Extracting prog: 12m16.013978705s Minimizing prog: 10m54.97847238s Simplifying prog options: 0s Extracting C: 22.000110726s Simplifying C: 11m21.065636859s extracting reproducer from 25 programs testing a last program of every proc single: executing 5 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-ioctl$TUNSETIFF-socket$inet6_tcp-setsockopt$inet6_buf-syz_open_dev$usbmon-fspick-syz_clone-read$usbmon-syz_init_net_socket$bt_sco-dup-ioctl$SIOCSIFHWADDR-write$tun-bind$bt_sco-gettid-sigaltstack-rt_sigqueueinfo-openat$cgroup_ro-fcntl$lock-syz_usb_connect$uac2-ioctl$MON_IOCQ_URB_LEN detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000180)="e6724ee0d57ab216f76b365699b251d71939cf3226c080746430c572303e7a13a43039168f460633967e59dee29454d135993911a2d996936cb8d890", 0x3c) r2 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$usbmon(r2, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup(r1) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000a40)={@val={0xa, 0x88a8}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="cd1008a2dc58", @void, {@ipv6={0x86dd, @udp={0x7, 0x6, "dc70e5", 0x3e0, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@routing={0x2f, 0x8, 0x2, 0x8, 0x0, [@remote, @remote, @private1, @dev={0xfe, 0x80, '\x00', 0xb}]}, @fragment={0x43, 0x0, 0x5, 0x1, 0x0, 0x4, 0x64}, @srh={0x3b, 0xc, 0x4, 0x6, 0x1, 0x8, 0xfffc, [@remote, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote]}, @dstopts={0x2e, 0x4, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x8000}, @calipso={0x7, 0x18, {0x0, 0x4, 0xc4, 0x0, [0xc, 0x0]}}]}, @hopopts={0x2, 0x6, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0x53, 0x6, [0x7, 0xb]}}, @pad1, @pad1, @hao={0xc9, 0x10, @mcast1}]}, @hopopts={0x6, 0xf, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x36}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @ra, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x0, [0xf1b]}}, @jumbo={0xc2, 0x4, 0x6}, @calipso={0x7, 0x30, {0x1, 0xa, 0x90, 0x0, [0xf, 0x0, 0x1, 0x5, 0x9]}}]}, @dstopts={0x5c, 0x35, '\x00', [@pad1, @calipso={0x7, 0x28, {0x2, 0x8, 0x3, 0x402, [0x5, 0x2, 0x7, 0x2]}}, @hao={0xc9, 0x10, @local}, @generic={0x3, 0xef, "25710386f21aab0177f4a6f2984f7c18cf44fa4f42e3e16f918553fa571f11eb7bd1cb84d6a2349ad61d93ba8dd3c7fccdbdfce4fe812bbc228427975000dcfbc1fe34b63a964178d5092c403fd30bacbc8cdd14d0cc5bed9825985af409795ae3f7eab4db6b187467568ada2de35f3709a0b5e91964da750b515904004e51fc6884703ed96597aa7b915433cd232b8ac903fe1ea13b7e3b170709ecd021635354c4b6c88ff4c5a5f366b4d9d537f3135e8b4f83830bdef86403c0aac89e2e7c31ed6e509d9980671213179c085ffbd324418641edccd3be1d4a5eb1c575f8519e0293c25b3e73917f566179607f6f"}, @generic={0x30, 0x75, "2eab23e694a4eece866da96d41c9e7bdc4e5affc8a8aa3045482bf494b1d36a37e1f94d0dfaea36e14fff9042afe291b594bd85906629543087a09230c8cbede67ff485c4573f08e5ff96a8ac458b25729f87572b04017b31cab7457d5d68d9cd0bbf6b8ac346a265c711669e22e2a9b11811547d2"}, @pad1]}, @hopopts={0x89, 0xa, '\x00', [@hao={0xc9, 0x10, @private1}, @generic={0x9, 0x40, "57690c230002197cfb5ee825ce6eae610a434f184fad88d265cd68d92a66465b7b95235ef8842dd87f14f1021db4a314484a6d6a266c0d962ec5379cad709daa"}]}], {0x4e21, 0x4e21, 0x18, 0x0, @opaque="d537d0a103fdf9303746d7ee79354d3a"}}}}}}}, 0x41a) bind$bt_sco(r3, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r5 = gettid() sigaltstack(&(0x7f0000001040)={&(0x7f00000020c0)=""/4124, 0x0, 0x101c}, 0x0) rt_sigqueueinfo(r5, 0x21, &(0x7f00000002c0)={0x8000a, 0x4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x7fffffffffffffff, 0x1fd}) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f00000009c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x2b73, 0x1b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x8, 0x30, 0x4, {0x8, 0xb, 0x1, 0x1, 0x1, 0x3, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0xa, 0x9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x2, 0x4, 0x7, {0x8, 0x25, 0x1, 0x81, 0xf, 0xf2, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x80, 0x0, 0xb, {0x8, 0x25, 0x1, 0x81, 0x14, 0x7, 0x6}}}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0xc0c}}, {0xc4, &(0x7f0000000340)=@string={0xc4, 0x3, "fb4d32216d5570215e76c6f6aa758a2497e43644d8f2dcb695e672c22d2aa508e54a57bb52bb2dbf922969637717d2620204ec1e77d007e6ac0184431396d295cb3acc2c9b7e61d6b21b3a0fc520584cca338e690a73d17b7965759f54f8d874b47e9669a026324dcb1ad26a5febeb57d32777416bf7f5405e1c2d6c7e290263db90a47401de143df9939f6065af263713708f5822b8348ef1aa7da9f7c234f3a02d7e5302fe88bb77ffa6de89cc177b9fd4489809cb459fcf7a21b6124a12b678f7"}}]}) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_SET_PIT-socket$nl_netfilter-mkdirat-mkdirat-mount$overlay-chdir-openat-ftruncate-copy_file_range-socket$inet6-mkdir-mount$incfs-openat-openat$incfs-ioctl$TIOCL_GETKMSGREDIRECT-syz_usb_connect$cdc_ncm-ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE-syz_usb_connect detailed listing: executing program 0: ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x101, 0x80c, 0x0, 0x1c, 0x7, 0x2, 0x11, 0x7, 0xed, 0x9, 0x9, 0x4, 0xb}, {0x23, 0xcd59, 0xa, 0x97, 0xd, 0x6, 0x13, 0x7, 0xd9, 0x2, 0x44, 0x7d, 0x100003fffffffffd}, {0x7fffffff, 0x18, 0x3, 0xff, 0x2, 0x9, 0x10, 0xf8, 0x5, 0x8, 0x6, 0x9, 0xfffffffffffffffd}], 0x800000}) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x325) ftruncate(r0, 0x6000000) copy_file_range(r0, 0x0, r0, &(0x7f00000004c0)=0x100, 0x9, 0x0) socket$inet6(0xa, 0x3, 0x3) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x82, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r2 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x40306727, &(0x7f00000000c0)) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0xcc, 0x0, 0x1}) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SET_KEEPCAPS-socketpair$unix-openat$binderfs-ioctl$BINDER_GET_NODE_INFO_FOR_REF-openat$kvm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-socket-sendmsg$inet-ioctl$int_in-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_SET_IRQCHIP-ioctl$KVM_SET_IRQCHIP-ioctl$KVM_SET_REGS-bind$inet-sendmmsg$inet-ioctl$KVM_RUN-sendmmsg$unix-write$uinput_user_dev-socket-write-ppoll detailed listing: executing program 0: prctl$PR_SET_KEEPCAPS(0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r5, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xb}}], 0x18}, 0x400c804) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x8, 0x7, 0x6, 0x4, 0xff, 0x10, 0x3, 0x2, 0x2, 0x8, 0x9, 0x4, 0x6, 0xc, 0x4, 0x7}}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xe, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x5a, 0x9e, 0xa, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e27, @empty}, 0x10, 0x0, 0x64}}], 0x1, 0x20004840) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1, 0x6, 0x10000003, 0x0, 0x5, 0x4, 0x0, 0xa, 0x3c1b, 0x1, 0xfffff7dc, 0xd, 0xfffffffe, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x7ffffffc, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x6, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x1, 0x80000130, 0x8004, 0x5, 0xffffffd3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x3, 0x7fff, 0x9, 0x400, 0x401, 0x2, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x5, 0xfe000000, 0xfffe, 0x2, 0x4, 0x8, 0x3, 0x1, 0x9, 0x1, 0x3, 0x0, 0xbc45, 0x3, 0x42, 0x1], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x7, 0x8, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xc, 0xc, 0x5, 0x2, 0x3, 0x2000000b, 0x4, 0x6, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x8, 0x4, 0x2950bfb0, 0x7, 0xa2, 0x7, 0x1ff, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0xffffffff, 0x8, 0x0, 0xa, 0x40, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xfffffffc, 0x3, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x54, 0xfffffff7, 0x3, 0x101, 0x10000, 0x5, 0x7fff, 0xffff, 0x80, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xfffffffe, 0x80000000, 0x821, 0x4, 0x4, 0x800, 0xfffff000, 0x5, 0x403, 0x7e, 0x100, 0x9602, 0x7, 0xfffffbff, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x2, 0xfff]}, 0x45c) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000100)="240000001e005f1814fffffffffffff807000000b800000000000000060005000d000000", 0x24) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone-pipe-io_setup-getresgid-io_submit-mmap-sendmsg$nl_generic-socket$nl_route-sendmsg$netlink-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CAP_X86_USER_SPACE_MSR-openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-syz_usb_connect$hid-ioctl$USBDEVFS_SUBMITURB-sendmsg$TIPC_NL_BEARER_ENABLE-socket$netlink-sendmsg$netlink-ioctl$TIOCVHANGUP-syz_kvm_setup_syzos_vm$x86-syz_kvm_add_vcpu$x86-socket$nl_generic-syz_genetlink_get_family_id$tipc2-sendmsg$TIPC_NL_NET_SET-ioctl$KVM_INTERRUPT-ioctl$KVM_RUN-ioctl$KVM_RUN-ioctl$F2FS_IOC_COMPRESS_FILE detailed listing: executing program 0: syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x9, &(0x7f0000000140)=0x0) getresgid(&(0x7f0000002e00), 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x4e}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, r1, &(0x7f00000001c0)='m', 0x1, 0x1}]) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x12, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001600010a0000000000000000df24b0022db01b54fab45a190a"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000340)=ANY=[], 0x1c}], 0x1}, 0x40080c1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r5, 0x4068aea3, &(0x7f0000000200)={0xbc, 0x0, 0x7}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) r7 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000003c0)=@urb_type_iso={0x0, {0x1, 0x1}, 0x0, 0xc0, 0x0, 0x0, 0x3, 0x60000, 0xb, 0x800, 0x8, 0x0, [{0x9, 0x5, 0x4da}, {0xffffa588, 0x3, 0x8}, {0xfffffffb, 0x0, 0x1e}, {0x8001, 0x8, 0x3}, {0xb, 0xfffffff9}, {0x6, 0x40, 0x25}, {0x8001, 0xffc, 0x6}, {0x86, 0x800, 0x6}, {0x2, 0x2, 0xc}, {0x32a5, 0x1, 0xa9d1}, {0xb98, 0x100, 0x2}]}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES64=r7], 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000054000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) r9 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$x86(r9, &(0x7f00000000c0)={0x0, &(0x7f0000000600)}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000f0000001c0007800c0004002e2d0000000000000c0003"], 0x30}, 0x1, 0x0, 0x0, 0x80001}, 0x0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000180)=0x1ff) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r4, 0xf518, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone-pipe-io_setup-getresgid-io_submit-mmap-sendmsg$nl_generic-socket$nl_route-sendmsg$netlink-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CAP_X86_USER_SPACE_MSR-openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-syz_usb_connect$hid-ioctl$USBDEVFS_SUBMITURB-sendmsg$TIPC_NL_BEARER_ENABLE-socket$netlink-sendmsg$netlink-ioctl$TIOCVHANGUP-syz_kvm_setup_syzos_vm$x86-syz_kvm_add_vcpu$x86-socket$nl_generic-syz_genetlink_get_family_id$tipc2-sendmsg$TIPC_NL_NET_SET-ioctl$KVM_INTERRUPT-ioctl$KVM_RUN-ioctl$KVM_RUN-ioctl$F2FS_IOC_COMPRESS_FILE detailed listing: executing program 0: syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x9, &(0x7f0000000140)=0x0) getresgid(&(0x7f0000002e00), 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x4e}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, r1, &(0x7f00000001c0)='m', 0x1, 0x1}]) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x12, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001600010a0000000000000000df24b0022db01b54fab45a190a"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000340)=ANY=[], 0x1c}], 0x1}, 0x40080c1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r5, 0x4068aea3, &(0x7f0000000200)={0xbc, 0x0, 0x7}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) r7 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000003c0)=@urb_type_iso={0x0, {0x1, 0x1}, 0x0, 0xc0, 0x0, 0x0, 0x3, 0x60000, 0xb, 0x800, 0x8, 0x0, [{0x9, 0x5, 0x4da}, {0xffffa588, 0x3, 0x8}, {0xfffffffb, 0x0, 0x1e}, {0x8001, 0x8, 0x3}, {0xb, 0xfffffff9}, {0x6, 0x40, 0x25}, {0x8001, 0xffc, 0x6}, {0x86, 0x800, 0x6}, {0x2, 0x2, 0xc}, {0x32a5, 0x1, 0xa9d1}, {0xb98, 0x100, 0x2}]}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES64=r7], 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000054000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) r9 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$x86(r9, &(0x7f00000000c0)={0x0, &(0x7f0000000600)}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000f0000001c0007800c0004002e2d0000000000000c0003"], 0x30}, 0x1, 0x0, 0x0, 0x80001}, 0x0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000180)=0x1ff) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r4, 0xf518, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 25 programs with base timeout 30s testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 30, 30, 8, 7, 30, 30, 16, 7, 9, 7, 2, 5, 30, 30, 34, 12, 9, 7, 30, 4, 30, 24, 18, 20] detailed listing: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x275a, 0x0) close(0x3) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) (async) read$FUSE(r0, &(0x7f0000000740)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mprotect(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x68) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f0000000240)='./file0\x00') (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000100)={0x1100, 0x0, 0x4, 0x10003}) executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r0}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000240)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="f185da35f441f1fd0af11a04c643ad6a54581cb8ba0a7555fd3f206d4361786f16a365c8a224f70129c027a6f4031e38e3b7d749fd46ed4d4189980525ae82cb54febf1e26a4752588d6118a3918ec56188114f1c6d3df79bdd4013a55b11dc40110db0b2d12f7248e747ec4f468b005f524df37cafcd80156da9c350f3e5caaf7aea0703cb203c331b5a0017b87742a8b192bbf53d2a637d7f6d4f1aaf3f13be89cf0cae3608bc956cafb482d8b9bfd992dd0", 0xb3}], 0x1, &(0x7f0000000200)=[@txtime={{0x18, 0x1, 0x3d, 0x400}}], 0x18}, 0x4000000) r2 = fsmount(0xffffffffffffffff, 0x0, 0x82) read$FUSE(r2, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r2, &(0x7f00000022c0)={0x90, 0xfffffffffffffffe, r3, [{0x3, 0x8, 0x4, 0x5, '\xd6\xe5\\-'}, {0x1, 0x1000, 0x0, 0x8}, {0x3, 0x3, 0x12, 0x7fff, '(].^-:-[+{!.%)+-\\*'}, {0x5, 0x9, 0x0, 0x4}]}, 0x90) lstat(&(0x7f0000004840)='./file0\x00', &(0x7f0000004880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000004900)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@loopback}}, &(0x7f0000004a00)=0xe8) syz_fuse_handle_req(r2, &(0x7f0000002380)="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", 0x2000, &(0x7f0000004fc0)={&(0x7f0000004380)={0x50, 0x0, 0x3, {0x7, 0x2d, 0x95, 0x40080, 0x81, 0xc, 0x8000, 0x8001, 0x0, 0x0, 0x2, 0x9}}, &(0x7f0000004400)={0x18, 0xfffffffffffffffe, 0x6, {0x200000}}, &(0x7f0000004440)={0x18, 0x0, 0x8, {0x40}}, &(0x7f0000004480)={0x18, 0x0, 0x4, {0x80000000}}, &(0x7f00000044c0)={0x18, 0x0, 0x4, {0x33}}, &(0x7f0000004500)={0x28, 0xfffffffffffffff5, 0x0, {{0x7, 0x5, 0x1, r6}}}, &(0x7f0000004540)={0x60, 0xffffffffffffffda, 0x8, {{0x80, 0x800, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x4, 0xc0000000, 0x7}}}, &(0x7f00000045c0)={0x18, 0xfffffffffffffff5, 0x0, {0x7}}, &(0x7f0000004600)={0x11, 0x0, 0x1, {'\x00'}}, &(0x7f0000004640)={0x20, 0xfffffffffffffff5, 0x3, {0x0, 0x7}}, &(0x7f0000004680)={0x78, 0x0, 0xa7a, {0x6, 0xff800000, 0x0, {0x1, 0x0, 0x7fff, 0x7, 0x2, 0x80000001, 0x1, 0xfff, 0x7, 0x2000, 0xda, r4, r5, 0x5, 0x8}}}, &(0x7f0000004700)={0x90, 0x0, 0x10, {0x2, 0x3, 0x1, 0x0, 0x3ff, 0x4, {0x1, 0x5, 0x7, 0x100000001, 0x6, 0x8, 0x9eba, 0x78, 0x10, 0x6000, 0x480000, r4, r5, 0x8, 0x2}}}, &(0x7f00000047c0)={0x80, 0xfffffffffffffff5, 0xb45, [{0x3, 0x3, 0x1, 0x52bb, '!'}, {0x1, 0x11e, 0x4, 0x63945067, '\xd6\xe5\\-'}, {0x5, 0xa, 0x12, 0x69e6, '(].^-:-[+{!.%)+-\\*'}]}, &(0x7f0000004a40)={0x318, 0x0, 0xe, [{{0x2, 0x3, 0x400, 0xa6, 0x670c, 0x6, {0x1, 0x0, 0x8, 0x2, 0x81, 0x100000001, 0x800, 0x5, 0x3cc2, 0x6000, 0x5, r4, r5, 0xa84b, 0x40}}, {0x1, 0x6, 0x4, 0xe21, '\xd6\xe5\\-'}}, {{0x4, 0x3, 0x756, 0x4, 0x1, 0x7, {0x5, 0x5, 0x8000000000000001, 0x8, 0x6, 0x6, 0x3, 0xcb3, 0xc, 0x2000, 0x0, r4, r7, 0x8, 0x9}}, {0x6, 0x5, 0x0, 0x1000}}, {{0x1, 0x3, 0x2, 0x7, 0x5, 0x9b80, {0x0, 0xd, 0x0, 0x8, 0xe, 0xffffffffffffffff, 0x8, 0xc, 0xd94, 0x6000, 0x4, r9, r5, 0x6, 0x2}}, {0x5, 0x1, 0x0, 0x4}}, {{0x6, 0x1, 0x6, 0x8000, 0x1, 0x1a, {0x0, 0x7ff, 0xff, 0x4, 0x82, 0x5, 0x2, 0x5, 0x9, 0x8000, 0xfff, r4, r5, 0x2, 0xe2}}, {0x1, 0x3abdfe99, 0x0, 0xa}}, {{0x1, 0x3, 0x5, 0x80, 0x2, 0x5836, {0x5, 0x80, 0x80000001, 0x0, 0x7, 0x2, 0xaeaf, 0x40, 0x4, 0x2000, 0xfffffffd, r4, r5, 0xff, 0x7}}, {0x0, 0x8000, 0x7, 0x4932, 'vxcan1\x00'}}]}, &(0x7f0000004d80)={0xa0, 0x0, 0x1f9, {{0x3, 0x1, 0x80, 0xe, 0xfffeffff, 0x1ff, {0x3, 0x6, 0x2, 0xffffffff, 0x5047, 0x2, 0x7, 0x8, 0x7f, 0x2000, 0x6, r4, r5, 0x3, 0x40}}, {0x0, 0xc}}}, &(0x7f0000004e40)={0x20, 0x0, 0x1000, {0x3, 0x4, 0x3, 0x7f}}, &(0x7f0000004e80)={0x130, 0x0, 0x9, {0x9, 0x7fff, 0x0, '\x00', {0x4000, 0x5, 0x0, 0x7ff, r4, r5, 0x2000, '\x00', 0x0, 0x6c, 0xe, 0x8000, {0x8, 0x7}, {0xd, 0x93ea}, {0x4, 0x6}, {0xc57f, 0xfffffc01}, 0x4, 0x2, 0x8000, 0x1000}}}}) r10 = accept$inet6(r1, &(0x7f0000005080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000050c0)=0x1c) sendmmsg$inet6(r10, &(0x7f0000007800)=[{{&(0x7f0000005100)={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffff3}, 0x1c, &(0x7f0000005300)=[{&(0x7f0000005140)="ac4d82fc2f032e6461d5965f73de9f809f3a1f840265d460fe87ba6dd7f891fd31ff95063f3b14c22cded3f5e6be2a89a9d3f23ddca1408be9174e1ba941bd565db7610a9e7ce0e586f1f4ccc79f8c75236aa5a06d60d181a239df67f950c04bf1fc95d184629898130e6e5a78f9488335ffa895a36200c90a870e4f1b4da489dc5d39f560822b65dc34278ebb19bcaf42c8f5cde08948a7c99a72f2f6b6c57908535537dfdcebbaa626ff629236e85e20264407ed7370d5a92d7cb14d26aed5e060f2ff0f4280ac8fbd5352af167f32d6579c9cf10454f45f8518636fd3da2ee6cbea4f70477f191c7b5cf7694505cbffb63ddfaf3c1e023a0691", 0xfb}, {&(0x7f0000005240)="fc4c194755bd9b16631047a3d9e8a0d2a1b6164e9b9b196192ad731c2563b760831ccfa11f6a8ef1d9c0c6d5fe128b4b077c9b0729949c548b92d13d7f9546494d3b8143ab30224891625d3c906026093220fab8c31d30d8ddb4a3a9fe328880cbe12031a91f1d924129f8acd155f4da69fde531fe840f116579169014d81d9df311e3d954b865428b28bd9ba5372dbb1653dcebe466089daddefa56754ddfcea4fb6d44", 0xa4}], 0x2, &(0x7f0000005340)=[@rthdr={{0x58, 0x29, 0x39, {0x5e, 0x8, 0x0, 0x1, 0x0, [@remote, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}, r0}}}, @hopopts={{0x20, 0x29, 0x36, {0x6c, 0x0, '\x00', [@pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffff95}}, @rthdr={{0x68, 0x29, 0x39, {0x432ac39ebf598303, 0xa, 0x1, 0x0, 0x0, [@empty, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @remote]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xddd8}}], 0x150}}, {{&(0x7f00000054c0)={0xa, 0x4e24, 0x10001, @remote, 0x3db04dee}, 0x1c, &(0x7f0000007740)=[{&(0x7f0000005500)}, {&(0x7f0000005540)="d095c6119e223b4e7c2a41a4115a1b693e19d238dab5a46334ba8685679f749be8d845bb6705de6e7db4f2205e3d3e893909721027006a1b3fb5ac85f1f33fb0b319a84e85d79bfd7b383dc023d39157e985fb9748279ce4d516305aa6cd74400bb74e78eb12730b3df682e2e88234cfef223dec6b43c86613e4dbf8a220bdf955888492c2f6c0820d3c547b303cf6281811442d3de2f807d8b99bfeb9ed38e0feb039ae53c54096a7a895fc0ecde964daf9fd37946590d077232f5a092a35a5e1633c22c9ea06b6c9011fb08ab3c9ee4ceb39f363d20a7eaa305a9fb1f96ca3af4522e5cf5d33daed0b67a10529646e421995a188305b5eb7ae3be7cb526affa45969160d47b4b600b35bef1cc7160f4ac7ff0c176a21f18b5bd97dc3149522fa9286763527ceebb8f1569ce878e71774d178185d1d1c2c0918cd53b20cb05baf9dc0d29444cf0c3ba9439e5eb1b915afc5a4f4550173a2260fd4924bb6a4cfd67ecc44e584a8e090063979ec082bb1d16cde58ab0c0c2cce5b265bc09c25ddcd21aabdb84c63fa1033016d39cb1969cbaa7d5efcbfdcf180924c65e1a952863df12ee2204ec5d15b911fdd89e2abd48636def4c4a7a22c7b0eb132a9edc83fda27d8cbdc90d3d43e10f3ce75caa056302464e7f04e637186e299c493a35d80ba80e098b56b022f7746e97ece0ae9cec10ff55e4907cbe60f67eecfae35dccfb060f14bef90b2b1ad876fbe52d7c1db45105cdb1470bb7ef6d4525511e4149fb6074272f76fd04b5eb89cfd40394629f6bab30ecaaf22da441876d3719a67adfefedb769c64382e75ed8f2b5e2c97a655f2d0d9a07f5a34f7e347f198f2a089aa75d64316914fefcc67b4e6ec671fe3e9a8b7a7f98ae7dc9a168ba01861a314891628455e897a89e1c17c8598ff265fe64032d2be2267a3afbcb8f360797ccc8374f8023697bc5729be526f3873003b0c38897709bd329be88cecc5abfe23b68bd5afc90638b2e022fef199b4ddbcb7611713440ea5f7e7b9190895ef32c4f5dfb5b627ddb0d070aeda5eca008acc7691ffad1d7aae72dae81245a36c07ebe87efabd4824899e738fa463fd9d9799b6c9ad9886b180602ad4dde279e8887ca23f813225c51b2684801585dc08dbd2608beffaa64501ee7b7bb8574ef6addcf56f18a0826bfd8910e6abb97bfdd608a9c7949f64a6f8c2efdcb0d45b7dc92b3cffbe09de2154355ae852d264b8ae01eb50a982eead3882db4aa6e477fa81891a75701fedcec876a0cdf0b37419007918e6012e85637ab684a1af152f91495ad5fca712c7178e2fa34df35b16a51a8e2b9228684e04a93ae267fe509d25dd43d7bad87d6efbb29ec3a12105d8ced7aff422692d5ad51365813b4959b136dabb8ad90cd5cc90719f071abb874260089c8fa05c13b2e6baa25102fa40407353110967c0e2ce6c4080cd6c08f0ce8517db711e5cef82f0c7b5198240d70dea65d673dda279741684549e3ac7ab574388dfadc6a4692373288cad6719d91980665b8ce06b87b011473065c165372559e07b9e056477ea8a37e49977d47b67b0d9a6b909b8e08ff459a970774c6e27323fa4704d5b991e4edcd22b2f3ba7e448cc4eb7f3931c795d7e83e193e7a325b141ab80d4297ee99cf0a3bab843c4250e80ad7716c177cbea9ba92c7131da735b29f0afc8cc80b24671c3268694e5f30945a339a0696b7fdf5499064a1ce43d0445c02c80727f76f9e38e39d92dc21e3a72eb380b4aaf8ce4509c4642b7cef2b15d39a2ca0bdf94eef8154fc4d3aee8bbdcd41f03995f4a4aa312cc0f556979b3748f1d42f037ec8c9edb685958ce9ccda8ce6747cd26f6baa2a7d81773da8beba61c388bf1e688190d6c0eb8425d9a8a087dbe637dcb47d444993a88c6e4daa34cdced8c8e89015f842219780709a32c45c8fa99c2ad9c7328aa733edbd118fe4a8f6f67a13f910f54837e4d59c657b0afe2e4f27f805f3975615240b517b0bf1b2dd9a6ed3a617b4cf9ff9aeb369ad28e371a9975abe9e72600896572bfc1fb172a750cb6251ec4ac8b86dd468d583c8765ef6ed1aaa1077bccab7858f99da20b31f3e3235719b76230e4ac2f94dfbe8e5f369c9f5f4d3f6f835c298ca2db1eb48ad23a3ad012079ad43ef557e6603c0b323549ddd3f6231d9b62421fe953024a0766476ce764f484867aca60f38f56f74c4af5bf5f339e2a627d8a5e319c737c9df0d07527fb091f24e32171251065a631f54461bd77f9b91586ca3f85bea326971e1b7630b20177959c35c807572eb45643ad6e5cf542df518e2269d68ebb08b7e75688459d6329422db415e8bb7dd5be6c12e016551664f3bd45f9b109e08f5da8885ba3f487c522c86c1ace98161ba80d442e9e4ca9acb1bb65d2118f7a4e2c3c7e105f3520cbc0785de1da709aa2d0342eec4519776e1c03d24c6ebf97e1f7b24b08eff97dd9a6fce6203c426af0c22487ff9cb4983b44c4cb505445206a0e345f1a89fb3ee2293ca0eeb2b05ccc2ca193b206baaeb0c6466fd0cb428a2cbafa02c9901968e64421f62713f399a583a8d0b3ebc7b98d8bd096af9df8d51723ccbc743559162d633bab4d7d6b0f5fb5a83b7f010c4ca666669bf064d66d9e48fb0123f6ac6f0e08d9597828409b77459bb77bc17b551343a5f19e41bbccbdd29834e55ae9941d47abe6f005a337896ffeb47c7eff3f0a0159a08ea1d3629a0d4a5ef96830638272ac00a3943b125e4dc02653a278382100ab8f50f572e5f209349bce30fdd0cbc529c26e763dd44348c5ff2bacd35ecb3ffe532ff9d9ba291237d56d7d546efaec6a5c98a31e6f79c5ea32cc67286fdf2ce7b1fed0fc5d97c96912c1601700923bdfb001eb27d35784a7aa0b0470223f6b8fae60afadc886413858b9d0ca673937a38cfc2908c9f01c28ccac6b97943491bc7af0c5b5feca9967cc27cda329e97238ff2a8f5c86344dc06c1bc275c899898dc84d299b1f9931efe20c9209a621e45bbe8151a0e1a0d491d8d41a19ca0a714bf943cc2a8ba3de8d079edfb5ffdb8d0e05e42e98b21808c7579418f913f69bd20a178d7920d57a4073dc78871f64ed23cbc69e067a939051ac1c7062e979093cec85613761a97c69375606a4efcebd357396a823263b36b7a3f8c372dc2259e89398fd31468b2a9f4e44c810fca0f8f3143cea76ae79962418ecc294b962b732630ea284adcc224e46d6c0efee92a898027f97e71805a50e98b00d0ac4b24da0b1c1916575009403b80941243be2b7c97089d04a5099ba6f249dd34838843d09effabcc1e9c1a36730bba6e9713b3178ddb73230a6c1ef216668dc66de6eae3d885470afc69469addaf5170157f1d62a7c7afe85674c3ac5a1e8c740b96d68542c89c4dbcd9c9ad65b68ee82ff0e2c68720c3665d00f4caf41f36599438bab24bda3dd03afd5e5c43c8ded2e267732461f87839cd9d57db6bf74e8c52d85ca89142f9c0ca5c28f9275a2c8df71f25262b514c6fcafa74533e4f8d15bb83373aed4b55274e1f9d46b9cfee1579024cd40d8993c35bbb589df1ccc44081bfefa9981b5104d11bbc3f41d811c26172b0eb8d5f749b4e2fa8d49a1e94ef910ef3d37e9f7f17cd9213941dcc8aeded58adc100f27ff66a9bec6932f65dc9ff07be00bf869628b7462d190dca2f2424324ee9aa293182c3aafacd63498e415c89d22e277aeb38fc7702b01e2c780ddf81a4d5e3f737b44074b3b13b8de663940c380858a2b28c60ca884937e72b32e7af110f45055928ecbe9c56783c70083b791cba65838c23530697618d60f968f82b5c3ab4e4cff6338fd9652dfff02b5c8b005fa934822a3360bc560c2527d8fe612e1890a65d07eac7a5467668fbb92e9e23d4ba6813f519f8e354dd2c4aed13745417993034d048de9c12bffb5f7f54d2bf7d85866125c0a35f5fdbc9554636c0922c65f20bc8ae0a10d6f118de306a02068fb3d362eab5e5f64c4a0a78d3ec8cd25b0ce911b18b710d8dd3aa03a8a002f726fa90c5945f2d35d14d7f875d940e86ef448e3e010040a87e97d9f36aba4fb5652a84517c6f85dfdf2acf587d3a7703624610e95cb956d7ec3b2f0d1458f46baff1fd1d9f1449c4ff41cf903a21bf88cf10e5b76785fc717a83051bbebb2b7fa00ef0d167b4f6f51f62229b071bee80aa85d8a6868f61f8adc81b27575fd31f34cffbefcc6f8a1aa7048f7005aa79eda817591ce89ef71d06748899337fc4e660e12cf419d1b4751b0d05512bba1154ab058dde70f60eb3d7640385df15ce269fe1d7107fdda73aefdb9ede41d6d8071165fdb02ec3287ebb571a55a82e9379236f5fc2d624d6f338312d96d55f8f2831d0f0333dd52a49348bc710345713b7cfa662106fd118b7b74db1bf7caafcd6f4b08e64114fb7bb379e11c0090d83b81efa95830f1ccc8ffa56a99c64ed7b3b32b49f1fafac085a79fdcfbee97c3e4a81f1c538b6eeccfae5b8c60cea6cf6c57c9261f3782b00b2f7e59f999f31dfc03855b70e6eadb3058f34b2394fe0fa1529d930839512bfc45858e073f790ee1ca8156101a30d821216da3028f6d8f4b9033bf7b02041234b4634fae30401d282465ad9d58da3273044fdafbb80d280d43b763a45d0d86e0aed477d1d8c94d6cbca3e81a121779d6041385d7c8e0a61f8eb84b1cd43ffa70c58efdbba2accd727a045f827f39f7f8e8ae08ef344195cbc09d9bc57adadca1d79a12ce6c5738363e2a9f4e54d36b87f1650c6a433a8bb2b510fdb42594e7d2b77a2ad21145f6a6a5c7b11b424b49f1786f0e367f6d99fb01e01066e21193d93810334ea0666f3faef062789c5959254a47476939b665e89577b1376b437ec5ace9fbc6ebced641db00d6806429560e1f0776ced3d9db8bf04c683b80ebf4621ad59382cf38fa66f3fae3abce32af29eef17a16dbe6e945062c90ebdcaf9d57e5d35e75471fb44a4ab004996d47a06128d15c52504b38a91932c02316b8a24a1c35a195e76ac5230d33c47a20ad7cd7d7d1fe284297b15715192d5182083703b385c6fb4dc6119a6b8e7748e3cde1a5e10d85fd164a4ba8f4f0962d0c6eaac86031389b273190fbd9d36cdd6296222d52a8ef25890d6c82e69707875eb5bea9fe329e6a5c9f1df5b1d28104b1000795d070680eef7ec567bd05a3b30775d335a6ea1469b969a42b31f7dc3dc82f81c65c4aeaa0a39958f25dbef49556effded6d07b94aafaaf2e1e3fc98b8347dcffa398705f3919a9c458ce4e617945fa509880123775eac155d7b9aa4992d4cb3f407856e59d0a6ecad923cecdda68fb856c8caec68ad9ecb9264227f1b5ac97e4cb371342d1c168b0b1371cf3c1c1d52d0df81cbf6466d483c2e74a2a70df2e8fa3d67583594f70b17c1a13cfecc4ca9c15c66d93da151787cd96b2a48815b2a587157875569dc11a2cd2b09794df501960830bcb53e33726f0ea18eee083ee2ae183a2df0a8503fd3b33d78caeae977d102ca79c8eed67a2925cfb1199fd78bc2bc840a664a02bfabaefdef5644ac70cd23cd2c0bbbbdf1406c1c8722edff6ebbe3aeda49aa4e3465c8cdbd5718a4d159606f1856f7dbcf971cfd0c4968c277ef527a72fc853b5da8f1e0b0bd4c1b508674645a16388841420d3d002963de501e799738a3e4f8a7163e8b0087abc026ec053ad30fbf3fe69a9ef4b5883700b5029d0f34261f128761091559eb5ed98e2a35af381ffcf258670ceaf13366732b72d8564f9fd022f9388997b02392025403cfd1", 0x1000}, {&(0x7f0000006540)="8e5dfe12a44d0b317b7598b3d67cb4248b967ea9695707f71fb30f2cd0ccce751d265b52d2c576c1ee562a6765830c0177dc8ca2cec5a5a7aa88ffe3b9d0145a6e734c0778b8987766c04ea200f2bc60a02e8f4253203422d6db3e48827f572c5c9d2b392546d223255252dba8cb", 0x6e}, {&(0x7f00000065c0)="66e530034a94", 0x6}, {&(0x7f0000006600)="ceec1b49017b3a4a0e3835aa1fed3ad223015094a164645eb62e23856afe276b7521f1e4ce9ca2300e7b72e562be54b120f7dc724a95feefff47b1f1079f3613f7098e00f10c8924d90e1bc9c8b62c868336efdb77a818314458928a0b7834ed220a565ae4d112f46a5da1ce8e692dd3c8b23aa2caba9838e44cf30185930c7cb374fccdae4ce57f74d32d30dd7046f75c883e2abace5a3cef3bfe82f39be9d23d63a03f2a52f01dfba12985b1d0766b668060fde8e401293acd210fe29414bf36ab335cc97a49", 0xc7}, {&(0x7f0000006700)="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", 0x1000}, {&(0x7f0000007700)="3d77776d10ccc4045d8ce8ee68e1daf491843bb438c72e18a0c57eaa2a5c6a1835c9e813c4", 0x25}], 0x7, &(0x7f00000077c0)=[@tclass={{0x14, 0x29, 0x43, 0xc}}], 0x18}}], 0x2, 0x40) close_range(r2, r2, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000007880)={0x20, 0x0, r3, {0x0, 0x4, 0xfffffff8, 0x1}}, 0x20) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007900), r2) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000007b80)={&(0x7f00000078c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000007b40)={&(0x7f0000007940)={0x1f8, r11, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x20000040}, 0x80000) connect$inet6(0xffffffffffffffff, &(0x7f0000007bc0)={0xa, 0x4e24, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80}, 0x1c) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r2, 0x4010e501, &(0x7f0000007c00)={r2}) splice(r10, &(0x7f0000007c40)=0x7, r10, &(0x7f0000007c80)=0x9, 0x9c2c, 0x6) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, &(0x7f0000007cc0)={0x6, 0x0, [{0x1, 0x0, 0x1, 0x4, 0xfffffffe, 0xfffffff8, 0xa}, {0x80000007, 0x4, 0x8, 0x4, 0xb1f, 0x5, 0x6}, {0x40000001, 0x1, 0x5, 0xfffffffc, 0x7, 0x2, 0x200}, {0xa, 0x8, 0x0, 0x6, 0x4, 0x7, 0x6}, {0x80000001, 0x3, 0x2, 0x8, 0x0, 0xc8, 0x7f}, {0xa, 0x8, 0x6, 0x0, 0x4, 0xc, 0x40}]}) fcntl$setflags(r1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_GET_TSC_KHZ_cpu(r2, 0xaea3) io_setup(0x7, &(0x7f0000007dc0)=0x0) r13 = eventfd2(0x1, 0x80000) io_cancel(r12, &(0x7f0000007f00)={0x0, 0x0, 0x0, 0x2, 0x40, r10, &(0x7f0000007e00)="d77749e51be902e88443c1d61382cd7251cfde571ab7240c162eb3b724663d09d84876ea698624db17f7716f90f756a178dda0bad11da65114cf7e29ef4cf729316f0ba40b89d763700946e1d083310561d6528ef5dcc531a4f7ef23bd02219487e7c68d0aada5669e23020399264a234f5d70a3e32ee4dc6608891d770f2c8d057a6b603d60fb539e6f6a8f8ca020c325f0ede6dc149731c1ef7edbe33624c7d4cb10680a43497255100592738c649a6f5199a9480ab3fb55c801acd84bb09f1b6b018558f74121a6021c558444a9e1711614fef2cb7106a8a1", 0xda, 0x3, 0x0, 0x1, r13}, &(0x7f0000007f40)) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000007f80)={'pimreg\x00', {0x2, 0x0, @multicast2}}) bind$vsock_stream(r2, &(0x7f0000007fc0)={0x28, 0x0, 0x2711, @local}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000008100)={&(0x7f0000008000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000080c0)={&(0x7f0000008080)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x24004000) executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x7, 0x0, 0x60}}, 0x14}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79}) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) setpgid(0x0, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4001) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000005c0)={'\x00', 0x6f40, 0x2, 0x3, 0x9, 0x3, 0x0}) waitid(0x2, r6, &(0x7f0000000640), 0x4, &(0x7f00000008c0)) modify_ldt$write(0x1, &(0x7f0000000000)={0x4, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1}, 0x10) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r7 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x807}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)=""/240, 0xf0}], 0x2c}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r7, &(0x7f00000007c0)=""/249, 0xf9, 0x10020, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000b8010000000f01d90f300fc79d53bf0000c4e16dd3010f2202", 0x61}], 0x1, 0x4f, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x2, 0x2, 0x200000, 0x2000, &(0x7f0000dd6000/0x2000)=nil}) ioctl$KVM_RUN(r11, 0xae80, 0x0) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f00000001c0)={"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"}) executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000040)='./file1\x00', 0x80000308) rename(&(0x7f0000000200)='./file3\x00', &(0x7f0000000240)='./file1\x00') mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0xc201}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bridge_slave_1\x00', &(0x7f0000000040)=@ethtool_modinfo={0x42, 0x1, 0xc}}) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="080086dd0001140004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES8], 0xfdef) executing program 3: syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x9, &(0x7f0000000140)=0x0) getresgid(&(0x7f0000002e00), 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x4e}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, r1, &(0x7f00000001c0)='m', 0x1, 0x1}]) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x12, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001600010a0000000000000000df24b0022db01b54fab45a190a"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000340)=ANY=[], 0x1c}], 0x1}, 0x40080c1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r5, 0x4068aea3, &(0x7f0000000200)={0xbc, 0x0, 0x7}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) r7 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000003c0)=@urb_type_iso={0x0, {0x1, 0x1}, 0x0, 0xc0, 0x0, 0x0, 0x3, 0x60000, 0xb, 0x800, 0x8, 0x0, [{0x9, 0x5, 0x4da}, {0xffffa588, 0x3, 0x8}, {0xfffffffb, 0x0, 0x1e}, {0x8001, 0x8, 0x3}, {0xb, 0xfffffff9}, {0x6, 0x40, 0x25}, {0x8001, 0xffc, 0x6}, {0x86, 0x800, 0x6}, {0x2, 0x2, 0xc}, {0x32a5, 0x1, 0xa9d1}, {0xb98, 0x100, 0x2}]}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES64=r7], 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000054000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) r9 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$x86(r9, &(0x7f00000000c0)={0x0, &(0x7f0000000600)}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000f0000001c0007800c0004002e2d0000000000000c0003"], 0x30}, 0x1, 0x0, 0x0, 0x80001}, 0x0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000180)=0x1ff) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r4, 0xf518, 0x0) executing program 32: syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x9, &(0x7f0000000140)=0x0) getresgid(&(0x7f0000002e00), 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x4e}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, r1, &(0x7f00000001c0)='m', 0x1, 0x1}]) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x12, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001600010a0000000000000000df24b0022db01b54fab45a190a"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000340)=ANY=[], 0x1c}], 0x1}, 0x40080c1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r5, 0x4068aea3, &(0x7f0000000200)={0xbc, 0x0, 0x7}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) r7 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000003c0)=@urb_type_iso={0x0, {0x1, 0x1}, 0x0, 0xc0, 0x0, 0x0, 0x3, 0x60000, 0xb, 0x800, 0x8, 0x0, [{0x9, 0x5, 0x4da}, {0xffffa588, 0x3, 0x8}, {0xfffffffb, 0x0, 0x1e}, {0x8001, 0x8, 0x3}, {0xb, 0xfffffff9}, {0x6, 0x40, 0x25}, {0x8001, 0xffc, 0x6}, {0x86, 0x800, 0x6}, {0x2, 0x2, 0xc}, {0x32a5, 0x1, 0xa9d1}, {0xb98, 0x100, 0x2}]}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES64=r7], 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000054000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) r9 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$x86(r9, &(0x7f00000000c0)={0x0, &(0x7f0000000600)}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000f0000001c0007800c0004002e2d0000000000000c0003"], 0x30}, 0x1, 0x0, 0x0, 0x80001}, 0x0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000180)=0x1ff) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r4, 0xf518, 0x0) executing program 1: mount$bind(0x0, 0x0, 0x0, 0x2a05404, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae03, 0x2f) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000), &(0x7f0000000540), &(0x7f0000000140)) (async) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000180)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004e5000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004e5000/0x400000)=nil) ioctl$OCFS2_IOC_GROUP_ADD(r1, 0x40186f02, &(0x7f0000000040)={0x0, 0xff, 0x1ff, 0x7}) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) (async) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_ublk_setup_queues(r3, r8, &(0x7f0000000200)={0x0, 0x1467, 0x10700, 0x2, 0xb2}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10234, 0x402, 0x200031c, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x4000, 0x4, 0x2000008}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1022, 0x4, 0x10008001, 0x902c4, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfeda, 0x0, 0x2, 0x221}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r7, '\x00', {0x5, 0x487, 0x0, 0x0}}, 0x0) (async) syz_ublk_setup_queues(r3, r8, &(0x7f0000000200)={0x0, 0x1467, 0x10700, 0x2, 0xb2}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10234, 0x402, 0x200031c, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x4000, 0x4, 0x2000008}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1022, 0x4, 0x10008001, 0x902c4, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfeda, 0x0, 0x2, 0x221}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r7, '\x00', {0x5, 0x487, 0x0, 0x0}}, 0x0) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x10, 0x700, 0x101, 0x5, {{0xa, 0x4, 0x1, 0x21, 0x28, 0x64, 0x0, 0xfc, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp_addr={0x44, 0xc, 0xa1, 0x1, 0x8, [{@broadcast}]}, @timestamp={0x44, 0x8, 0x98, 0x0, 0x9, [0xb5c]}]}}}}}) sendto$packet(r2, &(0x7f0000000040)="2cdb986fccc04fbcd59533cc4d846bd50f444c752f5db756d962f748600e6aeda3b11c45bb725c3630540b4445116866be1ddb11e3dac749fabdc136caab322a5cef728234f52b6463d382b3", 0x4c, 0x240000d5, &(0x7f0000000200)={0x11, 0x1a, r3, 0x1, 0x3f, 0x6, @remote}, 0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pidfd_send_signal(r1, 0x25, 0x0, 0x0) (async) pidfd_send_signal(r1, 0x25, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f0000000880)={0x20, 0x5, 0x3, "703cc7"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000180)={0x20, 0xc, 0x2, "08ba"}, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: r0 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000240)=@ethtool_ringparam={0x4cb8d6d46cf08447, 0x7, 0x7, 0x10000, 0x3, 0x1, 0x18, 0xffff62d8, 0x2}}) syz_io_uring_setup(0x42f0a, &(0x7f0000000080)={0x0, 0x8552, 0x100, 0x3, 0x230}, 0x0, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x2000000, 0x7ffffffffc, 0x10000) executing program 1: r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xa) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNSETVNETHDRSZ(r1, 0x800454e0, 0x0) executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80101, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x110e22fff6) close(r1) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)=')\x00', 0x2}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="020100020a00000000000000000002000300050000000000020000000100000000000000000000010200100000000000ffffffff00000000030006006c00000002"], 0x50}}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) fcntl$dupfd(r4, 0x406, r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000300)={0x7, 0x0, [{0x40000022, 0x0, 0xffffffffffffff7c}, {0x635, 0x0, 0x5}, {0x88b, 0x0, 0x7}, {0x2e0, 0x0, 0x101}, {0xa4f, 0x0, 0xbe6}, {0x312, 0x0, 0x8}, {0xac7, 0x0, 0x7}]}) socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r9, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000200)={0x28, 0x0, 0x2710}, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 0: ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='-\x00', 0x0, &(0x7f0000000040)={@align=0x7f, {0x4290, 0x8000, 0x1d38, 0x6}}, 0x5, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x7}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000140)={0x2, 0x1}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0x8) clock_settime(0x0, &(0x7f00000001c0)={0x0, 0x3938700}) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000200), &(0x7f0000000240)=0x8) clock_settime(0x2, &(0x7f0000000280)) clock_adjtime(0x5, &(0x7f00000002c0)={0x9, 0xfffffffffffffffe, 0x0, 0x4, 0xc8, 0x7f, 0xa, 0x2, 0x9788, 0x3, 0x4, 0x0, 0x3, 0x8, 0x65, 0x0, 0x800000000000000, 0x80, 0x2, 0x2, 0x9, 0x2, 0x3d, 0x96, 0x4, 0x5}) clock_adjtime(0x4, &(0x7f00000003c0)={0x9, 0x9, 0x9, 0x8, 0x47b, 0x1, 0x4, 0x8, 0x5ef, 0xe, 0x10, 0x2, 0x9, 0x2, 0x401, 0x2, 0x10000, 0x7, 0xc, 0x8a, 0x6, 0x2, 0xd, 0x10, 0x2, 0x5}) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xc4, 0x4, 0xa, 0x902, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f81720d}, @NFTA_HOOK_DEV={0x14, 0x3, 'xfrm0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'nicvf0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x54e5dd68}]}, @NFTA_CHAIN_HOOK={0x64, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bond\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6_vti0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'tunl0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x61a0cba7}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24000811}, 0x4) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000680), 0x204000, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) fchdir(r0) clock_adjtime(0x1, &(0x7f00000006c0)={0x3, 0x1, 0x9, 0x8fd, 0xd, 0x8, 0xa66, 0x51958a, 0x0, 0x4, 0xd41a, 0x73befb72, 0x1e19, 0x2, 0xfffffffffffff6cf, 0x0, 0x100000000, 0x400, 0x7fffffffffffffff, 0x63b0, 0xa77, 0x800, 0x80, 0x68c, 0xff, 0x200}) fsetxattr(r1, &(0x7f00000007c0)=@known='user.incfs.size\x00', &(0x7f0000000800)='nicvf0\x00', 0x7, 0x0) futex(&(0x7f0000000840)=0x1, 0x8, 0x0, &(0x7f0000000880)={0x0, 0x3938700}, &(0x7f00000008c0), 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000900), 0x80000, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000009c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xffff, 0x10}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xad}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x880) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r1) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0xa8004221}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xe0, r4, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x66}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_DATA={0x2b, 0xc5, "1b8b93d0e70de062b70dab7385082c022ef5cb1c66dfcc3ce5994c1fc65c7408dcc6fd88ee1875"}, @NL80211_ATTR_VENDOR_DATA={0x82, 0xc5, "4559b40686565553737bc990206beb6a891816b41df2ff1c5a1dd2418de35889a4516b885c843d9057fd3ba607a37b200ef2b527bf21a826a2bd1afc8a752f38643285ba57dae4a1ac91e5e10cc945130a4147139a7e7dc95e55cc70c2e9d637d33160ead89854edb77304cf62b19b2522a2c10e607718515e0d2b872586"}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4004}, 0x40) clock_settime(0x2, &(0x7f0000000cc0)={0x0, 0x989680}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000002580)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002540)={&(0x7f0000000d40)={0x17b0, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x401, 0x6}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "56181686d48de02c"}, @NL80211_ATTR_FILS_ERP_RRK={0xac, 0xfc, "14c700f620695a607f5f6c5719072624838ae7c586b8c24592bf190c800e70d1786fab39caa365f9df940f43ac204bdd81224fc2a2602195d68b540a74560761a75a9948d5d0474cfadf7124260a35f0e10d565bc35b613e65974215160733de9f3f6519d219e9c0e51031e1d67f6f980836a9610b388b8081fd1708be7566c6824ccd11d42844bd038e1f24ddb514b83a695cce21fc1015b462431330c28882a50a8d7ee1142d46"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "f59064f3c72bc0febe30481ac5"}], @NL80211_ATTR_IE={0x15d, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb4, 0x8}}, @chsw_timing={0x68, 0x4, {0x4, 0x60f}}, @measure_req={0x26, 0xdb, {0x5d, 0x5, 0x2, "29585fdad305b3017d66817dea488618aacf0968fc66716ce741dd3f9317a4f14a9ace9d450a586089015e0056175158f3e833497f1efdae8017e651b24c2b6e0928e4bb0014bb7dec5bd344914cf18e8cc427e9bdecb566be99356c2c63b3d52d63c64b03c5126860be3e600ca38110a76acb649f225ec753afb85c93b7a47f1d85becdd9a03f153983adaa66a0da8372bfc177c0557d7f9d5734da0003491f0cf11e7c5c84c9fb94e51d6083bcb7335a774f8348bc31beda05012e2d4cfeb2de6ec0039c6b082bed45617964ee3f3aa46f340f3f5a7d3b"}}, @mic={0x8c, 0x18, {0xd02, "1791d1ef1f27", @long="f5b2d1597d9b6ebae3ae8c6711340e4f"}}, @peer_mgmt={0x75, 0x4, {0x1, 0x5, @void, @void, @void}}, @random_vendor={0xdd, 0x3f, "d2d23217e61485049485dc869ce24890f09dd672e5a748b347a400f9196eb5be59b93ec8469d5d3f98a3f499fff592c2005d45c90b5fd0eda7b6c7b8449533"}, @erp={0x2a, 0x1}, @ssid={0x0, 0x1, @random="d6"}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x8}}]}, @NL80211_ATTR_IE={0x82, 0x2a, [@ibss={0x6, 0x2, 0xce}, @random_vendor={0xdd, 0x73, "a3b955c7efc3a87ea86db80c2895739dc58ab63aabe48721c900f01b08620beb3d17f741daec5c50195dce1ce0e8fcf675e4067a6c9ac0dc7a530266e6f77486d59934a46fbfd5955f0f440433f946505e0e9f7a79ac836f46f19f98d3bd90f5831bd61fea74a8b1046e5fd6924a651079b0aa"}, @ssid={0x0, 0x3, @random="d8d8e6"}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x33, 0xfc, "b2becd1f0ef6a7c3064334b482a9bf82a80db33a3a011d773ce84c7418ecefbd546675013509ebbba27c33f91df264"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "ab17b05ed647b3fe6cee0d"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "b4d1cbd6c6"}, @NL80211_ATTR_FILS_ERP_REALM={0x3e, 0xfa, "ffc4ce7433b82e5dd8891af32ab670a124933635c7b1e213f9d3383b10125076ed506c2ff9c1c219e7d3aec1fa1e1f0e4ebbe9a20914f9ee9637"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "11de66ab1918cc1784452f"}], @NL80211_ATTR_IE={0x227, 0x2a, [@random_vendor={0xdd, 0x76, "4dafbf068b09c3d5c51a7a2c728a9d0a798381c2806934a67d3ac1173f7ad287dd66e9419492c7b7b100f389d029452ca487efb17aabd55e22c335de424a4bf3cec520bb42d3f2dcdabb567dd39f49cfd93b8089a0b5e8e5b95734bb77e28049787bf4fa9441e343aaca4f9e0e2d1e24a99459296654"}, @random_vendor={0xdd, 0x7e, "c896e8c7692eab4a38c4027129c604b6cbe0a1015d9b9112fc48b700df7dfe287a3c28e9c65aea8390ed2ec883718292b39bcc9bfcb46d52a83dbc6d0bc9ec66c933183283328d726c251f267833c35a643b2389c8f7c80e28dc04320929b7c9172e32e6a0a387825d6c84b8539ca9dc6bdb305a5ee0bd46ce67110dfc8a"}, @perr={0x84, 0x69, {0x2, 0x7, [{{}, @device_b, 0x8, @void, 0x10}, {{0x0, 0x1}, @device_a, 0x8, @value=@broadcast, 0x1e}, {{}, @device_a, 0xffffffff, @void, 0x31}, {{}, @device_a, 0x7, @void, 0x1b}, {{}, @broadcast, 0xfff, @void, 0x22}, {{0x0, 0x1}, @device_a, 0x5, @value=@device_b, 0xc}, {{}, @device_b, 0x7fff, @void, 0x6}]}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @supported_rates={0x1, 0x2, [{0x1e, 0x1}, {0x1b}]}, @random_vendor={0xdd, 0x8a, "63631501d0934b5c4bae012af7362f4fb2c292735f03f7a1062be67bf0b4d79fa0043535aabf1bd9e785120fe4cc9a385c9a440f456a74fb0845cf68f1b4eb6333e064defe50015dca116bf1a76173be0c248f54d713b1891c942a27b2be52ea46f3c8bd1a4e6c4e79d20e17a669907b6653b997f8878b9313e82856c77363ade63e663090c890f1559b"}, @rann={0x7e, 0x15, {{0x1, 0x28}, 0x7, 0xb8, @broadcast, 0x7, 0x1, 0x6}}, @chsw_timing={0x68, 0x4, {0x1, 0x8c06}}, @cf={0x4, 0x6, {0x9, 0x0, 0x1, 0x1}}, @cf={0x4, 0x6, {0x3, 0x6, 0x0, 0xfff7}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "a8dc8128cd35c822241d01"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "1c2edf3a6eae6517c2aa4d64508bf7db"}, @NL80211_ATTR_FILS_ERP_REALM={0x44, 0xfa, "57dff0e46da1007feec1f0b098099750cb6d7fe9b90eca9f3688cb9f64560a549ee9f73bd5e8826618fd9ca1abd67c7143bf46aee5efdc66a05cc92b39e8d391"}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_RRK={0xa1, 0xfc, "abebe609e3c14824e323f73ac1a62207f65fa2587d3a7375e749f29dbb07b63d040b08a86e0efe23d11546077d5e07acd3767d4c49f9425b43e19156cfca42da8e589fa896b8d58862bc3c01ff784585ee3c3268a7158e1620504a7a30684f8e7f694275fc584aae08452bc98ece5425335481339f744c36e1241f831e397cc190f79677acd3f9690848677e3744c75daf442d8c18986d4e1a1ab3b93b"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "d757aabd93"}], @NL80211_ATTR_IE={0xfb, 0x2a, [@fast_bss_trans={0x37, 0x66, {0x1, 0x1, "6ef654646596d133b40cd90dd94aa816", "adbd869b97ea9e0ab0f08adddf380b55985a884bae90eec3fcabb190d407e671", "d39b85d4f6063ad9d4b81abcf6dd9fa91f79708ef282e550c3c47603d38c6640", [{0x4, 0x12, "7870bab0913399e0e9ca1fd0928a7c72f802"}]}}, @supported_rates={0x1, 0x2, [{0xc, 0x1}, {0x8}]}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x0, 0x2, @device_a, 0x2, @value=@broadcast, 0x10001, 0x5, @device_b, 0xdf5df201}}, @fast_bss_trans={0x37, 0x52, {0x4, 0x0, "412c3e2353bf96ed37d889a1ceea3ca2", "c317363f5ca64bfd50dd019d6240fc9e3f602e398971a05e24d742bf2e006d02", "680d88bd105d7f9bfd2fa49cad70a70bfb8286e7fd6cc6a91fb21dc7a709d8ce"}}, @mesh_id={0x72, 0x6}, @mesh_chsw={0x76, 0x6, {0x4, 0x0, 0xa, 0xc}}]}]}, 0x17b0}, 0x1, 0x0, 0x0, 0x80}, 0x81) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000025c0), r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002640)={0x7, &(0x7f0000002600)=[{0x3, 0x9, 0x2, 0x85}, {0x1ab6, 0x3, 0x3e, 0x6}, {0x7, 0x8, 0x9, 0x8000}, {0x8, 0x6, 0x76, 0x6}, {0xd8, 0x7, 0x0, 0x80000000}, {0xc309, 0x1, 0x9, 0x8}, {0x8000, 0x3, 0x30, 0x400}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002680)) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000002780)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x10, 0x3f5, 0x100, 0x70bd2a, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x44841}, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000027c0)) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000002840)={0x3, &(0x7f0000002800)=[{0x10, 0x9c, 0x6, 0xfffffffe}, {0xa, 0x8f, 0xd, 0x7}, {0xfffa, 0x4, 0x8, 0x678}]}, 0x10) executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) (async) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) socket$can_raw(0x1d, 0x3, 0x1) socket(0x1e, 0x4, 0x0) (async) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x24, r5, 0x201, 0x3ffffa, 0x800000, {{}, {}, {0x8, 0x11, 0x84f}}}, 0x24}, 0x1, 0x0, 0x0, 0x8011}, 0x20040010) syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902840003010000000904000000010100000a2401000000020102072405000000000c24020106020604800e0509090401000001020000090401010101020000090501090800000000072501010000000904020000010200000904020101010200000b2402016f0200018b7e8e072401000000000905820910000000000725"], 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fallocate(r7, 0x0, 0x6, 0x1) socket$packet(0x11, 0x3, 0x300) (async) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000100)=@req3={0x800, 0x0, 0x600000, 0x8, 0x4, 0x6, 0x7fff}, 0x1c) r9 = inotify_init() poll(&(0x7f0000000000)=[{r9, 0xd408}], 0x1, 0x1) executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x1000}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000280)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) (async) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) (async) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r3, 0x0, r0}, 0x10) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x12, r0, 0x180000000) executing program 0: openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x143a00, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x143a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0xe858000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff00010902"], 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000002b40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002b00)={&(0x7f0000000080)={0x48c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x160, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xf0, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x45, 0x6, "096e280c159b8c1bb778a038da05a383f3423528ab9ef9a1a42cf43fc8021520a8bb55aa79724c49377b742eb55760b90dc8ec9a054af417df954bb6116e1f2683"}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @local}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x2}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x91, 0xb, "9972a9ad6fb1f1bf1a06c2fe8f84788869bc93f323bfc9aa232cfca537cb33260e94db5b5dd7542df700d16a25c9a319f70cead8b54781711545315a8152d4e5e68cd3b6ac4369e24f4ac939f9a8a22285f66fa531e24a45f7d1b54139129fc75cb9caca0b08115165176466149c1fa65310cd5ed46d05249ef3ba881a783869d2edaab99d6bf7f7d157067e47"}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x68, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x59, 0x8, {0x5, 0x51, "cc8009d528d4613d083c6d157310011214a0e2ece5ae144db6af25155ec9834c7a1c0861251e3ac347157108bb5998f30f1ebe98372e3b577c378957f52e1af29715e218365a0819c35887492c"}}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x8001}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x310, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x304, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x2fe, 0xa, "696c11324ad54515ec82c168b4777d7cfdfd0f602291206ec5e873f993c77363ae2160aaee6cfbed168d7c4dee267f7b969289208036d24dcd8d4db1a8054f4f585188a39d4731bdf746d49d688885b9aa6f3946ed99bce7b36a04f00880c0eda61bbd6e643e8f42413c66e2b50370f1bf98a92fdec8d35131fef1327b0015384c01785797ca246b67e6cc70f058ccb2695b33ace3b200a0b50bd59fbf5a4f204ae2490e3b611ac5877dd9d2403532bdba3bf97434f8fdaa6be859d4ebf2f739d42f9903c81ffce37544df435aadd661eb4b31941aefd7ea8796fce79470021376fbb40108a26a3a9abf552645b9171dfdba812faa61c340405162a830e49a79c034d398a50982b56c14df06790bd4bed6e24d360666444546106a7ae2cedd42065b5425e2689da6fd9692a1c6fdc552bbc3f4ba4d3083c54f6d3387b077bbdb2f94686cfc10b59ab01e2939dd461c58342399486272c4802f7bbcb5a39c6b00a55f46f1648d8f18e3a5dbe1c03eb52e8ecf6166fe183ae572af4917d4969929083212b3fabd37f9dd3073559e97ce84591caf690a41eb637c6d88b8c8e9c1d882a5218c7061c69820dd31bc2d93ff939f4b9b8ff3fa1c9dfcb76436eb9edf2158e99b632ce6d7daa8320cc4c2fb6acd98fe564f553cd52bdf66ddd6c4ea8014c6f77528f2a1d5c8afec049678ce09f9aafc68cd6f030e0397be6b135c81db6575d119455c721ac645dfc7eb7f8cb22cca08736c612fbe700535dca4f9a04d9fdc3f77b417a6a2dba32d4fcf8c67aff05edd6e688126c7dccfbe6d6d7cc9d050ca92a7ee1be1b11c3d2811ffe6e9d3224d114bc005bd3170ff65e39eb9895685c44655e31da888b002f0e4712d201969fdb4bf688285fc5401569f6fa834a26350ee7a50d2fa055072eefd383d541230bb915293eacd0b05862ae21b5aede627d6e2bf4cb13cfee3a9510bf0404da26b48bcec0f252c497a0225cd3a3cee80a5af5cb9ffcd833d5dda639a193a5c8f9eba01197a2b003708d9996588c5d834b6cf1056ed1a79a73c11abd6ce2e909ce96ff9a459daf2418ad384"}]}]}]}, 0x48c}, 0x1, 0x0, 0x0, 0x24000014}, 0x6ccfe599834f2e7d) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0xa) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x3c8) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106b1f01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030001030005490c240206e0"], 0x0) syz_usb_connect$cdc_ncm(0x1, 0xaa, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x2, 0x1, 0x0, 0x0, 0x2, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "84ae1d"}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xfd3, 0x2a7c, 0x5}, {0x6, 0x24, 0x1a, 0x200, 0x8}, [@dmm={0x7, 0x24, 0x14, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0xf, 0x9, 0x7}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x9, 0xfd, 0xb, 0x7, 0x9}, @country_functional={0x12, 0x24, 0x7, 0x6, 0x1, [0xcc, 0x9, 0xe, 0xa, 0x9, 0x0]}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x2, 0x9, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x3, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x9c30325041c26784, 0x6, 0x3, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0x6}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0xc7, 0x7, 0xb6, 0x40, 0x2}, 0x54, &(0x7f0000000200)=ANY=[@ANYBLOB="050f5400024810028cc36da64157b5eb0c7cfa840cf2a26ed7b4149644bd7a56e157fc7a6c9da60b7921d4be8dc4210d4d6a6050bc14bd1466a14bd8700000000000000000000000000000000000000000000000f8aadcca15c3fc63244c54d5ee83efac409fd042027f55926431e0e6c026aecdfb93cf5734660606ea1ca5a18b528d3b9cc73aaabc2d38367fb3c0514473c22291ab8853"], 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x3c0a}}]}) executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000002b40)=0x9, 0x4) sendmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="f74406d3a34aa7be0000", @ANYRES16=r0], 0x10, 0x200400c4}, 0x34044810) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8010, r2, 0x0) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) listen(r5, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008094) close(0x4) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x18a) open(&(0x7f0000000180)='./file0\x00', 0x410083, 0x1c4) r7 = landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = socket$unix(0x1, 0x2, 0x0) connect$unix(r9, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 1: r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xb, 0xfe}}}}}]}}]}}, 0x0) (async) r1 = syz_usb_connect$midi(0x6, 0xba, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x1235, 0x800c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x1, 0x1, 0x7, 0x40, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x30, 0x80, [@ms_header={0x7, 0x24, 0x1, 0x6, 0x7}], [{{0x9, 0x5, 0xd, 0x1, 0x8, 0x9, 0x8, 0x2, {0x6, 0x25, 0x1, 0x2, "a3ce"}}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x7, 0x9, 0x5, {0x12, 0x25, 0x1, 0xe, "160d142bca5e25118c52d28f6849"}}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x7, 0x6, 0x9, {0xd, 0x25, 0x1, 0x9, "192999727fd366ce43"}}}, {{0x9, 0x5, 0x5, 0x3, 0x400, 0x7, 0x2, 0x0, {0x4}}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x9, 0x40, 0x2, {0x4}}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x2, 0x6, 0x6, {0x5, 0x25, 0x1, 0x1, "90"}}}, {{0x9, 0x5, 0x1, 0x0, 0x60, 0x3, 0x1, 0x9, {0x7, 0x25, 0x1, 0x3, "78cc76"}}}, {{0x9, 0x5, 0x8, 0x8, 0x8, 0x7f, 0x1, 0x7, {0xe, 0x25, 0x1, 0xa, "c18657fedca37409215c"}}}]}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0xc4, 0x1, 0x5, 0x20, 0x4a}, 0xf1, &(0x7f00000002c0)={0x5, 0xf, 0xf1, 0x1, [@generic={0xec, 0x10, 0xa, "df43add3ad3bf06a03476f2b2cb48b1084bd476427115b4fa8dce288fb7cf55a23e6df982de7b95baed6f29d4420708b33c02deadba80ed6999c6140a183ff5adcbbb1ebcfd0b06cb74d8bd0b161257f5e55adf607466a0eba5c0baeeea4ffb58afe84238ee48acf426a34d526fdc2b1ebbb33386c3699d5e26c8aebcaa404bbba14ec537061510ef32947c1aa14dae16fa68f247cfa6dbaa068d96c40fda36609dd3ed2b013b0b626a340180dd8f330a05de0ea35f8eacac7206b2152e1c6e63454dc7d8f60eb2c3a39e101c7185aa6d8103a052b0cf8dfced82b5ee23062712211e84e745958a43e"}]}, 0x3, [{0x47, &(0x7f00000003c0)=@string={0x47, 0x3, "916e249e9dbf00572d1a7523e35950c764af2a791302af4599501c58992b4b06ce43bc46b85f6098e21709f2c07275af8dcf45088f2df585948b7201d39371fa1e68290971"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x7c66}}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000280)={0xffffffffffffff9f, &(0x7f00000001c0)={0x40, 0xe, 0x60, {0x60, 0x9, "0300000044289fc1397dd2a187a37ef164212fc653aa9c277ea89a6c8a817091838929ce56c581fb9e5dbaade013309254fe9e47ddc68df0de84673a48d9aa5e5198e8b6583b055dff9f5635dbcdfaa13e8ab60a18baedbf29ef2c0a0b84"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) connect$vsock_stream(r4, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005e1000/0x400000)=nil) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x109200, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x200000e, 0x13, r0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x1}, &(0x7f00000001c0)=0x28) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x20) recvmmsg(r6, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001ec0)=""/145, 0x91}], 0x1}, 0xffff0000}], 0x1, 0x10120, 0x0) executing program 0: prctl$PR_SET_KEEPCAPS(0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r5, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xb}}], 0x18}, 0x400c804) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x8, 0x7, 0x6, 0x4, 0xff, 0x10, 0x3, 0x2, 0x2, 0x8, 0x9, 0x4, 0x6, 0xc, 0x4, 0x7}}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xe, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x5a, 0x9e, 0xa, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e27, @empty}, 0x10, 0x0, 0x64}}], 0x1, 0x20004840) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1, 0x6, 0x10000003, 0x0, 0x5, 0x4, 0x0, 0xa, 0x3c1b, 0x1, 0xfffff7dc, 0xd, 0xfffffffe, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x7ffffffc, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x6, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x1, 0x80000130, 0x8004, 0x5, 0xffffffd3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x3, 0x7fff, 0x9, 0x400, 0x401, 0x2, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x5, 0xfe000000, 0xfffe, 0x2, 0x4, 0x8, 0x3, 0x1, 0x9, 0x1, 0x3, 0x0, 0xbc45, 0x3, 0x42, 0x1], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x7, 0x8, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xc, 0xc, 0x5, 0x2, 0x3, 0x2000000b, 0x4, 0x6, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x8, 0x4, 0x2950bfb0, 0x7, 0xa2, 0x7, 0x1ff, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0xffffffff, 0x8, 0x0, 0xa, 0x40, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xfffffffc, 0x3, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x54, 0xfffffff7, 0x3, 0x101, 0x10000, 0x5, 0x7fff, 0xffff, 0x80, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xfffffffe, 0x80000000, 0x821, 0x4, 0x4, 0x800, 0xfffff000, 0x5, 0x403, 0x7e, 0x100, 0x9602, 0x7, 0xfffffbff, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x2, 0xfff]}, 0x45c) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000100)="240000001e005f1814fffffffffffff807000000b800000000000000060005000d000000", 0x24) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) executing program 1: ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x101, 0x80c, 0x0, 0x1c, 0x7, 0x2, 0x11, 0x7, 0xed, 0x9, 0x9, 0x4, 0xb}, {0x23, 0xcd59, 0xa, 0x97, 0xd, 0x6, 0x13, 0x7, 0xd9, 0x2, 0x44, 0x7d, 0x100003fffffffffd}, {0x7fffffff, 0x18, 0x3, 0xff, 0x2, 0x9, 0x10, 0xf8, 0x5, 0x8, 0x6, 0x9, 0xfffffffffffffffd}], 0x800000}) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x325) ftruncate(r0, 0x6000000) copy_file_range(r0, 0x0, r0, &(0x7f00000004c0)=0x100, 0x9, 0x0) socket$inet6(0xa, 0x3, 0x3) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x82, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r2 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x40306727, &(0x7f00000000c0)) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0xcc, 0x0, 0x1}) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000180)="e6724ee0d57ab216f76b365699b251d71939cf3226c080746430c572303e7a13a43039168f460633967e59dee29454d135993911a2d996936cb8d890", 0x3c) r2 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$usbmon(r2, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup(r1) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000a40)={@val={0xa, 0x88a8}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="cd1008a2dc58", @void, {@ipv6={0x86dd, @udp={0x7, 0x6, "dc70e5", 0x3e0, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@routing={0x2f, 0x8, 0x2, 0x8, 0x0, [@remote, @remote, @private1, @dev={0xfe, 0x80, '\x00', 0xb}]}, @fragment={0x43, 0x0, 0x5, 0x1, 0x0, 0x4, 0x64}, @srh={0x3b, 0xc, 0x4, 0x6, 0x1, 0x8, 0xfffc, [@remote, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote]}, @dstopts={0x2e, 0x4, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x8000}, @calipso={0x7, 0x18, {0x0, 0x4, 0xc4, 0x0, [0xc, 0x0]}}]}, @hopopts={0x2, 0x6, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0x53, 0x6, [0x7, 0xb]}}, @pad1, @pad1, @hao={0xc9, 0x10, @mcast1}]}, @hopopts={0x6, 0xf, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x36}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @ra, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x0, [0xf1b]}}, @jumbo={0xc2, 0x4, 0x6}, @calipso={0x7, 0x30, {0x1, 0xa, 0x90, 0x0, [0xf, 0x0, 0x1, 0x5, 0x9]}}]}, @dstopts={0x5c, 0x35, '\x00', [@pad1, @calipso={0x7, 0x28, {0x2, 0x8, 0x3, 0x402, [0x5, 0x2, 0x7, 0x2]}}, @hao={0xc9, 0x10, @local}, @generic={0x3, 0xef, "25710386f21aab0177f4a6f2984f7c18cf44fa4f42e3e16f918553fa571f11eb7bd1cb84d6a2349ad61d93ba8dd3c7fccdbdfce4fe812bbc228427975000dcfbc1fe34b63a964178d5092c403fd30bacbc8cdd14d0cc5bed9825985af409795ae3f7eab4db6b187467568ada2de35f3709a0b5e91964da750b515904004e51fc6884703ed96597aa7b915433cd232b8ac903fe1ea13b7e3b170709ecd021635354c4b6c88ff4c5a5f366b4d9d537f3135e8b4f83830bdef86403c0aac89e2e7c31ed6e509d9980671213179c085ffbd324418641edccd3be1d4a5eb1c575f8519e0293c25b3e73917f566179607f6f"}, @generic={0x30, 0x75, "2eab23e694a4eece866da96d41c9e7bdc4e5affc8a8aa3045482bf494b1d36a37e1f94d0dfaea36e14fff9042afe291b594bd85906629543087a09230c8cbede67ff485c4573f08e5ff96a8ac458b25729f87572b04017b31cab7457d5d68d9cd0bbf6b8ac346a265c711669e22e2a9b11811547d2"}, @pad1]}, @hopopts={0x89, 0xa, '\x00', [@hao={0xc9, 0x10, @private1}, @generic={0x9, 0x40, "57690c230002197cfb5ee825ce6eae610a434f184fad88d265cd68d92a66465b7b95235ef8842dd87f14f1021db4a314484a6d6a266c0d962ec5379cad709daa"}]}], {0x4e21, 0x4e21, 0x18, 0x0, @opaque="d537d0a103fdf9303746d7ee79354d3a"}}}}}}}, 0x41a) bind$bt_sco(r3, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r5 = gettid() sigaltstack(&(0x7f0000001040)={&(0x7f00000020c0)=""/4124, 0x0, 0x101c}, 0x0) rt_sigqueueinfo(r5, 0x21, &(0x7f00000002c0)={0x8000a, 0x4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x7fffffffffffffff, 0x1fd}) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f00000009c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x2b73, 0x1b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x8, 0x30, 0x4, {0x8, 0xb, 0x1, 0x1, 0x1, 0x3, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0xa, 0x9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x2, 0x4, 0x7, {0x8, 0x25, 0x1, 0x81, 0xf, 0xf2, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x80, 0x0, 0xb, {0x8, 0x25, 0x1, 0x81, 0x14, 0x7, 0x6}}}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0xc0c}}, {0xc4, &(0x7f0000000340)=@string={0xc4, 0x3, "fb4d32216d5570215e76c6f6aa758a2497e43644d8f2dcb695e672c22d2aa508e54a57bb52bb2dbf922969637717d2620204ec1e77d007e6ac0184431396d295cb3acc2c9b7e61d6b21b3a0fc520584cca338e690a73d17b7965759f54f8d874b47e9669a026324dcb1ad26a5febeb57d32777416bf7f5405e1c2d6c7e290263db90a47401de143df9939f6065af263713708f5822b8348ef1aa7da9f7c234f3a02d7e5302fe88bb77ffa6de89cc177b9fd4489809cb459fcf7a21b6124a12b678f7"}}]}) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) program crashed: WARNING in shmem_rmdir bisect: bisecting 25 programs bisect: split chunks (needed=false): <25> bisect: split chunk #0 of len 25 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 7, 2, 5, 30, 30, 34, 12, 9, 7, 30, 4, 30, 24, 18, 20] detailed listing: executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pidfd_send_signal(r1, 0x25, 0x0, 0x0) (async) pidfd_send_signal(r1, 0x25, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f0000000880)={0x20, 0x5, 0x3, "703cc7"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000180)={0x20, 0xc, 0x2, "08ba"}, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: r0 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000240)=@ethtool_ringparam={0x4cb8d6d46cf08447, 0x7, 0x7, 0x10000, 0x3, 0x1, 0x18, 0xffff62d8, 0x2}}) syz_io_uring_setup(0x42f0a, &(0x7f0000000080)={0x0, 0x8552, 0x100, 0x3, 0x230}, 0x0, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x2000000, 0x7ffffffffc, 0x10000) executing program 1: r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xa) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNSETVNETHDRSZ(r1, 0x800454e0, 0x0) executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80101, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x110e22fff6) close(r1) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)=')\x00', 0x2}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="020100020a00000000000000000002000300050000000000020000000100000000000000000000010200100000000000ffffffff00000000030006006c00000002"], 0x50}}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) fcntl$dupfd(r4, 0x406, r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000300)={0x7, 0x0, [{0x40000022, 0x0, 0xffffffffffffff7c}, {0x635, 0x0, 0x5}, {0x88b, 0x0, 0x7}, {0x2e0, 0x0, 0x101}, {0xa4f, 0x0, 0xbe6}, {0x312, 0x0, 0x8}, {0xac7, 0x0, 0x7}]}) socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r9, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000200)={0x28, 0x0, 0x2710}, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 0: ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='-\x00', 0x0, &(0x7f0000000040)={@align=0x7f, {0x4290, 0x8000, 0x1d38, 0x6}}, 0x5, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x7}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000140)={0x2, 0x1}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0x8) clock_settime(0x0, &(0x7f00000001c0)={0x0, 0x3938700}) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000200), &(0x7f0000000240)=0x8) clock_settime(0x2, &(0x7f0000000280)) clock_adjtime(0x5, &(0x7f00000002c0)={0x9, 0xfffffffffffffffe, 0x0, 0x4, 0xc8, 0x7f, 0xa, 0x2, 0x9788, 0x3, 0x4, 0x0, 0x3, 0x8, 0x65, 0x0, 0x800000000000000, 0x80, 0x2, 0x2, 0x9, 0x2, 0x3d, 0x96, 0x4, 0x5}) clock_adjtime(0x4, &(0x7f00000003c0)={0x9, 0x9, 0x9, 0x8, 0x47b, 0x1, 0x4, 0x8, 0x5ef, 0xe, 0x10, 0x2, 0x9, 0x2, 0x401, 0x2, 0x10000, 0x7, 0xc, 0x8a, 0x6, 0x2, 0xd, 0x10, 0x2, 0x5}) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xc4, 0x4, 0xa, 0x902, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f81720d}, @NFTA_HOOK_DEV={0x14, 0x3, 'xfrm0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'nicvf0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x54e5dd68}]}, @NFTA_CHAIN_HOOK={0x64, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bond\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6_vti0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'tunl0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x61a0cba7}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24000811}, 0x4) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000680), 0x204000, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) fchdir(r0) clock_adjtime(0x1, &(0x7f00000006c0)={0x3, 0x1, 0x9, 0x8fd, 0xd, 0x8, 0xa66, 0x51958a, 0x0, 0x4, 0xd41a, 0x73befb72, 0x1e19, 0x2, 0xfffffffffffff6cf, 0x0, 0x100000000, 0x400, 0x7fffffffffffffff, 0x63b0, 0xa77, 0x800, 0x80, 0x68c, 0xff, 0x200}) fsetxattr(r1, &(0x7f00000007c0)=@known='user.incfs.size\x00', &(0x7f0000000800)='nicvf0\x00', 0x7, 0x0) futex(&(0x7f0000000840)=0x1, 0x8, 0x0, &(0x7f0000000880)={0x0, 0x3938700}, &(0x7f00000008c0), 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000900), 0x80000, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000009c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xffff, 0x10}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xad}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x880) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r1) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0xa8004221}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xe0, r4, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x66}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_DATA={0x2b, 0xc5, "1b8b93d0e70de062b70dab7385082c022ef5cb1c66dfcc3ce5994c1fc65c7408dcc6fd88ee1875"}, @NL80211_ATTR_VENDOR_DATA={0x82, 0xc5, "4559b40686565553737bc990206beb6a891816b41df2ff1c5a1dd2418de35889a4516b885c843d9057fd3ba607a37b200ef2b527bf21a826a2bd1afc8a752f38643285ba57dae4a1ac91e5e10cc945130a4147139a7e7dc95e55cc70c2e9d637d33160ead89854edb77304cf62b19b2522a2c10e607718515e0d2b872586"}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4004}, 0x40) clock_settime(0x2, &(0x7f0000000cc0)={0x0, 0x989680}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000002580)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002540)={&(0x7f0000000d40)={0x17b0, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x401, 0x6}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "56181686d48de02c"}, @NL80211_ATTR_FILS_ERP_RRK={0xac, 0xfc, "14c700f620695a607f5f6c5719072624838ae7c586b8c24592bf190c800e70d1786fab39caa365f9df940f43ac204bdd81224fc2a2602195d68b540a74560761a75a9948d5d0474cfadf7124260a35f0e10d565bc35b613e65974215160733de9f3f6519d219e9c0e51031e1d67f6f980836a9610b388b8081fd1708be7566c6824ccd11d42844bd038e1f24ddb514b83a695cce21fc1015b462431330c28882a50a8d7ee1142d46"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "f59064f3c72bc0febe30481ac5"}], @NL80211_ATTR_IE={0x15d, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb4, 0x8}}, @chsw_timing={0x68, 0x4, {0x4, 0x60f}}, @measure_req={0x26, 0xdb, {0x5d, 0x5, 0x2, "29585fdad305b3017d66817dea488618aacf0968fc66716ce741dd3f9317a4f14a9ace9d450a586089015e0056175158f3e833497f1efdae8017e651b24c2b6e0928e4bb0014bb7dec5bd344914cf18e8cc427e9bdecb566be99356c2c63b3d52d63c64b03c5126860be3e600ca38110a76acb649f225ec753afb85c93b7a47f1d85becdd9a03f153983adaa66a0da8372bfc177c0557d7f9d5734da0003491f0cf11e7c5c84c9fb94e51d6083bcb7335a774f8348bc31beda05012e2d4cfeb2de6ec0039c6b082bed45617964ee3f3aa46f340f3f5a7d3b"}}, @mic={0x8c, 0x18, {0xd02, "1791d1ef1f27", @long="f5b2d1597d9b6ebae3ae8c6711340e4f"}}, @peer_mgmt={0x75, 0x4, {0x1, 0x5, @void, @void, @void}}, @random_vendor={0xdd, 0x3f, "d2d23217e61485049485dc869ce24890f09dd672e5a748b347a400f9196eb5be59b93ec8469d5d3f98a3f499fff592c2005d45c90b5fd0eda7b6c7b8449533"}, @erp={0x2a, 0x1}, @ssid={0x0, 0x1, @random="d6"}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x8}}]}, @NL80211_ATTR_IE={0x82, 0x2a, [@ibss={0x6, 0x2, 0xce}, @random_vendor={0xdd, 0x73, "a3b955c7efc3a87ea86db80c2895739dc58ab63aabe48721c900f01b08620beb3d17f741daec5c50195dce1ce0e8fcf675e4067a6c9ac0dc7a530266e6f77486d59934a46fbfd5955f0f440433f946505e0e9f7a79ac836f46f19f98d3bd90f5831bd61fea74a8b1046e5fd6924a651079b0aa"}, @ssid={0x0, 0x3, @random="d8d8e6"}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x33, 0xfc, "b2becd1f0ef6a7c3064334b482a9bf82a80db33a3a011d773ce84c7418ecefbd546675013509ebbba27c33f91df264"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "ab17b05ed647b3fe6cee0d"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "b4d1cbd6c6"}, @NL80211_ATTR_FILS_ERP_REALM={0x3e, 0xfa, "ffc4ce7433b82e5dd8891af32ab670a124933635c7b1e213f9d3383b10125076ed506c2ff9c1c219e7d3aec1fa1e1f0e4ebbe9a20914f9ee9637"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "11de66ab1918cc1784452f"}], @NL80211_ATTR_IE={0x227, 0x2a, [@random_vendor={0xdd, 0x76, "4dafbf068b09c3d5c51a7a2c728a9d0a798381c2806934a67d3ac1173f7ad287dd66e9419492c7b7b100f389d029452ca487efb17aabd55e22c335de424a4bf3cec520bb42d3f2dcdabb567dd39f49cfd93b8089a0b5e8e5b95734bb77e28049787bf4fa9441e343aaca4f9e0e2d1e24a99459296654"}, @random_vendor={0xdd, 0x7e, "c896e8c7692eab4a38c4027129c604b6cbe0a1015d9b9112fc48b700df7dfe287a3c28e9c65aea8390ed2ec883718292b39bcc9bfcb46d52a83dbc6d0bc9ec66c933183283328d726c251f267833c35a643b2389c8f7c80e28dc04320929b7c9172e32e6a0a387825d6c84b8539ca9dc6bdb305a5ee0bd46ce67110dfc8a"}, @perr={0x84, 0x69, {0x2, 0x7, [{{}, @device_b, 0x8, @void, 0x10}, {{0x0, 0x1}, @device_a, 0x8, @value=@broadcast, 0x1e}, {{}, @device_a, 0xffffffff, @void, 0x31}, {{}, @device_a, 0x7, @void, 0x1b}, {{}, @broadcast, 0xfff, @void, 0x22}, {{0x0, 0x1}, @device_a, 0x5, @value=@device_b, 0xc}, {{}, @device_b, 0x7fff, @void, 0x6}]}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @supported_rates={0x1, 0x2, [{0x1e, 0x1}, {0x1b}]}, @random_vendor={0xdd, 0x8a, "63631501d0934b5c4bae012af7362f4fb2c292735f03f7a1062be67bf0b4d79fa0043535aabf1bd9e785120fe4cc9a385c9a440f456a74fb0845cf68f1b4eb6333e064defe50015dca116bf1a76173be0c248f54d713b1891c942a27b2be52ea46f3c8bd1a4e6c4e79d20e17a669907b6653b997f8878b9313e82856c77363ade63e663090c890f1559b"}, @rann={0x7e, 0x15, {{0x1, 0x28}, 0x7, 0xb8, @broadcast, 0x7, 0x1, 0x6}}, @chsw_timing={0x68, 0x4, {0x1, 0x8c06}}, @cf={0x4, 0x6, {0x9, 0x0, 0x1, 0x1}}, @cf={0x4, 0x6, {0x3, 0x6, 0x0, 0xfff7}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "a8dc8128cd35c822241d01"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "1c2edf3a6eae6517c2aa4d64508bf7db"}, @NL80211_ATTR_FILS_ERP_REALM={0x44, 0xfa, "57dff0e46da1007feec1f0b098099750cb6d7fe9b90eca9f3688cb9f64560a549ee9f73bd5e8826618fd9ca1abd67c7143bf46aee5efdc66a05cc92b39e8d391"}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "f42759d9bf8c0845655ac6d80136f19e241c1e5e264bf0a7c0d97499f9864a6ac4f5b68add818fc096b370171a31807e3c7adb182406d3184aee5dda53a51cf5991fb395a736a3dc7d6568680e69757fcf895594a2e7d6da9db31475fb85c834beab5aacc9a2c87ba22baa521475cf66893c2bf42138021256b0d5430a7dc8f34f2e018d6cada6658216ad96d2f4268b9d311924aef195a051a5d5cc5bb66ede1d8a43501fbc90c866992e1e77cd6db2e91baf8d638a9490fca625649b7d0d9eb8689c2ca62b7c79b9feba270c666b200ca064ecdf62d2f0ad73fa52e273666fd964d7136332a167bfe582e6083f848661e1e3fc0dfed5d9b2f47f0527f1a63d2b40c9b65d99be84451e3f4d22d0259179a6eaeb4c1f8f00e66c85ad54f2eac83ec4205394d00a0c81a75f86a8dd53e4a22090fb9922ec03bc9ff93f800ce56ce2705a40f62357d47514ffc9cbfa0790b3a54342e97e4955659afa9390c028c86a157c1d52bd3643281786228ca1ef58af24ff1443c12a530fb514d2a8dbe832136f7a9125b2009303ab4b26c3563a7dcbb57ad8508ae43d66d9161a82a27c80e7e9ed6abc97eeffc1a324a774b63359b568230f701a43a7849ef744dba65ebce3dca5e0c19e727dc27f5e0498c6b6abb225c02634f8eec9926b82c7bff18ff4c7ff1073302a797c3802c94fb0b68aa65b8141583c3067698ae40283200362898d5814002aed394388170b41af7455f6c8231b104ba8e2cdc49cfd2f31907226106867da9ce5292651b1d905970d00b568754debf3f82614601f9156c27dc6d64abb1e2c9c45f86974005e40ed66fbc1d282cc246b2f0b2a66c10dd9b82e24fbb80d7e03cef2c3afaf2c72fcca815f4ce48874a3684365f71c9db07fa9d60bb34e66aedc95d281c1077fcd2e04295925adef889f98f8ca4b8161869fcce04cd39d7e4a210ef36661a3ce422584f7214c093c7e905293718bb3d618202d3cebf2051015ecb23896e5d32ef00bb9ab0ce7f90ed1c619c4b1c82e97c3688260b906d9b3b22cd4da5d71df400255bbe57c2c26e024be65c6caca210dcf24051e94a8309ed26015ccf9ce03b8027a508eb54ba43de6788abe7d35eaad7ca7bfbc130e5e644fc13bc8229ccb7fc30a969db17fc67555473c6ed5d69a4b04bc78fd7dd91a3f89b01d9560e6fae2059a96470428b72db82b2b721faa5df305853194a327019c382abd2ab45049a50e30aaddc09ea1a2f9cb235df3aa1b35dac7eeb44a9e1104dc0873734fe69f7c24595dfcbaaed4de6148ff81d63e6001bf4d3ae9953b95072f7ec2efcd3f5f802a529ad3710078e1c134a05749ccfb9d62d2e5acc08b618659d04d88d69aa339f9a4c21d949b17042459aedc8ca69be70198e7a2dd205674a0f6781957b5747abe86bfbcde85bb538b02b7b818c44af65b84f738656316134be15554c68c6e46b543db39784a1054ae427b58737d6cfafcde20ae4b98284a1ea816fd3c3fb548b1146d7668c5331e8b84ba2991b4084e4682fb2591787fd6e98671b5eb0ed9639bb47202a3d95b5b98c5e185ffeacafc66269df8d09181cb2de31864b6a7c26835b5fa878a6c4a1dac84d2a0f779ed47d540c01d04d106097c95b04d84455cf53a71d5ef6ab2135ef0d0019a88b00631d3e7d724d3056af20bfe8ef8ea4a3ebe41adb436ab67be622b9baece1a34016d5ae380becf290df7e490276406f9f86e992c5445f9a414d629c214b280f33854b9a27acdd1e301c6e1ba2c309d9425681505c141c88b0fde1338ef4265d817fa198a670c8f7b0406759af61d19bc938c1bdf7c19846fa094a39e74c7e07a628666e37fc62c7d5a2641607b113e46ac5c06b6892d9644a7f910376cc8c56ad778b13475277d4178e64b5f5e179a71f40aa302687752b759a3954f4c3c800d1ba888a1d307aad4772ebbad92da5402a3cd77b6b4534475cf6743b8a2969aa0543f10f5720d95e9d09adee74cf53dc2f8b0516bdd729cca465b50b90486231e9161b1b36e53c984f29c0f0e65618182920ccb692edb4c8a33221e3670ada2483e44447241575dad03f78ce9c5631f63d90f9d04c1405d71cb06c308ee1a0f222fd23688e19ee30aa9f1de9d3663991f6f5cad179f357ca5c1630fe13b026efd95e5b650ef577d5d923f5dd628bd82c459414cb45ed90c085cc63a15f13fe9145af55f018c3ca5e6f5f965f1274a6183b35b2a2800146143817f7fef3d07b7da2eadf5ed59674decb847f08951c47d39e495ff71f054ac389504e8021877dce5684f8e9b3bcedb68cba584eba313c8ee53d1ec64da4b52bb28267037060658c0fda0ac9765ffeb6cbfed0f5ab5ded64fe906547d6cdad2c9085c1e9811dea945113f334c916feb1ba130e1c26eef94fc822c1624b6122c24e08b62f094644c4b7ff8326962ff6dcd566105379b265565b174f93ef9ccc3a7caaf7b5f8abddc0cabaf4f5d21c511637a489b7355735f6b1769440b774b51f6699ac1e038be149f504343853b723be698cc619dd9264dadbcd7926a879bbe3bbfbeda0ca542f18331b324cd722d02190041566279f839e283f421b34685e1babc1fbc79a3a73d99d76dfea5f6d1f7630a6339ab1fdb9cdd4244b3b72e21f25ccbcc80dfccb69c9433fd20677d80cfb03f0a9ede2031336f72832f0bb5c03d7bfd6f43f9b2838d2b74bab46c2a06c8ade16986ec49454d041d035635c4fb449366d0247c237b48adc89a3ac9a4e91c4aaf53bc7db0ac509e50b4429bc4e42744bf367f2efeeffcb0a50acde92c61e6a3539c38f4cbe867ef19f6afe7bca7743c359a19a7cd35c7a9a4c1696c4b8fb69441a997c854c87fd5bcfc1a2dcfbd8f58bfcb01a0fa7992f1cdc91cb25f40d0439278a82742b941a6ab1cad726088fd6e08b603d24b7c6f8bf1004ad4c1e449c1334ca8a06fc4a6cb93ceb8e50dd09ece20c34a457d881b68b5b97c025129908bab9bbcf2dd3cc7adf685849edb7377b9c6194475ad8ed832c3f994a30eac7f859b29a3a89c4f7bf6d680b17f4089892c777a1f8f1e0a468d64d185bc475aa6337562606a44140641869fe3b5818c4a4a2c6159c4f4011f7bb212f1b09c11e8fcda565a7640a1b42c43c70c2b1e5122b14f9855d4f48c92b8eede507d69a04df3ea44212241c6dd5082926ea8347e1c0fcac3d33ffb23a8648fc58e15e7a814342a45f5cf86a484b0b0f93ed6461e59bef16042a9a7fe0d9115f048ac9dbad93188a08d708f8f76141de3edd3c58b65b1cef5693c8b8e04c19fde850f71ce5554cf0eee9ef9a0e12000eb3f44a0858c1371aeab335d4cd0517ae22cdaab1f331916bc379fb9ddf432d2f9c5f34ea320f9256d7bf5b1f1dc17f0390abf111659108628b61d9cfa3b950956631c3fcce73f44763548eb8ed3adaafb4d24ad43a3896ecddc998858ecc9818584cb422914635332dc031282aedeae8545da8779f054ae660c789f90df62bf66ca20d28e6eb4c95a36262cdd36e82a642f89abed0261bbed77750627fb043c1dea053da71c4a622e3dd4a6cef1520b37fe99aefd2bfe7851b01c844827c668e6fb52112b3b7a044fc2194ace514d4bebc3e3bf62690911adddf355f79c5d46578b0c90c4ff986807ce8b5f8c3f1b1feacc1934ac2fb84d07ea3424f37e1eb74fc541b7e50b8befe9b6bbd3c04a86e16a578ad45719cebd0877fffbdd218d4d9510fc983b78f2e4175c31184bcec1fbefac24341ee6b372ce94bdaef29887339dab6b470e8462c689fb029a0b862d96542a2500888e1b8bec17a50d9259667c62e15bf44c11c34cb8135922a3c0a183fe88d6f5d2b4c0fe1025b940d92fa4633323204dfe32b66df2dbba0778c2a25b540ad8cc511309dd6c02d376a8d30d69dbe36f13341a79dbdb7c957f4cb560d6c1da3160e4db92acc29881e8ac0f78f2eeec7f26f948585fd215a41ea3c3d9d859969764fa2815d15ec502bafffa95145716e135e114b8a16782d17fe8b08a3c96d4f5acdeb7eadc892a0f523cddc2ad8e92019851bbf97c2146e557cd570de44564ade9cb1a35d1e4b93c5f5871fa7f20409ea82d150a2effb21efd096e367e9641adb7716c00937187ebc08e5feba5e9c271af99cfb5a8db0a204cb3b43766b8ad1d3a9d635471b527f4a27b2b8718d598cbab8d9cffc9372075f1dee4d349a93d8c7b2865277f8457cc3616d6939a49f2d67915ccda2d7a05d6ab1cf020de6df33537a70eb8df241077b5420dccf8bf7049a5b491578012b5ee6149557e08b60090b2b6be8847b77505ee6c1636e65b8d1c5b74472ec488c6aa03968bbefe37c873f9174df6be6c4bb434fd058340a3796826d2aef2700885f2e0f1e825f944e1c2ce3743d0a518dd88f97bececa8269c129dc8281a18195ed0de448fe8f9ac2841fec34f344a2c3ecb2d7f93c0f4df9876d825461f8493fd030ab1a5bde64304ff01123627b80bf208169a67b48e09a3d271b709d40862fde77800aa7fd67103f61dde521dbd92102f13cad16b872cfa64024529523d2770fab5ec020df170606c22c45b5a0841371c53136b326859a5d5c7f31b4a3fdbb5701705d8d182476d26f560c83ea8c238b3c943a424be8ad93b43bc0ad542da26aa823b70a42122e571d233cf1c4497b7c280baafd1e1ea12f5ddc47a0b405a1197a8af0d9a356e3283ef1034463fe9420783333beef1215716722bcebbe89926522df79f61d84a7b45ba3adc8b5f72dbfb9ab4fe5100ddb3f5f7e9b11eab22ae5cd5afdcc3ae8258fcf6785ad5ddb19b467dedbc81d7e52c4f3a471baf065fd05c6ff1596c198a76fd70013a177e4a96b8030547b915fc2439e115cad78e3bdd72f0c625a44b63ff50b029a2e65e33724f2355c2580d68739b47d9d8cf3f047767fd6bd7b5b1ecd9e32f1d7bfa37f663d05227e7822e320f099a38cf8959ba603525c24ae9c8aa065d4634f4aebbc7c776fe77f07dbb44b81dc0c516701ab3e284667d7b0add6ba713d9a7107b8a69cec826aec38979baee90fe6f339954650da9a0648ef97a1e778d1d42ebfa8f982748ae7e42a8e32744ab98bbea62c044c0ed2374531a5ce4568fbd80e4addff910db953bc49720489321fa4b925c9e14613c45f0320707016e66acb671f8d621279cc9ece6c21e3c9fb3713ea71f5ea35b9edd09abbab8a0592566883dd91c511405597575990f93f39dcf1ef3aa1f033c76a9eb2a40fef6bff37124e56ff06bc4d7eeddb2cecae8759c19d944baffbc045093b33ebc0535aa725e970d22fb7dd0a5e7902bcc944a62b208763cff8e35fa6e82f8e4cdc53332101bd05f88954cc276cf8c77d8f36b7d78145008fd10b9ae4077a9f7c6efbe3bd6fc13e2d4032be2f64e38e90237d7d0aa5802f94ea2fb6484b529bcb4f9da27105559c93cda8b8160bd0c96f75220f33e81398d2bd544083f4d8750c4f0514d390c61fa9224f9f88931c89911a4351f9a4bc856278706a3931705dfe5ba05ba6654c968d7f455d7e1f7f4c113f119f74b2a26c1b253e8b9d04bd7861b3051bf8ec3a684e609a0aadfd119f79cdc10b6cb513444267343a441fcf8d64de38bd9aed7abaa531dfbffd72ba73c2b1eb1ecb7dc224391919ec89a86caa0615123e56c1574ae216b9a03823e503415a13185e5b97a471382ccd93f9740fd45560b47d2b4438dba4a24edfe73c9b1f9caea6d1326e5a8eec373bfb33cf531c23bf3bb2da2b73667308208d2963901042f625983afd4e221d97a92df6226ed9aee10bb00c7d3fd30"}, @NL80211_ATTR_FILS_ERP_RRK={0xa1, 0xfc, "abebe609e3c14824e323f73ac1a62207f65fa2587d3a7375e749f29dbb07b63d040b08a86e0efe23d11546077d5e07acd3767d4c49f9425b43e19156cfca42da8e589fa896b8d58862bc3c01ff784585ee3c3268a7158e1620504a7a30684f8e7f694275fc584aae08452bc98ece5425335481339f744c36e1241f831e397cc190f79677acd3f9690848677e3744c75daf442d8c18986d4e1a1ab3b93b"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "d757aabd93"}], @NL80211_ATTR_IE={0xfb, 0x2a, [@fast_bss_trans={0x37, 0x66, {0x1, 0x1, "6ef654646596d133b40cd90dd94aa816", "adbd869b97ea9e0ab0f08adddf380b55985a884bae90eec3fcabb190d407e671", "d39b85d4f6063ad9d4b81abcf6dd9fa91f79708ef282e550c3c47603d38c6640", [{0x4, 0x12, "7870bab0913399e0e9ca1fd0928a7c72f802"}]}}, @supported_rates={0x1, 0x2, [{0xc, 0x1}, {0x8}]}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x0, 0x2, @device_a, 0x2, @value=@broadcast, 0x10001, 0x5, @device_b, 0xdf5df201}}, @fast_bss_trans={0x37, 0x52, {0x4, 0x0, "412c3e2353bf96ed37d889a1ceea3ca2", "c317363f5ca64bfd50dd019d6240fc9e3f602e398971a05e24d742bf2e006d02", "680d88bd105d7f9bfd2fa49cad70a70bfb8286e7fd6cc6a91fb21dc7a709d8ce"}}, @mesh_id={0x72, 0x6}, @mesh_chsw={0x76, 0x6, {0x4, 0x0, 0xa, 0xc}}]}]}, 0x17b0}, 0x1, 0x0, 0x0, 0x80}, 0x81) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000025c0), r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002640)={0x7, &(0x7f0000002600)=[{0x3, 0x9, 0x2, 0x85}, {0x1ab6, 0x3, 0x3e, 0x6}, {0x7, 0x8, 0x9, 0x8000}, {0x8, 0x6, 0x76, 0x6}, {0xd8, 0x7, 0x0, 0x80000000}, {0xc309, 0x1, 0x9, 0x8}, {0x8000, 0x3, 0x30, 0x400}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002680)) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000002780)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x10, 0x3f5, 0x100, 0x70bd2a, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x44841}, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000027c0)) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000002840)={0x3, &(0x7f0000002800)=[{0x10, 0x9c, 0x6, 0xfffffffe}, {0xa, 0x8f, 0xd, 0x7}, {0xfffa, 0x4, 0x8, 0x678}]}, 0x10) executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) (async) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) socket$can_raw(0x1d, 0x3, 0x1) socket(0x1e, 0x4, 0x0) (async) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x24, r5, 0x201, 0x3ffffa, 0x800000, {{}, {}, {0x8, 0x11, 0x84f}}}, 0x24}, 0x1, 0x0, 0x0, 0x8011}, 0x20040010) syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902840003010000000904000000010100000a2401000000020102072405000000000c24020106020604800e0509090401000001020000090401010101020000090501090800000000072501010000000904020000010200000904020101010200000b2402016f0200018b7e8e072401000000000905820910000000000725"], 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fallocate(r7, 0x0, 0x6, 0x1) socket$packet(0x11, 0x3, 0x300) (async) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000100)=@req3={0x800, 0x0, 0x600000, 0x8, 0x4, 0x6, 0x7fff}, 0x1c) r9 = inotify_init() poll(&(0x7f0000000000)=[{r9, 0xd408}], 0x1, 0x1) executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x1000}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000280)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) (async) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) (async) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r3, 0x0, r0}, 0x10) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x12, r0, 0x180000000) executing program 0: openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x143a00, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x143a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0xe858000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff00010902"], 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000002b40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002b00)={&(0x7f0000000080)={0x48c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x160, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xf0, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x45, 0x6, "096e280c159b8c1bb778a038da05a383f3423528ab9ef9a1a42cf43fc8021520a8bb55aa79724c49377b742eb55760b90dc8ec9a054af417df954bb6116e1f2683"}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @local}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x2}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x91, 0xb, "9972a9ad6fb1f1bf1a06c2fe8f84788869bc93f323bfc9aa232cfca537cb33260e94db5b5dd7542df700d16a25c9a319f70cead8b54781711545315a8152d4e5e68cd3b6ac4369e24f4ac939f9a8a22285f66fa531e24a45f7d1b54139129fc75cb9caca0b08115165176466149c1fa65310cd5ed46d05249ef3ba881a783869d2edaab99d6bf7f7d157067e47"}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x68, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x59, 0x8, {0x5, 0x51, "cc8009d528d4613d083c6d157310011214a0e2ece5ae144db6af25155ec9834c7a1c0861251e3ac347157108bb5998f30f1ebe98372e3b577c378957f52e1af29715e218365a0819c35887492c"}}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x8001}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x310, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x304, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x2fe, 0xa, "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"}]}]}]}, 0x48c}, 0x1, 0x0, 0x0, 0x24000014}, 0x6ccfe599834f2e7d) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0xa) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x3c8) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106b1f01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030001030005490c240206e0"], 0x0) syz_usb_connect$cdc_ncm(0x1, 0xaa, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x2, 0x1, 0x0, 0x0, 0x2, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "84ae1d"}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xfd3, 0x2a7c, 0x5}, {0x6, 0x24, 0x1a, 0x200, 0x8}, [@dmm={0x7, 0x24, 0x14, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0xf, 0x9, 0x7}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x9, 0xfd, 0xb, 0x7, 0x9}, @country_functional={0x12, 0x24, 0x7, 0x6, 0x1, [0xcc, 0x9, 0xe, 0xa, 0x9, 0x0]}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x2, 0x9, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x3, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x9c30325041c26784, 0x6, 0x3, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0x6}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0xc7, 0x7, 0xb6, 0x40, 0x2}, 0x54, &(0x7f0000000200)=ANY=[@ANYBLOB="050f5400024810028cc36da64157b5eb0c7cfa840cf2a26ed7b4149644bd7a56e157fc7a6c9da60b7921d4be8dc4210d4d6a6050bc14bd1466a14bd8700000000000000000000000000000000000000000000000f8aadcca15c3fc63244c54d5ee83efac409fd042027f55926431e0e6c026aecdfb93cf5734660606ea1ca5a18b528d3b9cc73aaabc2d38367fb3c0514473c22291ab8853"], 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x3c0a}}]}) executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000002b40)=0x9, 0x4) sendmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="f74406d3a34aa7be0000", @ANYRES16=r0], 0x10, 0x200400c4}, 0x34044810) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8010, r2, 0x0) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) listen(r5, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008094) close(0x4) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x18a) open(&(0x7f0000000180)='./file0\x00', 0x410083, 0x1c4) r7 = landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = socket$unix(0x1, 0x2, 0x0) connect$unix(r9, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 1: r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xb, 0xfe}}}}}]}}]}}, 0x0) (async) r1 = syz_usb_connect$midi(0x6, 0xba, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x1235, 0x800c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x1, 0x1, 0x7, 0x40, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x30, 0x80, [@ms_header={0x7, 0x24, 0x1, 0x6, 0x7}], [{{0x9, 0x5, 0xd, 0x1, 0x8, 0x9, 0x8, 0x2, {0x6, 0x25, 0x1, 0x2, "a3ce"}}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x7, 0x9, 0x5, {0x12, 0x25, 0x1, 0xe, "160d142bca5e25118c52d28f6849"}}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x7, 0x6, 0x9, {0xd, 0x25, 0x1, 0x9, "192999727fd366ce43"}}}, {{0x9, 0x5, 0x5, 0x3, 0x400, 0x7, 0x2, 0x0, {0x4}}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x9, 0x40, 0x2, {0x4}}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x2, 0x6, 0x6, {0x5, 0x25, 0x1, 0x1, "90"}}}, {{0x9, 0x5, 0x1, 0x0, 0x60, 0x3, 0x1, 0x9, {0x7, 0x25, 0x1, 0x3, "78cc76"}}}, {{0x9, 0x5, 0x8, 0x8, 0x8, 0x7f, 0x1, 0x7, {0xe, 0x25, 0x1, 0xa, "c18657fedca37409215c"}}}]}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0xc4, 0x1, 0x5, 0x20, 0x4a}, 0xf1, &(0x7f00000002c0)={0x5, 0xf, 0xf1, 0x1, [@generic={0xec, 0x10, 0xa, "df43add3ad3bf06a03476f2b2cb48b1084bd476427115b4fa8dce288fb7cf55a23e6df982de7b95baed6f29d4420708b33c02deadba80ed6999c6140a183ff5adcbbb1ebcfd0b06cb74d8bd0b161257f5e55adf607466a0eba5c0baeeea4ffb58afe84238ee48acf426a34d526fdc2b1ebbb33386c3699d5e26c8aebcaa404bbba14ec537061510ef32947c1aa14dae16fa68f247cfa6dbaa068d96c40fda36609dd3ed2b013b0b626a340180dd8f330a05de0ea35f8eacac7206b2152e1c6e63454dc7d8f60eb2c3a39e101c7185aa6d8103a052b0cf8dfced82b5ee23062712211e84e745958a43e"}]}, 0x3, [{0x47, &(0x7f00000003c0)=@string={0x47, 0x3, "916e249e9dbf00572d1a7523e35950c764af2a791302af4599501c58992b4b06ce43bc46b85f6098e21709f2c07275af8dcf45088f2df585948b7201d39371fa1e68290971"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x7c66}}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000280)={0xffffffffffffff9f, &(0x7f00000001c0)={0x40, 0xe, 0x60, {0x60, 0x9, "0300000044289fc1397dd2a187a37ef164212fc653aa9c277ea89a6c8a817091838929ce56c581fb9e5dbaade013309254fe9e47ddc68df0de84673a48d9aa5e5198e8b6583b055dff9f5635dbcdfaa13e8ab60a18baedbf29ef2c0a0b84"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) connect$vsock_stream(r4, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005e1000/0x400000)=nil) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x109200, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x200000e, 0x13, r0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x1}, &(0x7f00000001c0)=0x28) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x20) recvmmsg(r6, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001ec0)=""/145, 0x91}], 0x1}, 0xffff0000}], 0x1, 0x10120, 0x0) executing program 0: prctl$PR_SET_KEEPCAPS(0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r5, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xb}}], 0x18}, 0x400c804) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x8, 0x7, 0x6, 0x4, 0xff, 0x10, 0x3, 0x2, 0x2, 0x8, 0x9, 0x4, 0x6, 0xc, 0x4, 0x7}}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xe, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x5a, 0x9e, 0xa, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e27, @empty}, 0x10, 0x0, 0x64}}], 0x1, 0x20004840) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1, 0x6, 0x10000003, 0x0, 0x5, 0x4, 0x0, 0xa, 0x3c1b, 0x1, 0xfffff7dc, 0xd, 0xfffffffe, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x7ffffffc, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x6, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x1, 0x80000130, 0x8004, 0x5, 0xffffffd3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x3, 0x7fff, 0x9, 0x400, 0x401, 0x2, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x5, 0xfe000000, 0xfffe, 0x2, 0x4, 0x8, 0x3, 0x1, 0x9, 0x1, 0x3, 0x0, 0xbc45, 0x3, 0x42, 0x1], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x7, 0x8, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xc, 0xc, 0x5, 0x2, 0x3, 0x2000000b, 0x4, 0x6, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x8, 0x4, 0x2950bfb0, 0x7, 0xa2, 0x7, 0x1ff, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0xffffffff, 0x8, 0x0, 0xa, 0x40, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xfffffffc, 0x3, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x54, 0xfffffff7, 0x3, 0x101, 0x10000, 0x5, 0x7fff, 0xffff, 0x80, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xfffffffe, 0x80000000, 0x821, 0x4, 0x4, 0x800, 0xfffff000, 0x5, 0x403, 0x7e, 0x100, 0x9602, 0x7, 0xfffffbff, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x2, 0xfff]}, 0x45c) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000100)="240000001e005f1814fffffffffffff807000000b800000000000000060005000d000000", 0x24) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) executing program 1: ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x101, 0x80c, 0x0, 0x1c, 0x7, 0x2, 0x11, 0x7, 0xed, 0x9, 0x9, 0x4, 0xb}, {0x23, 0xcd59, 0xa, 0x97, 0xd, 0x6, 0x13, 0x7, 0xd9, 0x2, 0x44, 0x7d, 0x100003fffffffffd}, {0x7fffffff, 0x18, 0x3, 0xff, 0x2, 0x9, 0x10, 0xf8, 0x5, 0x8, 0x6, 0x9, 0xfffffffffffffffd}], 0x800000}) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x325) ftruncate(r0, 0x6000000) copy_file_range(r0, 0x0, r0, &(0x7f00000004c0)=0x100, 0x9, 0x0) socket$inet6(0xa, 0x3, 0x3) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x82, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r2 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x40306727, &(0x7f00000000c0)) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0xcc, 0x0, 0x1}) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000180)="e6724ee0d57ab216f76b365699b251d71939cf3226c080746430c572303e7a13a43039168f460633967e59dee29454d135993911a2d996936cb8d890", 0x3c) r2 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$usbmon(r2, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup(r1) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000a40)={@val={0xa, 0x88a8}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="cd1008a2dc58", @void, {@ipv6={0x86dd, @udp={0x7, 0x6, "dc70e5", 0x3e0, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@routing={0x2f, 0x8, 0x2, 0x8, 0x0, [@remote, @remote, @private1, @dev={0xfe, 0x80, '\x00', 0xb}]}, @fragment={0x43, 0x0, 0x5, 0x1, 0x0, 0x4, 0x64}, @srh={0x3b, 0xc, 0x4, 0x6, 0x1, 0x8, 0xfffc, [@remote, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote]}, @dstopts={0x2e, 0x4, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x8000}, @calipso={0x7, 0x18, {0x0, 0x4, 0xc4, 0x0, [0xc, 0x0]}}]}, @hopopts={0x2, 0x6, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0x53, 0x6, [0x7, 0xb]}}, @pad1, @pad1, @hao={0xc9, 0x10, @mcast1}]}, @hopopts={0x6, 0xf, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x36}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @ra, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x0, [0xf1b]}}, @jumbo={0xc2, 0x4, 0x6}, @calipso={0x7, 0x30, {0x1, 0xa, 0x90, 0x0, [0xf, 0x0, 0x1, 0x5, 0x9]}}]}, @dstopts={0x5c, 0x35, '\x00', [@pad1, @calipso={0x7, 0x28, {0x2, 0x8, 0x3, 0x402, [0x5, 0x2, 0x7, 0x2]}}, @hao={0xc9, 0x10, @local}, @generic={0x3, 0xef, "25710386f21aab0177f4a6f2984f7c18cf44fa4f42e3e16f918553fa571f11eb7bd1cb84d6a2349ad61d93ba8dd3c7fccdbdfce4fe812bbc228427975000dcfbc1fe34b63a964178d5092c403fd30bacbc8cdd14d0cc5bed9825985af409795ae3f7eab4db6b187467568ada2de35f3709a0b5e91964da750b515904004e51fc6884703ed96597aa7b915433cd232b8ac903fe1ea13b7e3b170709ecd021635354c4b6c88ff4c5a5f366b4d9d537f3135e8b4f83830bdef86403c0aac89e2e7c31ed6e509d9980671213179c085ffbd324418641edccd3be1d4a5eb1c575f8519e0293c25b3e73917f566179607f6f"}, @generic={0x30, 0x75, "2eab23e694a4eece866da96d41c9e7bdc4e5affc8a8aa3045482bf494b1d36a37e1f94d0dfaea36e14fff9042afe291b594bd85906629543087a09230c8cbede67ff485c4573f08e5ff96a8ac458b25729f87572b04017b31cab7457d5d68d9cd0bbf6b8ac346a265c711669e22e2a9b11811547d2"}, @pad1]}, @hopopts={0x89, 0xa, '\x00', [@hao={0xc9, 0x10, @private1}, @generic={0x9, 0x40, "57690c230002197cfb5ee825ce6eae610a434f184fad88d265cd68d92a66465b7b95235ef8842dd87f14f1021db4a314484a6d6a266c0d962ec5379cad709daa"}]}], {0x4e21, 0x4e21, 0x18, 0x0, @opaque="d537d0a103fdf9303746d7ee79354d3a"}}}}}}}, 0x41a) bind$bt_sco(r3, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r5 = gettid() sigaltstack(&(0x7f0000001040)={&(0x7f00000020c0)=""/4124, 0x0, 0x101c}, 0x0) rt_sigqueueinfo(r5, 0x21, &(0x7f00000002c0)={0x8000a, 0x4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x7fffffffffffffff, 0x1fd}) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f00000009c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x2b73, 0x1b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x8, 0x30, 0x4, {0x8, 0xb, 0x1, 0x1, 0x1, 0x3, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0xa, 0x9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x2, 0x4, 0x7, {0x8, 0x25, 0x1, 0x81, 0xf, 0xf2, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x80, 0x0, 0xb, {0x8, 0x25, 0x1, 0x81, 0x14, 0x7, 0x6}}}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0xc0c}}, {0xc4, &(0x7f0000000340)=@string={0xc4, 0x3, "fb4d32216d5570215e76c6f6aa758a2497e43644d8f2dcb695e672c22d2aa508e54a57bb52bb2dbf922969637717d2620204ec1e77d007e6ac0184431396d295cb3acc2c9b7e61d6b21b3a0fc520584cca338e690a73d17b7965759f54f8d874b47e9669a026324dcb1ad26a5febeb57d32777416bf7f5405e1c2d6c7e290263db90a47401de143df9939f6065af263713708f5822b8348ef1aa7da9f7c234f3a02d7e5302fe88bb77ffa6de89cc177b9fd4489809cb459fcf7a21b6124a12b678f7"}}]}) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) program crashed: WARNING in shmem_rmdir bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 30, 4, 30, 24, 18, 20] detailed listing: executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0xa) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x3c8) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106b1f01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030001030005490c240206e0"], 0x0) syz_usb_connect$cdc_ncm(0x1, 0xaa, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x2, 0x1, 0x0, 0x0, 0x2, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "84ae1d"}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xfd3, 0x2a7c, 0x5}, {0x6, 0x24, 0x1a, 0x200, 0x8}, [@dmm={0x7, 0x24, 0x14, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0xf, 0x9, 0x7}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x9, 0xfd, 0xb, 0x7, 0x9}, @country_functional={0x12, 0x24, 0x7, 0x6, 0x1, [0xcc, 0x9, 0xe, 0xa, 0x9, 0x0]}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x2, 0x9, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x3, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x9c30325041c26784, 0x6, 0x3, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0x6}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0xc7, 0x7, 0xb6, 0x40, 0x2}, 0x54, &(0x7f0000000200)=ANY=[@ANYBLOB="050f5400024810028cc36da64157b5eb0c7cfa840cf2a26ed7b4149644bd7a56e157fc7a6c9da60b7921d4be8dc4210d4d6a6050bc14bd1466a14bd8700000000000000000000000000000000000000000000000f8aadcca15c3fc63244c54d5ee83efac409fd042027f55926431e0e6c026aecdfb93cf5734660606ea1ca5a18b528d3b9cc73aaabc2d38367fb3c0514473c22291ab8853"], 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x3c0a}}]}) executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000002b40)=0x9, 0x4) sendmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="f74406d3a34aa7be0000", @ANYRES16=r0], 0x10, 0x200400c4}, 0x34044810) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8010, r2, 0x0) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) listen(r5, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008094) close(0x4) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x18a) open(&(0x7f0000000180)='./file0\x00', 0x410083, 0x1c4) r7 = landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = socket$unix(0x1, 0x2, 0x0) connect$unix(r9, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 1: r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xb, 0xfe}}}}}]}}]}}, 0x0) (async) r1 = syz_usb_connect$midi(0x6, 0xba, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x1235, 0x800c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x1, 0x1, 0x7, 0x40, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x30, 0x80, [@ms_header={0x7, 0x24, 0x1, 0x6, 0x7}], [{{0x9, 0x5, 0xd, 0x1, 0x8, 0x9, 0x8, 0x2, {0x6, 0x25, 0x1, 0x2, "a3ce"}}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x7, 0x9, 0x5, {0x12, 0x25, 0x1, 0xe, "160d142bca5e25118c52d28f6849"}}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x7, 0x6, 0x9, {0xd, 0x25, 0x1, 0x9, "192999727fd366ce43"}}}, {{0x9, 0x5, 0x5, 0x3, 0x400, 0x7, 0x2, 0x0, {0x4}}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x9, 0x40, 0x2, {0x4}}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x2, 0x6, 0x6, {0x5, 0x25, 0x1, 0x1, "90"}}}, {{0x9, 0x5, 0x1, 0x0, 0x60, 0x3, 0x1, 0x9, {0x7, 0x25, 0x1, 0x3, "78cc76"}}}, {{0x9, 0x5, 0x8, 0x8, 0x8, 0x7f, 0x1, 0x7, {0xe, 0x25, 0x1, 0xa, "c18657fedca37409215c"}}}]}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0xc4, 0x1, 0x5, 0x20, 0x4a}, 0xf1, &(0x7f00000002c0)={0x5, 0xf, 0xf1, 0x1, [@generic={0xec, 0x10, 0xa, "df43add3ad3bf06a03476f2b2cb48b1084bd476427115b4fa8dce288fb7cf55a23e6df982de7b95baed6f29d4420708b33c02deadba80ed6999c6140a183ff5adcbbb1ebcfd0b06cb74d8bd0b161257f5e55adf607466a0eba5c0baeeea4ffb58afe84238ee48acf426a34d526fdc2b1ebbb33386c3699d5e26c8aebcaa404bbba14ec537061510ef32947c1aa14dae16fa68f247cfa6dbaa068d96c40fda36609dd3ed2b013b0b626a340180dd8f330a05de0ea35f8eacac7206b2152e1c6e63454dc7d8f60eb2c3a39e101c7185aa6d8103a052b0cf8dfced82b5ee23062712211e84e745958a43e"}]}, 0x3, [{0x47, &(0x7f00000003c0)=@string={0x47, 0x3, "916e249e9dbf00572d1a7523e35950c764af2a791302af4599501c58992b4b06ce43bc46b85f6098e21709f2c07275af8dcf45088f2df585948b7201d39371fa1e68290971"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x7c66}}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000280)={0xffffffffffffff9f, &(0x7f00000001c0)={0x40, 0xe, 0x60, {0x60, 0x9, "0300000044289fc1397dd2a187a37ef164212fc653aa9c277ea89a6c8a817091838929ce56c581fb9e5dbaade013309254fe9e47ddc68df0de84673a48d9aa5e5198e8b6583b055dff9f5635dbcdfaa13e8ab60a18baedbf29ef2c0a0b84"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) connect$vsock_stream(r4, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005e1000/0x400000)=nil) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x109200, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x200000e, 0x13, r0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x1}, &(0x7f00000001c0)=0x28) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x20) recvmmsg(r6, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001ec0)=""/145, 0x91}], 0x1}, 0xffff0000}], 0x1, 0x10120, 0x0) executing program 0: prctl$PR_SET_KEEPCAPS(0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r5, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xb}}], 0x18}, 0x400c804) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x8, 0x7, 0x6, 0x4, 0xff, 0x10, 0x3, 0x2, 0x2, 0x8, 0x9, 0x4, 0x6, 0xc, 0x4, 0x7}}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xe, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x5a, 0x9e, 0xa, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e27, @empty}, 0x10, 0x0, 0x64}}], 0x1, 0x20004840) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1, 0x6, 0x10000003, 0x0, 0x5, 0x4, 0x0, 0xa, 0x3c1b, 0x1, 0xfffff7dc, 0xd, 0xfffffffe, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x7ffffffc, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x6, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x1, 0x80000130, 0x8004, 0x5, 0xffffffd3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x3, 0x7fff, 0x9, 0x400, 0x401, 0x2, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x5, 0xfe000000, 0xfffe, 0x2, 0x4, 0x8, 0x3, 0x1, 0x9, 0x1, 0x3, 0x0, 0xbc45, 0x3, 0x42, 0x1], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x7, 0x8, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xc, 0xc, 0x5, 0x2, 0x3, 0x2000000b, 0x4, 0x6, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x8, 0x4, 0x2950bfb0, 0x7, 0xa2, 0x7, 0x1ff, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0xffffffff, 0x8, 0x0, 0xa, 0x40, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xfffffffc, 0x3, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x54, 0xfffffff7, 0x3, 0x101, 0x10000, 0x5, 0x7fff, 0xffff, 0x80, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xfffffffe, 0x80000000, 0x821, 0x4, 0x4, 0x800, 0xfffff000, 0x5, 0x403, 0x7e, 0x100, 0x9602, 0x7, 0xfffffbff, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x2, 0xfff]}, 0x45c) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000100)="240000001e005f1814fffffffffffff807000000b800000000000000060005000d000000", 0x24) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) executing program 1: ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x101, 0x80c, 0x0, 0x1c, 0x7, 0x2, 0x11, 0x7, 0xed, 0x9, 0x9, 0x4, 0xb}, {0x23, 0xcd59, 0xa, 0x97, 0xd, 0x6, 0x13, 0x7, 0xd9, 0x2, 0x44, 0x7d, 0x100003fffffffffd}, {0x7fffffff, 0x18, 0x3, 0xff, 0x2, 0x9, 0x10, 0xf8, 0x5, 0x8, 0x6, 0x9, 0xfffffffffffffffd}], 0x800000}) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x325) ftruncate(r0, 0x6000000) copy_file_range(r0, 0x0, r0, &(0x7f00000004c0)=0x100, 0x9, 0x0) socket$inet6(0xa, 0x3, 0x3) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x82, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r2 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x40306727, &(0x7f00000000c0)) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0xcc, 0x0, 0x1}) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000180)="e6724ee0d57ab216f76b365699b251d71939cf3226c080746430c572303e7a13a43039168f460633967e59dee29454d135993911a2d996936cb8d890", 0x3c) r2 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$usbmon(r2, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup(r1) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000a40)={@val={0xa, 0x88a8}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="cd1008a2dc58", @void, {@ipv6={0x86dd, @udp={0x7, 0x6, "dc70e5", 0x3e0, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@routing={0x2f, 0x8, 0x2, 0x8, 0x0, [@remote, @remote, @private1, @dev={0xfe, 0x80, '\x00', 0xb}]}, @fragment={0x43, 0x0, 0x5, 0x1, 0x0, 0x4, 0x64}, @srh={0x3b, 0xc, 0x4, 0x6, 0x1, 0x8, 0xfffc, [@remote, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote]}, @dstopts={0x2e, 0x4, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x8000}, @calipso={0x7, 0x18, {0x0, 0x4, 0xc4, 0x0, [0xc, 0x0]}}]}, @hopopts={0x2, 0x6, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0x53, 0x6, [0x7, 0xb]}}, @pad1, @pad1, @hao={0xc9, 0x10, @mcast1}]}, @hopopts={0x6, 0xf, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x36}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @ra, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x0, [0xf1b]}}, @jumbo={0xc2, 0x4, 0x6}, @calipso={0x7, 0x30, {0x1, 0xa, 0x90, 0x0, [0xf, 0x0, 0x1, 0x5, 0x9]}}]}, @dstopts={0x5c, 0x35, '\x00', [@pad1, @calipso={0x7, 0x28, {0x2, 0x8, 0x3, 0x402, [0x5, 0x2, 0x7, 0x2]}}, @hao={0xc9, 0x10, @local}, @generic={0x3, 0xef, "25710386f21aab0177f4a6f2984f7c18cf44fa4f42e3e16f918553fa571f11eb7bd1cb84d6a2349ad61d93ba8dd3c7fccdbdfce4fe812bbc228427975000dcfbc1fe34b63a964178d5092c403fd30bacbc8cdd14d0cc5bed9825985af409795ae3f7eab4db6b187467568ada2de35f3709a0b5e91964da750b515904004e51fc6884703ed96597aa7b915433cd232b8ac903fe1ea13b7e3b170709ecd021635354c4b6c88ff4c5a5f366b4d9d537f3135e8b4f83830bdef86403c0aac89e2e7c31ed6e509d9980671213179c085ffbd324418641edccd3be1d4a5eb1c575f8519e0293c25b3e73917f566179607f6f"}, @generic={0x30, 0x75, "2eab23e694a4eece866da96d41c9e7bdc4e5affc8a8aa3045482bf494b1d36a37e1f94d0dfaea36e14fff9042afe291b594bd85906629543087a09230c8cbede67ff485c4573f08e5ff96a8ac458b25729f87572b04017b31cab7457d5d68d9cd0bbf6b8ac346a265c711669e22e2a9b11811547d2"}, @pad1]}, @hopopts={0x89, 0xa, '\x00', [@hao={0xc9, 0x10, @private1}, @generic={0x9, 0x40, "57690c230002197cfb5ee825ce6eae610a434f184fad88d265cd68d92a66465b7b95235ef8842dd87f14f1021db4a314484a6d6a266c0d962ec5379cad709daa"}]}], {0x4e21, 0x4e21, 0x18, 0x0, @opaque="d537d0a103fdf9303746d7ee79354d3a"}}}}}}}, 0x41a) bind$bt_sco(r3, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r5 = gettid() sigaltstack(&(0x7f0000001040)={&(0x7f00000020c0)=""/4124, 0x0, 0x101c}, 0x0) rt_sigqueueinfo(r5, 0x21, &(0x7f00000002c0)={0x8000a, 0x4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x7fffffffffffffff, 0x1fd}) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f00000009c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x2b73, 0x1b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x8, 0x30, 0x4, {0x8, 0xb, 0x1, 0x1, 0x1, 0x3, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0xa, 0x9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x2, 0x4, 0x7, {0x8, 0x25, 0x1, 0x81, 0xf, 0xf2, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x80, 0x0, 0xb, {0x8, 0x25, 0x1, 0x81, 0x14, 0x7, 0x6}}}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0xc0c}}, {0xc4, &(0x7f0000000340)=@string={0xc4, 0x3, "fb4d32216d5570215e76c6f6aa758a2497e43644d8f2dcb695e672c22d2aa508e54a57bb52bb2dbf922969637717d2620204ec1e77d007e6ac0184431396d295cb3acc2c9b7e61d6b21b3a0fc520584cca338e690a73d17b7965759f54f8d874b47e9669a026324dcb1ad26a5febeb57d32777416bf7f5405e1c2d6c7e290263db90a47401de143df9939f6065af263713708f5822b8348ef1aa7da9f7c234f3a02d7e5302fe88bb77ffa6de89cc177b9fd4489809cb459fcf7a21b6124a12b678f7"}}]}) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) program crashed: WARNING in shmem_rmdir bisect: the chunk can be dropped bisect: testing without sub-chunk 3/3 bisect: split chunks (needed=true): <7> bisect: split chunk #0 of len 7 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 18, 20] detailed listing: executing program 0: prctl$PR_SET_KEEPCAPS(0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r5, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xb}}], 0x18}, 0x400c804) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x8, 0x7, 0x6, 0x4, 0xff, 0x10, 0x3, 0x2, 0x2, 0x8, 0x9, 0x4, 0x6, 0xc, 0x4, 0x7}}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xe, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x5a, 0x9e, 0xa, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e27, @empty}, 0x10, 0x0, 0x64}}], 0x1, 0x20004840) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1, 0x6, 0x10000003, 0x0, 0x5, 0x4, 0x0, 0xa, 0x3c1b, 0x1, 0xfffff7dc, 0xd, 0xfffffffe, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x7ffffffc, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x6, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x1, 0x80000130, 0x8004, 0x5, 0xffffffd3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x3, 0x7fff, 0x9, 0x400, 0x401, 0x2, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x5, 0xfe000000, 0xfffe, 0x2, 0x4, 0x8, 0x3, 0x1, 0x9, 0x1, 0x3, 0x0, 0xbc45, 0x3, 0x42, 0x1], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x7, 0x8, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xc, 0xc, 0x5, 0x2, 0x3, 0x2000000b, 0x4, 0x6, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x8, 0x4, 0x2950bfb0, 0x7, 0xa2, 0x7, 0x1ff, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0xffffffff, 0x8, 0x0, 0xa, 0x40, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xfffffffc, 0x3, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x54, 0xfffffff7, 0x3, 0x101, 0x10000, 0x5, 0x7fff, 0xffff, 0x80, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xfffffffe, 0x80000000, 0x821, 0x4, 0x4, 0x800, 0xfffff000, 0x5, 0x403, 0x7e, 0x100, 0x9602, 0x7, 0xfffffbff, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x2, 0xfff]}, 0x45c) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000100)="240000001e005f1814fffffffffffff807000000b800000000000000060005000d000000", 0x24) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) executing program 1: ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x101, 0x80c, 0x0, 0x1c, 0x7, 0x2, 0x11, 0x7, 0xed, 0x9, 0x9, 0x4, 0xb}, {0x23, 0xcd59, 0xa, 0x97, 0xd, 0x6, 0x13, 0x7, 0xd9, 0x2, 0x44, 0x7d, 0x100003fffffffffd}, {0x7fffffff, 0x18, 0x3, 0xff, 0x2, 0x9, 0x10, 0xf8, 0x5, 0x8, 0x6, 0x9, 0xfffffffffffffffd}], 0x800000}) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x325) ftruncate(r0, 0x6000000) copy_file_range(r0, 0x0, r0, &(0x7f00000004c0)=0x100, 0x9, 0x0) socket$inet6(0xa, 0x3, 0x3) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x82, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r2 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x40306727, &(0x7f00000000c0)) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0xcc, 0x0, 0x1}) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000180)="e6724ee0d57ab216f76b365699b251d71939cf3226c080746430c572303e7a13a43039168f460633967e59dee29454d135993911a2d996936cb8d890", 0x3c) r2 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$usbmon(r2, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup(r1) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000a40)={@val={0xa, 0x88a8}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="cd1008a2dc58", @void, {@ipv6={0x86dd, @udp={0x7, 0x6, "dc70e5", 0x3e0, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@routing={0x2f, 0x8, 0x2, 0x8, 0x0, [@remote, @remote, @private1, @dev={0xfe, 0x80, '\x00', 0xb}]}, @fragment={0x43, 0x0, 0x5, 0x1, 0x0, 0x4, 0x64}, @srh={0x3b, 0xc, 0x4, 0x6, 0x1, 0x8, 0xfffc, [@remote, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote]}, @dstopts={0x2e, 0x4, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x8000}, @calipso={0x7, 0x18, {0x0, 0x4, 0xc4, 0x0, [0xc, 0x0]}}]}, @hopopts={0x2, 0x6, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0x53, 0x6, [0x7, 0xb]}}, @pad1, @pad1, @hao={0xc9, 0x10, @mcast1}]}, @hopopts={0x6, 0xf, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x36}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @ra, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x0, [0xf1b]}}, @jumbo={0xc2, 0x4, 0x6}, @calipso={0x7, 0x30, {0x1, 0xa, 0x90, 0x0, [0xf, 0x0, 0x1, 0x5, 0x9]}}]}, @dstopts={0x5c, 0x35, '\x00', [@pad1, @calipso={0x7, 0x28, {0x2, 0x8, 0x3, 0x402, [0x5, 0x2, 0x7, 0x2]}}, @hao={0xc9, 0x10, @local}, @generic={0x3, 0xef, "25710386f21aab0177f4a6f2984f7c18cf44fa4f42e3e16f918553fa571f11eb7bd1cb84d6a2349ad61d93ba8dd3c7fccdbdfce4fe812bbc228427975000dcfbc1fe34b63a964178d5092c403fd30bacbc8cdd14d0cc5bed9825985af409795ae3f7eab4db6b187467568ada2de35f3709a0b5e91964da750b515904004e51fc6884703ed96597aa7b915433cd232b8ac903fe1ea13b7e3b170709ecd021635354c4b6c88ff4c5a5f366b4d9d537f3135e8b4f83830bdef86403c0aac89e2e7c31ed6e509d9980671213179c085ffbd324418641edccd3be1d4a5eb1c575f8519e0293c25b3e73917f566179607f6f"}, @generic={0x30, 0x75, "2eab23e694a4eece866da96d41c9e7bdc4e5affc8a8aa3045482bf494b1d36a37e1f94d0dfaea36e14fff9042afe291b594bd85906629543087a09230c8cbede67ff485c4573f08e5ff96a8ac458b25729f87572b04017b31cab7457d5d68d9cd0bbf6b8ac346a265c711669e22e2a9b11811547d2"}, @pad1]}, @hopopts={0x89, 0xa, '\x00', [@hao={0xc9, 0x10, @private1}, @generic={0x9, 0x40, "57690c230002197cfb5ee825ce6eae610a434f184fad88d265cd68d92a66465b7b95235ef8842dd87f14f1021db4a314484a6d6a266c0d962ec5379cad709daa"}]}], {0x4e21, 0x4e21, 0x18, 0x0, @opaque="d537d0a103fdf9303746d7ee79354d3a"}}}}}}}, 0x41a) bind$bt_sco(r3, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r5 = gettid() sigaltstack(&(0x7f0000001040)={&(0x7f00000020c0)=""/4124, 0x0, 0x101c}, 0x0) rt_sigqueueinfo(r5, 0x21, &(0x7f00000002c0)={0x8000a, 0x4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x7fffffffffffffff, 0x1fd}) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f00000009c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x2b73, 0x1b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x8, 0x30, 0x4, {0x8, 0xb, 0x1, 0x1, 0x1, 0x3, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0xa, 0x9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x2, 0x4, 0x7, {0x8, 0x25, 0x1, 0x81, 0xf, 0xf2, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x80, 0x0, 0xb, {0x8, 0x25, 0x1, 0x81, 0x14, 0x7, 0x6}}}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0xc0c}}, {0xc4, &(0x7f0000000340)=@string={0xc4, 0x3, "fb4d32216d5570215e76c6f6aa758a2497e43644d8f2dcb695e672c22d2aa508e54a57bb52bb2dbf922969637717d2620204ec1e77d007e6ac0184431396d295cb3acc2c9b7e61d6b21b3a0fc520584cca338e690a73d17b7965759f54f8d874b47e9669a026324dcb1ad26a5febeb57d32777416bf7f5405e1c2d6c7e290263db90a47401de143df9939f6065af263713708f5822b8348ef1aa7da9f7c234f3a02d7e5302fe88bb77ffa6de89cc177b9fd4489809cb459fcf7a21b6124a12b678f7"}}]}) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 30, 4, 30] detailed listing: executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0xa) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x3c8) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106b1f01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030001030005490c240206e0"], 0x0) syz_usb_connect$cdc_ncm(0x1, 0xaa, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x2, 0x1, 0x0, 0x0, 0x2, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "84ae1d"}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xfd3, 0x2a7c, 0x5}, {0x6, 0x24, 0x1a, 0x200, 0x8}, [@dmm={0x7, 0x24, 0x14, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0xf, 0x9, 0x7}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x9, 0xfd, 0xb, 0x7, 0x9}, @country_functional={0x12, 0x24, 0x7, 0x6, 0x1, [0xcc, 0x9, 0xe, 0xa, 0x9, 0x0]}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x2, 0x9, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x3, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x9c30325041c26784, 0x6, 0x3, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0x6}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0xc7, 0x7, 0xb6, 0x40, 0x2}, 0x54, &(0x7f0000000200)=ANY=[@ANYBLOB="050f5400024810028cc36da64157b5eb0c7cfa840cf2a26ed7b4149644bd7a56e157fc7a6c9da60b7921d4be8dc4210d4d6a6050bc14bd1466a14bd8700000000000000000000000000000000000000000000000f8aadcca15c3fc63244c54d5ee83efac409fd042027f55926431e0e6c026aecdfb93cf5734660606ea1ca5a18b528d3b9cc73aaabc2d38367fb3c0514473c22291ab8853"], 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x3c0a}}]}) executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000002b40)=0x9, 0x4) sendmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="f74406d3a34aa7be0000", @ANYRES16=r0], 0x10, 0x200400c4}, 0x34044810) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8010, r2, 0x0) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) listen(r5, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008094) close(0x4) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x18a) open(&(0x7f0000000180)='./file0\x00', 0x410083, 0x1c4) r7 = landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = socket$unix(0x1, 0x2, 0x0) connect$unix(r9, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 1: r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xb, 0xfe}}}}}]}}]}}, 0x0) (async) r1 = syz_usb_connect$midi(0x6, 0xba, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x1235, 0x800c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x1, 0x1, 0x7, 0x40, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x30, 0x80, [@ms_header={0x7, 0x24, 0x1, 0x6, 0x7}], [{{0x9, 0x5, 0xd, 0x1, 0x8, 0x9, 0x8, 0x2, {0x6, 0x25, 0x1, 0x2, "a3ce"}}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x7, 0x9, 0x5, {0x12, 0x25, 0x1, 0xe, "160d142bca5e25118c52d28f6849"}}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x7, 0x6, 0x9, {0xd, 0x25, 0x1, 0x9, "192999727fd366ce43"}}}, {{0x9, 0x5, 0x5, 0x3, 0x400, 0x7, 0x2, 0x0, {0x4}}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x9, 0x40, 0x2, {0x4}}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x2, 0x6, 0x6, {0x5, 0x25, 0x1, 0x1, "90"}}}, {{0x9, 0x5, 0x1, 0x0, 0x60, 0x3, 0x1, 0x9, {0x7, 0x25, 0x1, 0x3, "78cc76"}}}, {{0x9, 0x5, 0x8, 0x8, 0x8, 0x7f, 0x1, 0x7, {0xe, 0x25, 0x1, 0xa, "c18657fedca37409215c"}}}]}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0xc4, 0x1, 0x5, 0x20, 0x4a}, 0xf1, &(0x7f00000002c0)={0x5, 0xf, 0xf1, 0x1, [@generic={0xec, 0x10, 0xa, "df43add3ad3bf06a03476f2b2cb48b1084bd476427115b4fa8dce288fb7cf55a23e6df982de7b95baed6f29d4420708b33c02deadba80ed6999c6140a183ff5adcbbb1ebcfd0b06cb74d8bd0b161257f5e55adf607466a0eba5c0baeeea4ffb58afe84238ee48acf426a34d526fdc2b1ebbb33386c3699d5e26c8aebcaa404bbba14ec537061510ef32947c1aa14dae16fa68f247cfa6dbaa068d96c40fda36609dd3ed2b013b0b626a340180dd8f330a05de0ea35f8eacac7206b2152e1c6e63454dc7d8f60eb2c3a39e101c7185aa6d8103a052b0cf8dfced82b5ee23062712211e84e745958a43e"}]}, 0x3, [{0x47, &(0x7f00000003c0)=@string={0x47, 0x3, "916e249e9dbf00572d1a7523e35950c764af2a791302af4599501c58992b4b06ce43bc46b85f6098e21709f2c07275af8dcf45088f2df585948b7201d39371fa1e68290971"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x7c66}}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000280)={0xffffffffffffff9f, &(0x7f00000001c0)={0x40, 0xe, 0x60, {0x60, 0x9, "0300000044289fc1397dd2a187a37ef164212fc653aa9c277ea89a6c8a817091838929ce56c581fb9e5dbaade013309254fe9e47ddc68df0de84673a48d9aa5e5198e8b6583b055dff9f5635dbcdfaa13e8ab60a18baedbf29ef2c0a0b84"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) connect$vsock_stream(r4, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005e1000/0x400000)=nil) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x109200, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x200000e, 0x13, r0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x1}, &(0x7f00000001c0)=0x28) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x20) recvmmsg(r6, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001ec0)=""/145, 0x91}], 0x1}, 0xffff0000}], 0x1, 0x10120, 0x0) program crashed: WARNING in shmem_rmdir bisect: the chunk can be dropped bisect: split chunks (needed=true): <4> bisect: split chunk #0 of len 4 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 30] detailed listing: executing program 1: r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xb, 0xfe}}}}}]}}]}}, 0x0) (async) r1 = syz_usb_connect$midi(0x6, 0xba, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x1235, 0x800c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x1, 0x1, 0x7, 0x40, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x30, 0x80, [@ms_header={0x7, 0x24, 0x1, 0x6, 0x7}], [{{0x9, 0x5, 0xd, 0x1, 0x8, 0x9, 0x8, 0x2, {0x6, 0x25, 0x1, 0x2, "a3ce"}}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x7, 0x9, 0x5, {0x12, 0x25, 0x1, 0xe, "160d142bca5e25118c52d28f6849"}}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x7, 0x6, 0x9, {0xd, 0x25, 0x1, 0x9, "192999727fd366ce43"}}}, {{0x9, 0x5, 0x5, 0x3, 0x400, 0x7, 0x2, 0x0, {0x4}}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x9, 0x40, 0x2, {0x4}}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x2, 0x6, 0x6, {0x5, 0x25, 0x1, 0x1, "90"}}}, {{0x9, 0x5, 0x1, 0x0, 0x60, 0x3, 0x1, 0x9, {0x7, 0x25, 0x1, 0x3, "78cc76"}}}, {{0x9, 0x5, 0x8, 0x8, 0x8, 0x7f, 0x1, 0x7, {0xe, 0x25, 0x1, 0xa, "c18657fedca37409215c"}}}]}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0xc4, 0x1, 0x5, 0x20, 0x4a}, 0xf1, &(0x7f00000002c0)={0x5, 0xf, 0xf1, 0x1, [@generic={0xec, 0x10, 0xa, "df43add3ad3bf06a03476f2b2cb48b1084bd476427115b4fa8dce288fb7cf55a23e6df982de7b95baed6f29d4420708b33c02deadba80ed6999c6140a183ff5adcbbb1ebcfd0b06cb74d8bd0b161257f5e55adf607466a0eba5c0baeeea4ffb58afe84238ee48acf426a34d526fdc2b1ebbb33386c3699d5e26c8aebcaa404bbba14ec537061510ef32947c1aa14dae16fa68f247cfa6dbaa068d96c40fda36609dd3ed2b013b0b626a340180dd8f330a05de0ea35f8eacac7206b2152e1c6e63454dc7d8f60eb2c3a39e101c7185aa6d8103a052b0cf8dfced82b5ee23062712211e84e745958a43e"}]}, 0x3, [{0x47, &(0x7f00000003c0)=@string={0x47, 0x3, "916e249e9dbf00572d1a7523e35950c764af2a791302af4599501c58992b4b06ce43bc46b85f6098e21709f2c07275af8dcf45088f2df585948b7201d39371fa1e68290971"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x7c66}}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000280)={0xffffffffffffff9f, &(0x7f00000001c0)={0x40, 0xe, 0x60, {0x60, 0x9, "0300000044289fc1397dd2a187a37ef164212fc653aa9c277ea89a6c8a817091838929ce56c581fb9e5dbaade013309254fe9e47ddc68df0de84673a48d9aa5e5198e8b6583b055dff9f5635dbcdfaa13e8ab60a18baedbf29ef2c0a0b84"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) connect$vsock_stream(r4, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005e1000/0x400000)=nil) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x109200, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x200000e, 0x13, r0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x1}, &(0x7f00000001c0)=0x28) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x20) recvmmsg(r6, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001ec0)=""/145, 0x91}], 0x1}, 0xffff0000}], 0x1, 0x10120, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 30] detailed listing: executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0xa) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x3c8) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106b1f01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030001030005490c240206e0"], 0x0) syz_usb_connect$cdc_ncm(0x1, 0xaa, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x2, 0x1, 0x0, 0x0, 0x2, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "84ae1d"}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xfd3, 0x2a7c, 0x5}, {0x6, 0x24, 0x1a, 0x200, 0x8}, [@dmm={0x7, 0x24, 0x14, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0xf, 0x9, 0x7}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x9, 0xfd, 0xb, 0x7, 0x9}, @country_functional={0x12, 0x24, 0x7, 0x6, 0x1, [0xcc, 0x9, 0xe, 0xa, 0x9, 0x0]}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x2, 0x9, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x3, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x9c30325041c26784, 0x6, 0x3, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0x6}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0xc7, 0x7, 0xb6, 0x40, 0x2}, 0x54, &(0x7f0000000200)=ANY=[@ANYBLOB="050f5400024810028cc36da64157b5eb0c7cfa840cf2a26ed7b4149644bd7a56e157fc7a6c9da60b7921d4be8dc4210d4d6a6050bc14bd1466a14bd8700000000000000000000000000000000000000000000000f8aadcca15c3fc63244c54d5ee83efac409fd042027f55926431e0e6c026aecdfb93cf5734660606ea1ca5a18b528d3b9cc73aaabc2d38367fb3c0514473c22291ab8853"], 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x3c0a}}]}) executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000002b40)=0x9, 0x4) sendmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="f74406d3a34aa7be0000", @ANYRES16=r0], 0x10, 0x200400c4}, 0x34044810) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8010, r2, 0x0) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) listen(r5, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008094) close(0x4) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x18a) open(&(0x7f0000000180)='./file0\x00', 0x410083, 0x1c4) r7 = landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = socket$unix(0x1, 0x2, 0x0) connect$unix(r9, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) program crashed: WARNING in shmem_rmdir bisect: the chunk can be dropped bisect: split chunks (needed=true): <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-socket$inet_udp-setsockopt$inet_udp_int-sendmsg$unix-socket$unix-bind$unix-socket$unix-connect$unix-openat$cgroup_ro-write$binfmt_script-mmap-madvise-madvise-socket-bind$vsock_stream-listen-socket-connect$vsock_stream-setsockopt$sock_linger-sendmmsg-close-close-mkdirat-open-landlock_create_ruleset-landlock_restrict_self-socket$unix-bind$unix-socket$unix-connect$unix detailed listing: executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000002b40)=0x9, 0x4) sendmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="f74406d3a34aa7be0000", @ANYRES16=r0], 0x10, 0x200400c4}, 0x34044810) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8010, r2, 0x0) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) listen(r5, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008094) close(0x4) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x18a) open(&(0x7f0000000180)='./file0\x00', 0x410083, 0x1c4) r7 = landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = socket$unix(0x1, 0x2, 0x0) connect$unix(r9, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-mkdir-mount$incfs-chdir-chmod-syz_usb_connect$uac1-syz_usb_connect$cdc_ncm detailed listing: executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0xa) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x3c8) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106b1f01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030001030005490c240206e0"], 0x0) syz_usb_connect$cdc_ncm(0x1, 0xaa, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x2, 0x1, 0x0, 0x0, 0x2, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "84ae1d"}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xfd3, 0x2a7c, 0x5}, {0x6, 0x24, 0x1a, 0x200, 0x8}, [@dmm={0x7, 0x24, 0x14, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0xf, 0x9, 0x7}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x9, 0xfd, 0xb, 0x7, 0x9}, @country_functional={0x12, 0x24, 0x7, 0x6, 0x1, [0xcc, 0x9, 0xe, 0xa, 0x9, 0x0]}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x2, 0x9, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x3, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x9c30325041c26784, 0x6, 0x3, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0x6}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0xc7, 0x7, 0xb6, 0x40, 0x2}, 0x54, &(0x7f0000000200)=ANY=[@ANYBLOB="050f5400024810028cc36da64157b5eb0c7cfa840cf2a26ed7b4149644bd7a56e157fc7a6c9da60b7921d4be8dc4210d4d6a6050bc14bd1466a14bd8700000000000000000000000000000000000000000000000f8aadcca15c3fc63244c54d5ee83efac409fd042027f55926431e0e6c026aecdfb93cf5734660606ea1ca5a18b528d3b9cc73aaabc2d38367fb3c0514473c22291ab8853"], 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x3c0a}}]}) program crashed: WARNING in shmem_rmdir bisect: the chunk can be dropped bisect: split chunks (needed=true): <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 1 programs left: executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0xa) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x3c8) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106b1f01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030001030005490c240206e0"], 0x0) syz_usb_connect$cdc_ncm(0x1, 0xaa, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x2, 0x1, 0x0, 0x0, 0x2, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "84ae1d"}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xfd3, 0x2a7c, 0x5}, {0x6, 0x24, 0x1a, 0x200, 0x8}, [@dmm={0x7, 0x24, 0x14, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0xf, 0x9, 0x7}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x9, 0xfd, 0xb, 0x7, 0x9}, @country_functional={0x12, 0x24, 0x7, 0x6, 0x1, [0xcc, 0x9, 0xe, 0xa, 0x9, 0x0]}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x2, 0x9, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x3, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x9c30325041c26784, 0x6, 0x3, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0x6}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0xc7, 0x7, 0xb6, 0x40, 0x2}, 0x54, &(0x7f0000000200)=ANY=[@ANYBLOB="050f5400024810028cc36da64157b5eb0c7cfa840cf2a26ed7b4149644bd7a56e157fc7a6c9da60b7921d4be8dc4210d4d6a6050bc14bd1466a14bd8700000000000000000000000000000000000000000000000f8aadcca15c3fc63244c54d5ee83efac409fd042027f55926431e0e6c026aecdfb93cf5734660606ea1ca5a18b528d3b9cc73aaabc2d38367fb3c0514473c22291ab8853"], 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x3c0a}}]}) bisect: trying to concatenate bisect: concatenate 1 entries testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-mkdir-mount$incfs-chdir-chmod-syz_usb_connect$uac1-syz_usb_connect$cdc_ncm detailed listing: executing program 0: creat(&(0x7f0000000180)='./file0\x00', 0xa) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x3c8) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106b1f01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030001030005490c240206e0"], 0x0) syz_usb_connect$cdc_ncm(0x1, 0xaa, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x2, 0x1, 0x0, 0x0, 0x2, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "84ae1d"}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xfd3, 0x2a7c, 0x5}, {0x6, 0x24, 0x1a, 0x200, 0x8}, [@dmm={0x7, 0x24, 0x14, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0xf, 0x9, 0x7}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x9, 0xfd, 0xb, 0x7, 0x9}, @country_functional={0x12, 0x24, 0x7, 0x6, 0x1, [0xcc, 0x9, 0xe, 0xa, 0x9, 0x0]}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x2, 0x9, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x3, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x9c30325041c26784, 0x6, 0x3, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0x6}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0xc7, 0x7, 0xb6, 0x40, 0x2}, 0x54, &(0x7f0000000200)=ANY=[@ANYBLOB="050f5400024810028cc36da64157b5eb0c7cfa840cf2a26ed7b4149644bd7a56e157fc7a6c9da60b7921d4be8dc4210d4d6a6050bc14bd1466a14bd8700000000000000000000000000000000000000000000000f8aadcca15c3fc63244c54d5ee83efac409fd042027f55926431e0e6c026aecdfb93cf5734660606ea1ca5a18b528d3b9cc73aaabc2d38367fb3c0514473c22291ab8853"], 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x3c0a}}]}) program crashed: WARNING in shmem_rmdir bisect: concatenation succeeded found reproducer with 7 syscalls minimizing guilty program testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-mkdir-mount$incfs-chdir-chmod-syz_usb_connect$uac1 detailed listing: executing program 0: creat(&(0x7f0000000180)='./file0\x00', 0xa) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x3c8) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106b1f01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030001030005490c240206e0"], 0x0) program crashed: WARNING in shmem_rmdir testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-mkdir-mount$incfs-chdir-chmod detailed listing: executing program 0: creat(&(0x7f0000000180)='./file0\x00', 0xa) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x3c8) program crashed: WARNING in shmem_rmdir testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-mkdir-mount$incfs-chdir detailed listing: executing program 0: creat(&(0x7f0000000180)='./file0\x00', 0xa) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') program crashed: WARNING in shmem_rmdir testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-mkdir-mount$incfs detailed listing: executing program 0: creat(&(0x7f0000000180)='./file0\x00', 0xa) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) program crashed: WARNING in shmem_rmdir testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-mkdir detailed listing: executing program 0: creat(&(0x7f0000000180)='./file0\x00', 0xa) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-mount$incfs detailed listing: executing program 0: creat(&(0x7f0000000180)='./file0\x00', 0xa) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs detailed listing: executing program 0: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) program crashed: WARNING in shmem_rmdir testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs detailed listing: executing program 0: mkdir(0x0, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs detailed listing: executing program 0: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(0x0, &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs detailed listing: executing program 0: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', 0x0, &(0x7f0000000840), 0x1004002, 0x0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs detailed listing: executing program 0: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', 0x0, 0x1004002, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs program crashed: WARNING in shmem_rmdir simplifying C reproducer testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs program crashed: WARNING in shmem_rmdir testing compiled C program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs program did not crash testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs program crashed: WARNING in shmem_rmdir testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs program did not crash testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs program crashed: WARNING in shmem_rmdir testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs program crashed: WARNING in shmem_rmdir testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs program crashed: WARNING in shmem_rmdir testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs program crashed: WARNING in shmem_rmdir testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs program crashed: WARNING in shmem_rmdir testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs program crashed: WARNING in shmem_rmdir testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs program did not crash testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs program crashed: WARNING in shmem_rmdir testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs program crashed: WARNING in shmem_rmdir testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs program crashed: WARNING in shmem_rmdir testing program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs detailed listing: executing program 0: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) program crashed: WARNING in shmem_rmdir validation run: crashed=true testing program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs detailed listing: executing program 0: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) program crashed: WARNING in shmem_rmdir validation run: crashed=true testing program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs detailed listing: executing program 0: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) program crashed: WARNING in shmem_rmdir validation run: crashed=true reproducing took 37m40.182370841s repro crashed as (corrupted=false): veth0_vlan: entered promiscuous mode veth1_macvtap: entered promiscuous mode ------------[ cut here ]------------ WARNING: CPU: 1 PID: 376 at fs/inode.c:340 drop_nlink+0xce/0x110 fs/inode.c:340 Modules linked in: CPU: 1 UID: 0 PID: 376 Comm: syz-executor Not tainted syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 RIP: 0010:drop_nlink+0xce/0x110 fs/inode.c:340 Code: 04 00 00 be 08 00 00 00 e8 cf 12 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f2 83 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c RSP: 0018:ffffc90000f3fc60 EFLAGS: 00010293 RAX: ffffffff81f23fae RBX: ffff888108ffb838 RCX: ffff88810dfd0000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffffc90000f3fc88 R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: fffff520001e7f7c R12: dffffc0000000000 R13: 1ffff110211ff710 R14: ffff888108ffb880 R15: 0000000000000000 FS: 0000555581e35500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b34363fff CR3: 0000000115444000 CR4: 00000000003526b0 Call Trace: shmem_rmdir+0x5f/0x90 mm/shmem.c:3763 vfs_rmdir+0x3e0/0x560 fs/namei.c:4348 incfs_kill_sb+0x109/0x230 fs/incfs/vfs.c:1968 deactivate_locked_super+0xd8/0x2a0 fs/super.c:478 deactivate_super+0xb8/0xe0 fs/super.c:511 cleanup_mnt+0x406/0x4a0 fs/namespace.c:1380 __cleanup_mnt+0x1d/0x40 fs/namespace.c:1387 task_work_run+0x1e5/0x260 kernel/task_work.c:246 resume_user_mode_work+0x35/0x50 include/linux/resume_user_mode.h:50 exit_to_user_mode_loop kernel/entry/common.c:114 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x63/0xb0 kernel/entry/common.c:218 do_syscall_64+0x63/0xf0 arch/x86/entry/common.c:84 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f58b479e097 Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 RSP: 002b:00007ffcfc8abdc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f58b479e097 RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcfc8abe80 RBP: 00007ffcfc8abe80 R08: 00007ffcfc8ace80 R09: 00000000ffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcfc8acf10 R13: 00007f58b48321ca R14: 0000000000008b3e R15: 00007ffcfc8acf50 ---[ end trace 0000000000000000 ]--- ================================================================== BUG: KASAN: null-ptr-deref in instrument_atomic_read_write include/linux/instrumented.h:96 [inline] BUG: KASAN: null-ptr-deref in atomic_inc_return include/linux/atomic/atomic-instrumented.h:453 [inline] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 fs/inode.c:452 Write of size 4 at addr 0000000000000168 by task syz-executor/376 CPU: 0 UID: 0 PID: 376 Comm: syz-executor Tainted: G W syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 Call Trace: __dump_stack+0x21/0x30 lib/dump_stack.c:94 dump_stack_lvl+0x140/0x1c0 lib/dump_stack.c:120 print_report+0x3d/0x70 mm/kasan/report.c:484 kasan_report+0x162/0x1a0 mm/kasan/report.c:594 check_region_inline mm/kasan/generic.c:-1 [inline] kasan_check_range+0x25a/0x2b0 mm/kasan/generic.c:189 __kasan_check_write+0x18/0x20 mm/kasan/shadow.c:37 instrument_atomic_read_write include/linux/instrumented.h:96 [inline] atomic_inc_return include/linux/atomic/atomic-instrumented.h:453 [inline] ihold+0x24/0x70 fs/inode.c:452 d_delete_notify include/linux/fsnotify.h:357 [inline] vfs_rmdir+0x26a/0x560 fs/namei.c:4361 incfs_kill_sb+0x109/0x230 fs/incfs/vfs.c:1968 deactivate_locked_super+0xd8/0x2a0 fs/super.c:478 deactivate_super+0xb8/0xe0 fs/super.c:511 cleanup_mnt+0x406/0x4a0 fs/namespace.c:1380 __cleanup_mnt+0x1d/0x40 fs/namespace.c:1387 task_work_run+0x1e5/0x260 kernel/task_work.c:246 resume_user_mode_work+0x35/0x50 include/linux/resume_user_mode.h:50 exit_to_user_mode_loop kernel/entry/common.c:114 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x63/0xb0 kernel/entry/common.c:218 do_syscall_64+0x63/0xf0 arch/x86/entry/common.c:84 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f58b479e097 Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 RSP: 002b:00007ffcfc8abdc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f58b479e097 RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcfc8abe80 RBP: 00007ffcfc8abe80 R08: 00007ffcfc8ace80 R09: 00000000ffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcfc8acf10 R13: 00007f58b48321ca R14: 0000000000008b3e R15: 00007ffcfc8acf50 ================================================================== BUG: kernel NULL pointer dereference, address: 0000000000000168 #PF: supervisor write access in kernel mode #PF: error_code(0x0002) - not-present page PGD 8000000116ee7067 P4D 8000000116ee7067 PUD 0 Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI CPU: 0 UID: 0 PID: 376 Comm: syz-executor Tainted: G B W syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 Tainted: [B]=BAD_PAGE, [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 RIP: 0010:arch_atomic_add_return arch/x86/include/asm/atomic.h:85 [inline] RIP: 0010:raw_atomic_add_return include/linux/atomic/atomic-arch-fallback.h:564 [inline] RIP: 0010:raw_atomic_inc_return include/linux/atomic/atomic-arch-fallback.h:1020 [inline] RIP: 0010:atomic_inc_return include/linux/atomic/atomic-instrumented.h:454 [inline] RIP: 0010:ihold+0x2a/0x70 fs/inode.c:452 Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd 7a 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 09 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed RSP: 0018:ffffc90000f3fca0 EFLAGS: 00010246 RAX: ffff88810dfd0000 RBX: 0000000000000000 RCX: ffff88810dfd0000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffffc90000f3fcb0 R08: ffffffff88bba947 R09: 1ffffffff1177528 R10: dffffc0000000000 R11: fffffbfff1177529 R12: ffff888108ffb844 R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 FS: 0000555581e35500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000168 CR3: 0000000115444000 CR4: 00000000003526b0 Call Trace: d_delete_notify include/linux/fsnotify.h:357 [inline] vfs_rmdir+0x26a/0x560 fs/namei.c:4361 incfs_kill_sb+0x109/0x230 fs/incfs/vfs.c:1968 deactivate_locked_super+0xd8/0x2a0 fs/super.c:478 deactivate_super+0xb8/0xe0 fs/super.c:511 cleanup_mnt+0x406/0x4a0 fs/namespace.c:1380 __cleanup_mnt+0x1d/0x40 fs/namespace.c:1387 task_work_run+0x1e5/0x260 kernel/task_work.c:246 resume_user_mode_work+0x35/0x50 include/linux/resume_user_mode.h:50 exit_to_user_mode_loop kernel/entry/common.c:114 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x63/0xb0 kernel/entry/common.c:218 do_syscall_64+0x63/0xf0 arch/x86/entry/common.c:84 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f58b479e097 Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 RSP: 002b:00007ffcfc8abdc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f58b479e097 RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcfc8abe80 RBP: 00007ffcfc8abe80 R08: 00007ffcfc8ace80 R09: 00000000ffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcfc8acf10 R13: 00007f58b48321ca R14: 0000000000008b3e R15: 00007ffcfc8acf50 Modules linked in: CR2: 0000000000000168 ---[ end trace 0000000000000000 ]--- RIP: 0010:arch_atomic_add_return arch/x86/include/asm/atomic.h:85 [inline] RIP: 0010:raw_atomic_add_return include/linux/atomic/atomic-arch-fallback.h:564 [inline] RIP: 0010:raw_atomic_inc_return include/linux/atomic/atomic-arch-fallback.h:1020 [inline] RIP: 0010:atomic_inc_return include/linux/atomic/atomic-instrumented.h:454 [inline] RIP: 0010:ihold+0x2a/0x70 fs/inode.c:452 Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd 7a 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 09 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed RSP: 0018:ffffc90000f3fca0 EFLAGS: 00010246 RAX: ffff88810dfd0000 RBX: 0000000000000000 RCX: ffff88810dfd0000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffffc90000f3fcb0 R08: ffffffff88bba947 R09: 1ffffffff1177528 R10: dffffc0000000000 R11: fffffbfff1177529 R12: ffff888108ffb844 R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 FS: 0000555581e35500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000168 CR3: 0000000115444000 CR4: 00000000003526b0 ---------------- Code disassembly (best guess): 0: f3 0f 1e fa endbr64 4: 55 push %rbp 5: 48 89 e5 mov %rsp,%rbp 8: 41 56 push %r14 a: 53 push %rbx b: 48 89 fb mov %rdi,%rbx e: e8 dd 7a 95 ff call 0xff957af0 13: 48 8d bb 68 01 00 00 lea 0x168(%rbx),%rdi 1a: be 04 00 00 00 mov $0x4,%esi 1f: e8 8c 09 ee ff call 0xffee09b0 24: 41 be 01 00 00 00 mov $0x1,%r14d * 2a: f0 44 0f c1 b3 68 01 lock xadd %r14d,0x168(%rbx) <-- trapping instruction 31: 00 00 33: 41 ff c6 inc %r14d 36: bf 02 00 00 00 mov $0x2,%edi 3b: 44 89 f6 mov %r14d,%esi 3e: e8 .byte 0xe8 3f: ed in (%dx),%eax final repro crashed as (corrupted=false): veth0_vlan: entered promiscuous mode veth1_macvtap: entered promiscuous mode ------------[ cut here ]------------ WARNING: CPU: 1 PID: 376 at fs/inode.c:340 drop_nlink+0xce/0x110 fs/inode.c:340 Modules linked in: CPU: 1 UID: 0 PID: 376 Comm: syz-executor Not tainted syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 RIP: 0010:drop_nlink+0xce/0x110 fs/inode.c:340 Code: 04 00 00 be 08 00 00 00 e8 cf 12 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f2 83 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c RSP: 0018:ffffc90000f3fc60 EFLAGS: 00010293 RAX: ffffffff81f23fae RBX: ffff888108ffb838 RCX: ffff88810dfd0000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffffc90000f3fc88 R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: fffff520001e7f7c R12: dffffc0000000000 R13: 1ffff110211ff710 R14: ffff888108ffb880 R15: 0000000000000000 FS: 0000555581e35500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b34363fff CR3: 0000000115444000 CR4: 00000000003526b0 Call Trace: shmem_rmdir+0x5f/0x90 mm/shmem.c:3763 vfs_rmdir+0x3e0/0x560 fs/namei.c:4348 incfs_kill_sb+0x109/0x230 fs/incfs/vfs.c:1968 deactivate_locked_super+0xd8/0x2a0 fs/super.c:478 deactivate_super+0xb8/0xe0 fs/super.c:511 cleanup_mnt+0x406/0x4a0 fs/namespace.c:1380 __cleanup_mnt+0x1d/0x40 fs/namespace.c:1387 task_work_run+0x1e5/0x260 kernel/task_work.c:246 resume_user_mode_work+0x35/0x50 include/linux/resume_user_mode.h:50 exit_to_user_mode_loop kernel/entry/common.c:114 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x63/0xb0 kernel/entry/common.c:218 do_syscall_64+0x63/0xf0 arch/x86/entry/common.c:84 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f58b479e097 Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 RSP: 002b:00007ffcfc8abdc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f58b479e097 RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcfc8abe80 RBP: 00007ffcfc8abe80 R08: 00007ffcfc8ace80 R09: 00000000ffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcfc8acf10 R13: 00007f58b48321ca R14: 0000000000008b3e R15: 00007ffcfc8acf50 ---[ end trace 0000000000000000 ]--- ================================================================== BUG: KASAN: null-ptr-deref in instrument_atomic_read_write include/linux/instrumented.h:96 [inline] BUG: KASAN: null-ptr-deref in atomic_inc_return include/linux/atomic/atomic-instrumented.h:453 [inline] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 fs/inode.c:452 Write of size 4 at addr 0000000000000168 by task syz-executor/376 CPU: 0 UID: 0 PID: 376 Comm: syz-executor Tainted: G W syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 Call Trace: __dump_stack+0x21/0x30 lib/dump_stack.c:94 dump_stack_lvl+0x140/0x1c0 lib/dump_stack.c:120 print_report+0x3d/0x70 mm/kasan/report.c:484 kasan_report+0x162/0x1a0 mm/kasan/report.c:594 check_region_inline mm/kasan/generic.c:-1 [inline] kasan_check_range+0x25a/0x2b0 mm/kasan/generic.c:189 __kasan_check_write+0x18/0x20 mm/kasan/shadow.c:37 instrument_atomic_read_write include/linux/instrumented.h:96 [inline] atomic_inc_return include/linux/atomic/atomic-instrumented.h:453 [inline] ihold+0x24/0x70 fs/inode.c:452 d_delete_notify include/linux/fsnotify.h:357 [inline] vfs_rmdir+0x26a/0x560 fs/namei.c:4361 incfs_kill_sb+0x109/0x230 fs/incfs/vfs.c:1968 deactivate_locked_super+0xd8/0x2a0 fs/super.c:478 deactivate_super+0xb8/0xe0 fs/super.c:511 cleanup_mnt+0x406/0x4a0 fs/namespace.c:1380 __cleanup_mnt+0x1d/0x40 fs/namespace.c:1387 task_work_run+0x1e5/0x260 kernel/task_work.c:246 resume_user_mode_work+0x35/0x50 include/linux/resume_user_mode.h:50 exit_to_user_mode_loop kernel/entry/common.c:114 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x63/0xb0 kernel/entry/common.c:218 do_syscall_64+0x63/0xf0 arch/x86/entry/common.c:84 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f58b479e097 Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 RSP: 002b:00007ffcfc8abdc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f58b479e097 RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcfc8abe80 RBP: 00007ffcfc8abe80 R08: 00007ffcfc8ace80 R09: 00000000ffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcfc8acf10 R13: 00007f58b48321ca R14: 0000000000008b3e R15: 00007ffcfc8acf50 ================================================================== BUG: kernel NULL pointer dereference, address: 0000000000000168 #PF: supervisor write access in kernel mode #PF: error_code(0x0002) - not-present page PGD 8000000116ee7067 P4D 8000000116ee7067 PUD 0 Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI CPU: 0 UID: 0 PID: 376 Comm: syz-executor Tainted: G B W syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 Tainted: [B]=BAD_PAGE, [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 RIP: 0010:arch_atomic_add_return arch/x86/include/asm/atomic.h:85 [inline] RIP: 0010:raw_atomic_add_return include/linux/atomic/atomic-arch-fallback.h:564 [inline] RIP: 0010:raw_atomic_inc_return include/linux/atomic/atomic-arch-fallback.h:1020 [inline] RIP: 0010:atomic_inc_return include/linux/atomic/atomic-instrumented.h:454 [inline] RIP: 0010:ihold+0x2a/0x70 fs/inode.c:452 Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd 7a 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 09 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed RSP: 0018:ffffc90000f3fca0 EFLAGS: 00010246 RAX: ffff88810dfd0000 RBX: 0000000000000000 RCX: ffff88810dfd0000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffffc90000f3fcb0 R08: ffffffff88bba947 R09: 1ffffffff1177528 R10: dffffc0000000000 R11: fffffbfff1177529 R12: ffff888108ffb844 R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 FS: 0000555581e35500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000168 CR3: 0000000115444000 CR4: 00000000003526b0 Call Trace: d_delete_notify include/linux/fsnotify.h:357 [inline] vfs_rmdir+0x26a/0x560 fs/namei.c:4361 incfs_kill_sb+0x109/0x230 fs/incfs/vfs.c:1968 deactivate_locked_super+0xd8/0x2a0 fs/super.c:478 deactivate_super+0xb8/0xe0 fs/super.c:511 cleanup_mnt+0x406/0x4a0 fs/namespace.c:1380 __cleanup_mnt+0x1d/0x40 fs/namespace.c:1387 task_work_run+0x1e5/0x260 kernel/task_work.c:246 resume_user_mode_work+0x35/0x50 include/linux/resume_user_mode.h:50 exit_to_user_mode_loop kernel/entry/common.c:114 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x63/0xb0 kernel/entry/common.c:218 do_syscall_64+0x63/0xf0 arch/x86/entry/common.c:84 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f58b479e097 Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 RSP: 002b:00007ffcfc8abdc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f58b479e097 RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcfc8abe80 RBP: 00007ffcfc8abe80 R08: 00007ffcfc8ace80 R09: 00000000ffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcfc8acf10 R13: 00007f58b48321ca R14: 0000000000008b3e R15: 00007ffcfc8acf50 Modules linked in: CR2: 0000000000000168 ---[ end trace 0000000000000000 ]--- RIP: 0010:arch_atomic_add_return arch/x86/include/asm/atomic.h:85 [inline] RIP: 0010:raw_atomic_add_return include/linux/atomic/atomic-arch-fallback.h:564 [inline] RIP: 0010:raw_atomic_inc_return include/linux/atomic/atomic-arch-fallback.h:1020 [inline] RIP: 0010:atomic_inc_return include/linux/atomic/atomic-instrumented.h:454 [inline] RIP: 0010:ihold+0x2a/0x70 fs/inode.c:452 Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd 7a 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 09 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed RSP: 0018:ffffc90000f3fca0 EFLAGS: 00010246 RAX: ffff88810dfd0000 RBX: 0000000000000000 RCX: ffff88810dfd0000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffffc90000f3fcb0 R08: ffffffff88bba947 R09: 1ffffffff1177528 R10: dffffc0000000000 R11: fffffbfff1177529 R12: ffff888108ffb844 R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 FS: 0000555581e35500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000168 CR3: 0000000115444000 CR4: 00000000003526b0 ---------------- Code disassembly (best guess): 0: f3 0f 1e fa endbr64 4: 55 push %rbp 5: 48 89 e5 mov %rsp,%rbp 8: 41 56 push %r14 a: 53 push %rbx b: 48 89 fb mov %rdi,%rbx e: e8 dd 7a 95 ff call 0xff957af0 13: 48 8d bb 68 01 00 00 lea 0x168(%rbx),%rdi 1a: be 04 00 00 00 mov $0x4,%esi 1f: e8 8c 09 ee ff call 0xffee09b0 24: 41 be 01 00 00 00 mov $0x1,%r14d * 2a: f0 44 0f c1 b3 68 01 lock xadd %r14d,0x168(%rbx) <-- trapping instruction 31: 00 00 33: 41 ff c6 inc %r14d 36: bf 02 00 00 00 mov $0x2,%edi 3b: 44 89 f6 mov %r14d,%esi 3e: e8 .byte 0xe8 3f: ed in (%dx),%eax