kasan_check_range+0x25a/0x2b0 mm/kasan/generic.c:189
 __kasan_check_write+0x18/0x20 mm/kasan/shadow.c:37
 instrument_atomic_read_write include/linux/instrumented.h:96 [inline]
 atomic_inc_return include/linux/atomic/atomic-instrumented.h:453 [inline]
 ihold+0x24/0x70 fs/inode.c:452
 d_delete_notify include/linux/fsnotify.h:357 [inline]
 vfs_rmdir+0x26a/0x560 fs/namei.c:4361
 incfs_kill_sb+0x109/0x230 fs/incfs/vfs.c:1968
 deactivate_locked_super+0xd5/0x2a0 fs/super.c:478
 deactivate_super+0xb8/0xe0 fs/super.c:511
 cleanup_mnt+0x406/0x4a0 fs/namespace.c:1380
 __cleanup_mnt+0x1d/0x40 fs/namespace.c:1387
 task_work_run+0x1e8/0x260 kernel/task_work.c:246
 resume_user_mode_work+0x35/0x50 include/linux/resume_user_mode.h:50
 exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x63/0xb0 kernel/entry/common.c:218
 do_syscall_64+0x63/0xf0 arch/x86/entry/common.c:84
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f4b2699d9d7
Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
RSP: 002b:00007fff70b7dfd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4b2699d9d7
RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff70b7e090
RBP: 00007fff70b7e090 R08: 00007fff70b7f090 R09: 00000000ffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff70b7f120
R13: 00007f4b26a32050 R14: 00000000000065d9 R15: 00007fff70b7f160
 </TASK>
==================================================================
BUG: kernel NULL pointer dereference, address: 0000000000000168
#PF: supervisor write access in kernel mode
#PF: error_code(0x0002) - not-present page
PGD 8000000114e72067 P4D 8000000114e72067 PUD 0 
Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI
CPU: 0 UID: 0 PID: 371 Comm: syz-executor Tainted: G    B   W          syzkaller #0 6e9554c60025b20768244e67b1d15d7ce813f552
Tainted: [B]=BAD_PAGE, [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
RIP: 0010:arch_atomic_add_return arch/x86/include/asm/atomic.h:85 [inline]
RIP: 0010:raw_atomic_add_return include/linux/atomic/atomic-arch-fallback.h:564 [inline]
RIP: 0010:raw_atomic_inc_return include/linux/atomic/atomic-arch-fallback.h:1020 [inline]
RIP: 0010:atomic_inc_return include/linux/atomic/atomic-instrumented.h:454 [inline]
RIP: 0010:ihold+0x2a/0x70 fs/inode.c:452
Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 7d e5 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 ac 0d ee ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 8d
RSP: 0018:ffffc9000123fca0 EFLAGS: 00010246
RAX: ffff88811335b900 RBX: 0000000000000000 RCX: ffff88811335b900
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000123fcb0 R08: ffffffff88b90947 R09: 1ffffffff1172128
R10: dffffc0000000000 R11: fffffbfff1172129 R12: ffff88812fe0e964
R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
FS:  000055555ff29500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000168 CR3: 0000000114aa8000 CR4: 00000000003526b0
Call Trace:
 <TASK>
 d_delete_notify include/linux/fsnotify.h:357 [inline]
 vfs_rmdir+0x26a/0x560 fs/namei.c:4361
 incfs_kill_sb+0x109/0x230 fs/incfs/vfs.c:1968
 deactivate_locked_super+0xd5/0x2a0 fs/super.c:478
 deactivate_super+0xb8/0xe0 fs/super.c:511
 cleanup_mnt+0x406/0x4a0 fs/namespace.c:1380
 __cleanup_mnt+0x1d/0x40 fs/namespace.c:1387
 task_work_run+0x1e8/0x260 kernel/task_work.c:246
 resume_user_mode_work+0x35/0x50 include/linux/resume_user_mode.h:50
 exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x63/0xb0 kernel/entry/common.c:218
 do_syscall_64+0x63/0xf0 arch/x86/entry/common.c:84
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f4b2699d9d7
Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
RSP: 002b:00007fff70b7dfd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4b2699d9d7
RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff70b7e090
RBP: 00007fff70b7e090 R08: 00007fff70b7f090 R09: 00000000ffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff70b7f120
R13: 00007f4b26a32050 R14: 00000000000065d9 R15: 00007fff70b7f160
 </TASK>
Modules linked in:
CR2: 0000000000000168
---[ end trace 0000000000000000 ]---
RIP: 0010:arch_atomic_add_return arch/x86/include/asm/atomic.h:85 [inline]
RIP: 0010:raw_atomic_add_return include/linux/atomic/atomic-arch-fallback.h:564 [inline]
RIP: 0010:raw_atomic_inc_return include/linux/atomic/atomic-arch-fallback.h:1020 [inline]
RIP: 0010:atomic_inc_return include/linux/atomic/atomic-instrumented.h:454 [inline]
RIP: 0010:ihold+0x2a/0x70 fs/inode.c:452
Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 7d e5 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 ac 0d ee ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 8d
RSP: 0018:ffffc9000123fca0 EFLAGS: 00010246
RAX: ffff88811335b900 RBX: 0000000000000000 RCX: ffff88811335b900
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000123fcb0 R08: ffffffff88b90947 R09: 1ffffffff1172128
R10: dffffc0000000000 R11: fffffbfff1172129 R12: ffff88812fe0e964
R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
FS:  000055555ff29500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000168 CR3: 0000000114aa8000 CR4: 00000000003526b0
----------------
Code disassembly (best guess):
   0:	f3 0f 1e fa          	endbr64
   4:	55                   	push   %rbp
   5:	48 89 e5             	mov    %rsp,%rbp
   8:	41 56                	push   %r14
   a:	53                   	push   %rbx
   b:	48 89 fb             	mov    %rdi,%rbx
   e:	e8 7d e5 95 ff       	call   0xff95e590
  13:	48 8d bb 68 01 00 00 	lea    0x168(%rbx),%rdi
  1a:	be 04 00 00 00       	mov    $0x4,%esi
  1f:	e8 ac 0d ee ff       	call   0xffee0dd0
  24:	41 be 01 00 00 00    	mov    $0x1,%r14d
* 2a:	f0 44 0f c1 b3 68 01 	lock xadd %r14d,0x168(%rbx) <-- trapping instruction
  31:	00 00
  33:	41 ff c6             	inc    %r14d
  36:	bf 02 00 00 00       	mov    $0x2,%edi
  3b:	44 89 f6             	mov    %r14d,%esi
  3e:	e8                   	.byte 0xe8
  3f:	8d                   	.byte 0x8d

final repro crashed as (corrupted=false):
veth0_vlan: entered promiscuous mode
veth1_macvtap: entered promiscuous mode
------------[ cut here ]------------
WARNING: CPU: 1 PID: 371 at fs/inode.c:340 drop_nlink+0xce/0x110 fs/inode.c:340
Modules linked in:
CPU: 1 UID: 0 PID: 371 Comm: syz-executor Not tainted syzkaller #0 6e9554c60025b20768244e67b1d15d7ce813f552
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
RIP: 0010:drop_nlink+0xce/0x110 fs/inode.c:340
Code: 04 00 00 be 08 00 00 00 e8 ef 16 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 92 ee 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c
RSP: 0018:ffffc9000123fc60 EFLAGS: 00010293
RAX: ffffffff81f1b4be RBX: ffff88812fe0e958 RCX: ffff88811335b900
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000123fc88 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffff52000247f7c R12: dffffc0000000000
R13: 1ffff11025fc1d34 R14: ffff88812fe0e9a0 R15: 0000000000000000
FS:  000055555ff29500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055555ff4c948 CR3: 0000000114aa8000 CR4: 00000000003526b0
Call Trace:
 <TASK>
 shmem_rmdir+0x5f/0x90 mm/shmem.c:3758
 vfs_rmdir+0x3e3/0x560 fs/namei.c:4348
 incfs_kill_sb+0x109/0x230 fs/incfs/vfs.c:1968
 deactivate_locked_super+0xd5/0x2a0 fs/super.c:478
 deactivate_super+0xb8/0xe0 fs/super.c:511
 cleanup_mnt+0x406/0x4a0 fs/namespace.c:1380
 __cleanup_mnt+0x1d/0x40 fs/namespace.c:1387
 task_work_run+0x1e8/0x260 kernel/task_work.c:246
 resume_user_mode_work+0x35/0x50 include/linux/resume_user_mode.h:50
 exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x63/0xb0 kernel/entry/common.c:218
 do_syscall_64+0x63/0xf0 arch/x86/entry/common.c:84
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f4b2699d9d7
Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
RSP: 002b:00007fff70b7dfd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4b2699d9d7
RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff70b7e090
RBP: 00007fff70b7e090 R08: 00007fff70b7f090 R09: 00000000ffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff70b7f120
R13: 00007f4b26a32050 R14: 00000000000065d9 R15: 00007fff70b7f160
 </TASK>
---[ end trace 0000000000000000 ]---
==================================================================
BUG: KASAN: null-ptr-deref in instrument_atomic_read_write include/linux/instrumented.h:96 [inline]
BUG: KASAN: null-ptr-deref in atomic_inc_return include/linux/atomic/atomic-instrumented.h:453 [inline]
BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 fs/inode.c:452
Write of size 4 at addr 0000000000000168 by task syz-executor/371

CPU: 0 UID: 0 PID: 371 Comm: syz-executor Tainted: G        W          syzkaller #0 6e9554c60025b20768244e67b1d15d7ce813f552
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
Call Trace:
 <TASK>
 __dump_stack+0x21/0x30 lib/dump_stack.c:94
 dump_stack_lvl+0x140/0x1c0 lib/dump_stack.c:120
 print_report+0x3d/0x70 mm/kasan/report.c:484
 kasan_report+0x162/0x1a0 mm/kasan/report.c:594
 check_region_inline mm/kasan/generic.c:-1 [inline]
 kasan_check_range+0x25a/0x2b0 mm/kasan/generic.c:189
 __kasan_check_write+0x18/0x20 mm/kasan/shadow.c:37
 instrument_atomic_read_write include/linux/instrumented.h:96 [inline]
 atomic_inc_return include/linux/atomic/atomic-instrumented.h:453 [inline]
 ihold+0x24/0x70 fs/inode.c:452
 d_delete_notify include/linux/fsnotify.h:357 [inline]
 vfs_rmdir+0x26a/0x560 fs/namei.c:4361
 incfs_kill_sb+0x109/0x230 fs/incfs/vfs.c:1968
 deactivate_locked_super+0xd5/0x2a0 fs/super.c:478
 deactivate_super+0xb8/0xe0 fs/super.c:511
 cleanup_mnt+0x406/0x4a0 fs/namespace.c:1380
 __cleanup_mnt+0x1d/0x40 fs/namespace.c:1387
 task_work_run+0x1e8/0x260 kernel/task_work.c:246
 resume_user_mode_work+0x35/0x50 include/linux/resume_user_mode.h:50
 exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x63/0xb0 kernel/entry/common.c:218
 do_syscall_64+0x63/0xf0 arch/x86/entry/common.c:84
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f4b2699d9d7
Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
RSP: 002b:00007fff70b7dfd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4b2699d9d7
RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff70b7e090
RBP: 00007fff70b7e090 R08: 00007fff70b7f090 R09: 00000000ffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff70b7f120
R13: 00007f4b26a32050 R14: 00000000000065d9 R15: 00007fff70b7f160
 </TASK>
==================================================================
BUG: kernel NULL pointer dereference, address: 0000000000000168
#PF: supervisor write access in kernel mode
#PF: error_code(0x0002) - not-present page
PGD 8000000114e72067 P4D 8000000114e72067 PUD 0 
Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI
CPU: 0 UID: 0 PID: 371 Comm: syz-executor Tainted: G    B   W          syzkaller #0 6e9554c60025b20768244e67b1d15d7ce813f552
Tainted: [B]=BAD_PAGE, [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
RIP: 0010:arch_atomic_add_return arch/x86/include/asm/atomic.h:85 [inline]
RIP: 0010:raw_atomic_add_return include/linux/atomic/atomic-arch-fallback.h:564 [inline]
RIP: 0010:raw_atomic_inc_return include/linux/atomic/atomic-arch-fallback.h:1020 [inline]
RIP: 0010:atomic_inc_return include/linux/atomic/atomic-instrumented.h:454 [inline]
RIP: 0010:ihold+0x2a/0x70 fs/inode.c:452
Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 7d e5 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 ac 0d ee ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 8d
RSP: 0018:ffffc9000123fca0 EFLAGS: 00010246
RAX: ffff88811335b900 RBX: 0000000000000000 RCX: ffff88811335b900
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000123fcb0 R08: ffffffff88b90947 R09: 1ffffffff1172128
R10: dffffc0000000000 R11: fffffbfff1172129 R12: ffff88812fe0e964
R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
FS:  000055555ff29500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000168 CR3: 0000000114aa8000 CR4: 00000000003526b0
Call Trace:
 <TASK>
 d_delete_notify include/linux/fsnotify.h:357 [inline]
 vfs_rmdir+0x26a/0x560 fs/namei.c:4361
 incfs_kill_sb+0x109/0x230 fs/incfs/vfs.c:1968
 deactivate_locked_super+0xd5/0x2a0 fs/super.c:478
 deactivate_super+0xb8/0xe0 fs/super.c:511
 cleanup_mnt+0x406/0x4a0 fs/namespace.c:1380
 __cleanup_mnt+0x1d/0x40 fs/namespace.c:1387
 task_work_run+0x1e8/0x260 kernel/task_work.c:246
 resume_user_mode_work+0x35/0x50 include/linux/resume_user_mode.h:50
 exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x63/0xb0 kernel/entry/common.c:218
 do_syscall_64+0x63/0xf0 arch/x86/entry/common.c:84
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f4b2699d9d7
Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
RSP: 002b:00007fff70b7dfd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4b2699d9d7
RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff70b7e090
RBP: 00007fff70b7e090 R08: 00007fff70b7f090 R09: 00000000ffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff70b7f120
R13: 00007f4b26a32050 R14: 00000000000065d9 R15: 00007fff70b7f160
 </TASK>
Modules linked in:
CR2: 0000000000000168
---[ end trace 0000000000000000 ]---
RIP: 0010:arch_atomic_add_return arch/x86/include/asm/atomic.h:85 [inline]
RIP: 0010:raw_atomic_add_return include/linux/atomic/atomic-arch-fallback.h:564 [inline]
RIP: 0010:raw_atomic_inc_return include/linux/atomic/atomic-arch-fallback.h:1020 [inline]
RIP: 0010:atomic_inc_return include/linux/atomic/atomic-instrumented.h:454 [inline]
RIP: 0010:ihold+0x2a/0x70 fs/inode.c:452
Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 7d e5 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 ac 0d ee ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 8d
RSP: 0018:ffffc9000123fca0 EFLAGS: 00010246
RAX: ffff88811335b900 RBX: 0000000000000000 RCX: ffff88811335b900
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000123fcb0 R08: ffffffff88b90947 R09: 1ffffffff1172128
R10: dffffc0000000000 R11: fffffbfff1172129 R12: ffff88812fe0e964
R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
FS:  000055555ff29500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000168 CR3: 0000000114aa8000 CR4: 00000000003526b0
----------------
Code disassembly (best guess):
   0:	f3 0f 1e fa          	endbr64
   4:	55                   	push   %rbp
   5:	48 89 e5             	mov    %rsp,%rbp
   8:	41 56                	push   %r14
   a:	53                   	push   %rbx
   b:	48 89 fb             	mov    %rdi,%rbx
   e:	e8 7d e5 95 ff       	call   0xff95e590
  13:	48 8d bb 68 01 00 00 	lea    0x168(%rbx),%rdi
  1a:	be 04 00 00 00       	mov    $0x4,%esi
  1f:	e8 ac 0d ee ff       	call   0xffee0dd0
  24:	41 be 01 00 00 00    	mov    $0x1,%r14d
* 2a:	f0 44 0f c1 b3 68 01 	lock xadd %r14d,0x168(%rbx) <-- trapping instruction
  31:	00 00
  33:	41 ff c6             	inc    %r14d
  36:	bf 02 00 00 00       	mov    $0x2,%edi
  3b:	44 89 f6             	mov    %r14d,%esi
  3e:	e8                   	.byte 0xe8
  3f:	8d                   	.byte 0x8d