Extracting prog: 8m20.456548231s
Minimizing prog: 20m22.65043001s
Simplifying prog options: 2m47.401237928s
Extracting C: 28.46017275s
Simplifying C: 0s


extracting reproducer from 59 programs
testing a last program of every proc
single: executing 14 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat$tun-ioctl$TUNSETIFF-socket$kcm-mkdirat-mount-openat-write-ioctl$SIOCSIFHWADDR-write$tun-prctl$PR_SET_SECCOMP-prctl$PR_SET_MM_MAP-io_uring_setup-prlimit64-setuid-bpf$MAP_CREATE-syz_open_procfs-read$FUSE-sendmsg$NFT_BATCH-io_uring_setup-mknodat$loop-io_uring_enter-openat$dir-fanotify_init-fanotify_mark-faccessat-capset-bpf$MAP_CREATE-mkdirat-mount$overlay
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x48c81, 0x0)
write(r2, &(0x7f0000000340)="abdcbf42", 0x4)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff0180c200000e88a80000810000020820450000240000400000119078ac1ed5b2a0d8e530b24f17c100109078220400010000009dc6fc8f28eb49fb1066e6f0b9443d6d00"], 0x3a)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xb53a, 0xc000, 0x8, 0x2bb})
prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0)
setuid(0xee00)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00')
read$FUSE(r3, &(0x7f0000002080)={0x2020}, 0x202d)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc9c5, 0x2000, 0x8, 0xe1})
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
io_uring_enter(r4, 0x12a, 0x14, 0x17, 0x0, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
r6 = fanotify_init(0x1, 0x101000)
fanotify_mark(r6, 0x40, 0x4800003e, r5, 0x0)
faccessat(r5, &(0x7f0000000040)='./bus\x00', 0x121)
capset(0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000feffffff"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$BTRFS_IOC_QGROUP_ASSIGN-signalfd-ioctl$KDENABIO-ioctl$TIOCSETD-getsockopt$inet_pktinfo-bpf$BPF_GET_BTF_INFO-bpf$PROG_LOAD-lstat-statx-getresgid-getresgid-fstat-getgid-lsetxattr$system_posix_acl-mount$fuseblk-rmdir-ioctl$GIO_SCRNMAP-syz_init_net_socket$bt_hci-accept$phonet_pipe-ioctl-socket$rxrpc-setsockopt$RXRPC_SECURITY_KEYRING-ioctl$FE_DISEQC_RESET_OVERLOAD-read$FUSE-write$FUSE_DIRENTPLUS-symlink-connect$phonet_pipe-ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD-ioctl$XFS_IOC_FSGROWFSDATA-waitid$P_PIDFD
detailed listing:
executing program 0:
ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000000)={0x1, 0x3, 0x6})
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8)
ioctl$KDENABIO(r0, 0x4b36)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x8)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={<r1=>0x0, @initdev, @remote}, &(0x7f0000000240)=0xc)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r0, 0x20, &(0x7f0000000400)={&(0x7f00000002c0)=""/72, 0x48, <r2=>0x0, &(0x7f0000000340)=""/161, 0xa1}}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1a, &(0x7f00000000c0)=@raw=[@alu={0x4, 0x1, 0x6, 0x8, 0x8, 0x30, 0x8}, @alu={0x0, 0x1, 0x2, 0x5, 0x1, 0xffffffffffffffc0, 0x8}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fffffff}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xc}, @alu={0x7, 0x1, 0x3, 0xa, 0x4, 0x80, 0x1}, @generic={0x7, 0x5, 0x5, 0x17, 0x3}, @map_fd={0x18, 0x9, 0x1, 0x0, r0}], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x16, '\x00', r1, @fallback=0xa, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0xf, 0x63, 0xfffffffe}, 0x10, r2, r0, 0x1, 0x0, &(0x7f0000000480)=[{0x5, 0x4, 0x7, 0x2}], 0x10, 0x1000}, 0x94)
lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0})
statx(r0, &(0x7f00000006c0)='./file0\x00', 0x2000, 0x4, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0})
getresgid(&(0x7f0000000800)=<r8=>0x0, &(0x7f0000000840), &(0x7f0000000880)=<r9=>0x0)
getresgid(&(0x7f00000008c0), &(0x7f0000000900)=<r10=>0x0, &(0x7f0000000940))
fstat(r3, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
r12 = getgid()
lsetxattr$system_posix_acl(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000a00)={{}, {0x1, 0x1}, [{0x2, 0x3, r4}], {0x4, 0x6}, [{0x8, 0x1, r7}, {0x8, 0x3, r9}, {0x8, 0x9, r10}, {0x8, 0x5, 0xee00}, {0x8, 0x6, r11}, {0x8, 0x3, r12}], {0x10, 0x3}, {0x20, 0x4}}, 0x5c, 0x0)
mount$fuseblk(&(0x7f0000000a80), &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x2000000, &(0x7f0000000b40)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7}}], [{@fsmagic={'fsmagic', 0x3d, 0x4}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x0, 0x34, 0x36, 0x39, 0x66, 0x61, 0x37], 0x2d, [0x66, 0x66, 0x36], 0x2d, [0x34, 0x33, 0x35, 0x65], 0x2d, [0x35, 0x38, 0x61, 0x34], 0x2d, [0xc, 0x30, 0x62, 0x38, 0x32, 0x36, 0x35, 0x62]}}}, {@obj_user}, {@uid_lt={'uid<', r6}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}})
rmdir(&(0x7f0000000c80)='\x00')
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000cc0)=""/229)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r13 = accept$phonet_pipe(r0, &(0x7f0000000dc0), &(0x7f0000000e00)=0x10)
ioctl(r13, 0x4, &(0x7f0000000e40)="58c651937a5b7de60c60ae1df284f86e93d4eb1162c1ea9638d720843f9e24ef3c6ca79ad3286227127782f0c46e78b1dafea30ad37775eb904849908865b10004e71ef5692ff02f8a627c7e88df01342d9d62423e6fba4c9f2169b6fe7858dd5595140160147e9b6216ea9ae02aed24e107eefc7b75581a5ae860786c301a814eb64cb8658d03dcaf55d79477dc9435dd8420bfbeb6098ef9559bd0b2c3a21a0a")
r14 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEYRING(r14, 0x110, 0x2, &(0x7f0000000f00)='-*J)&[\x00', 0x7)
ioctl$FE_DISEQC_RESET_OVERLOAD(r0, 0x6f3e, 0x0)
read$FUSE(r0, &(0x7f0000000f40)={0x2020, 0x0, <r15=>0x0}, 0x2020)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000002f80)={0xb0, 0x0, r15, [{{0x5, 0x0, 0xe, 0x5, 0x7, 0x4, {0x0, 0xffffffffffffffff, 0xfffffffffffffff7, 0x4, 0x6, 0xfffffffffffff38c, 0x4, 0xffffff01, 0x4, 0x6000, 0x7, r6, r8, 0xffffffff, 0xffffffff}}, {0x4, 0x3d, 0x4, 0x8, 'root'}}]}, 0xb0)
symlink(&(0x7f0000003040)='./file0\x00', &(0x7f0000003080)='./file0\x00')
connect$phonet_pipe(r0, &(0x7f00000030c0)={0x23, 0x9, 0x8, 0x40}, 0x10)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000003100)={0x1, 'bond_slave_0\x00'})
ioctl$XFS_IOC_FSGROWFSDATA(r13, 0x4010586e, &(0x7f0000003140)={0xda7, 0xfffffff8})
waitid$P_PIDFD(0x3, r0, &(0x7f0000003180), 0x2, &(0x7f0000003200))

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$l2tp-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_GET_ADDR-sendmsg$L2TP_CMD_TUNNEL_CREATE
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) (async)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r2, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x40}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000041}, 0x2) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa080019"], 0x58}}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getrandom-madvise-getrandom-mkdirat-mount-openat-write-mlock
detailed listing:
executing program 0:
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
getrandom(&(0x7f0000000100)=""/72, 0x48, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='1', 0x1)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-socket-openat$kvm-socket-socket$nl_route-socket$nl_route-socket$nl_route-bpf$MAP_CREATE-bpf$MAP_CREATE-socket$netlink-socket-sendmsg$NL80211_CMD_CRIT_PROTOCOL_START-getsockname$packet-sendmsg$nl_route-sendmsg$nl_route-openat$binfmt_register-write$binfmt_register-bpf$PROG_LOAD-bpf$MAP_UPDATE_ELEM_TAIL_CALL-socket$inet_tcp-ioctl$sock_SIOCGIFINDEX-bpf$BPF_LINK_CREATE_XDP-syz_emit_ethernet-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
socket(0x200000000000011, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0)
write$binfmt_register(r4, &(0x7f0000000400)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x5, 0x3a, '@&$(:&&]}', 0x3a, 'syz_tun\x00', 0x3a, './sys', 0x3a, [0x43, 0x4f, 0x43, 0x50, 0x50, 0x50, 0x46, 0xa0, 0x46, 0x4f]}, 0x40)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r5}, 0x20)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r5, r7, 0x25, 0x0, @val=@tcx={@void, @value=r5}}, 0x1c)
syz_emit_ethernet(0xd81, &(0x7f00000002c0)=ANY=[], 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0, <r8=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r5}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r8}, &(0x7f00000002c0), &(0x7f0000000340)=r5}, 0x20)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/block/sda/device/scsi_disk/0:0:0:0/max_write_same_blocks\x00', 0x2, 0x0)
write(r9, &(0x7f0000000000)='4\x0094', 0x4)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-socket-openat$kvm-socket-socket$nl_route-socket$nl_route-socket$nl_route-bpf$MAP_CREATE-bpf$MAP_CREATE-socket$netlink-socket-sendmsg$NL80211_CMD_CRIT_PROTOCOL_START-getsockname$packet-sendmsg$nl_route-sendmsg$nl_route-openat$binfmt_register-write$binfmt_register-bpf$PROG_LOAD-bpf$MAP_UPDATE_ELEM_TAIL_CALL-socket$inet_tcp-ioctl$sock_SIOCGIFINDEX-bpf$BPF_LINK_CREATE_XDP-syz_emit_ethernet-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
socket(0x200000000000011, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0)
write$binfmt_register(r4, &(0x7f0000000400)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x5, 0x3a, '@&$(:&&]}', 0x3a, 'syz_tun\x00', 0x3a, './sys', 0x3a, [0x43, 0x4f, 0x43, 0x50, 0x50, 0x50, 0x46, 0xa0, 0x46, 0x4f]}, 0x40)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r5}, 0x20)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r5, r7, 0x25, 0x0, @val=@tcx={@void, @value=r5}}, 0x1c)
syz_emit_ethernet(0xd81, &(0x7f00000002c0)=ANY=[], 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0, <r8=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r5}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r8}, &(0x7f00000002c0), &(0x7f0000000340)=r5}, 0x20)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/block/sda/device/scsi_disk/0:0:0:0/max_write_same_blocks\x00', 0x2, 0x0)
write(r9, &(0x7f0000000000)='4\x0094', 0x4)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-socket$kcm-open_tree-openat$audio-openat$sw_sync_info-openat$cgroup_ro-ioctl$SOUND_MIXER_READ_DEVMASK-fchdir-openat$cgroup_ro-io_setup-mount_setattr-close-socket$inet_mptcp-setsockopt$inet_int-sendmsg$inet
detailed listing:
executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@migrate={0x50, 0x21, 0x1, 0x70bd29, 0x25dfdbfc, {{@in6=@mcast1, @in6=@mcast1, 0x4e21, 0x0, 0x4e21, 0x9ffd, 0x7, 0x180, 0x1a0, 0x1d}, 0x6e6ba8, 0x4b75cd6ef3e93cb3}}, 0x50}, 0x1, 0x0, 0x0, 0x24040810}, 0x20004040) (async)
r1 = socket$kcm(0x2b, 0x1, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) (async)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000200)='devices.list\x00', 0x0, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f00000001c0)) (async)
fchdir(r2) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async)
io_setup(0xffff7fff, &(0x7f0000000000))
mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x1100, &(0x7f0000000100)={0x5, 0x8, 0x100000}, 0x20) (async)
close(0x3) (async)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000040)=0x8001, 0x4) (async)
sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4004, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm-socket$kcm-open_tree-openat$audio-openat$sw_sync_info-openat$cgroup_ro-ioctl$SOUND_MIXER_READ_DEVMASK-fchdir-openat$cgroup_ro-io_setup-mount_setattr-close-socket$inet_mptcp-setsockopt$inet_int-sendmsg$inet
detailed listing:
executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@migrate={0x50, 0x21, 0x1, 0x70bd29, 0x25dfdbfc, {{@in6=@mcast1, @in6=@mcast1, 0x4e21, 0x0, 0x4e21, 0x9ffd, 0x7, 0x180, 0x1a0, 0x1d}, 0x6e6ba8, 0x4b75cd6ef3e93cb3}}, 0x50}, 0x1, 0x0, 0x0, 0x24040810}, 0x20004040) (async)
r1 = socket$kcm(0x2b, 0x1, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) (async)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000200)='devices.list\x00', 0x0, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f00000001c0)) (async)
fchdir(r2) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async)
io_setup(0xffff7fff, &(0x7f0000000000))
mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x1100, &(0x7f0000000100)={0x5, 0x8, 0x100000}, 0x20) (async)
close(0x3) (async)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000040)=0x8001, 0x4) (async)
sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4004, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$CEC_S_MODE-socket-socket$packet-bind$packet-syz_genetlink_get_family_id$tipc2-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$NL802154_CMD_SET_TX_POWER-mkdirat-socket-sendmmsg$inet-mkdirat-mount-socket$nl_route
detailed listing:
executing program 0:
ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000040)=0x33f4)
r0 = socket(0x2c, 0x4, 0x6be6)
r1 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x840)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x1}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="a7", 0x1}], 0x1e}}], 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x7)
mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=rdma,vers=3,mountport=2049,mountproto=rdma\x00')
socket$nl_route(0x10, 0x3, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$CEC_S_MODE-socket-socket$packet-bind$packet-syz_genetlink_get_family_id$tipc2-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$NL802154_CMD_SET_TX_POWER-mkdirat-socket-sendmmsg$inet-mkdirat-mount-socket$nl_route
detailed listing:
executing program 0:
ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000040)=0x33f4)
r0 = socket(0x2c, 0x4, 0x6be6)
r1 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x840)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x1}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="a7", 0x1}], 0x1e}}], 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x7)
mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=rdma,vers=3,mountport=2049,mountproto=rdma\x00')
socket$nl_route(0x10, 0x3, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket$nl_route-prctl$PR_SET_IO_FLUSHER-sendmsg$nl_route-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-mmap-bind$inet-listen-mkdirat-mount
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x240458c0}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r2, 0x100000000)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(r0, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x2000042, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')

program crashed: WARNING in smb2_add_credits
single: successfully extracted reproducer
found reproducer with 11 syscalls
minimizing guilty program
testing program (duration=45.237181297s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket$nl_route-prctl$PR_SET_IO_FLUSHER-sendmsg$nl_route-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-mmap-bind$inet-listen-mkdirat
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x240458c0}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r2, 0x100000000)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(r0, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)

program did not crash
testing program (duration=45.237181297s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket$nl_route-prctl$PR_SET_IO_FLUSHER-sendmsg$nl_route-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-mmap-bind$inet-listen-mount
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x240458c0}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r2, 0x100000000)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(r0, 0xa)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x2000042, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')

program did not crash
testing program (duration=45.237181297s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket$nl_route-prctl$PR_SET_IO_FLUSHER-sendmsg$nl_route-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-mmap-bind$inet-mkdirat-mount
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x240458c0}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r2, 0x100000000)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x2000042, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')

program did not crash
testing program (duration=45.237181297s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket$nl_route-prctl$PR_SET_IO_FLUSHER-sendmsg$nl_route-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-mmap-listen-mkdirat-mount
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x240458c0}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r2, 0x100000000)
listen(r0, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x2000042, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')

program did not crash
testing program (duration=45.237181297s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket$nl_route-prctl$PR_SET_IO_FLUSHER-sendmsg$nl_route-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-bind$inet-listen-mkdirat-mount
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x240458c0}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(r0, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x2000042, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')

program did not crash
testing program (duration=45.237181297s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket$nl_route-prctl$PR_SET_IO_FLUSHER-sendmsg$nl_route-syz_open_dev$dri-mmap-bind$inet-listen-mkdirat-mount
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x240458c0}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r2, 0x100000000)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(r0, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x2000042, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')

program did not crash
testing program (duration=45.237181297s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket$nl_route-prctl$PR_SET_IO_FLUSHER-sendmsg$nl_route-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-mmap-bind$inet-listen-mkdirat-mount
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x240458c0}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x12, 0xffffffffffffffff, 0x100000000)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(r0, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x2000042, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')

program did not crash
testing program (duration=45.237181297s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket$nl_route-prctl$PR_SET_IO_FLUSHER-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-mmap-bind$inet-listen-mkdirat-mount
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r1, 0x100000000)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(r0, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x2000042, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')

program did not crash
testing program (duration=45.237181297s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket$nl_route-sendmsg$nl_route-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-mmap-bind$inet-listen-mkdirat-mount
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x240458c0}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r2, 0x100000000)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(r0, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x2000042, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')

program did not crash
testing program (duration=45.237181297s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-prctl$PR_SET_IO_FLUSHER-sendmsg$nl_route-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-mmap-bind$inet-listen-mkdirat-mount
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x240458c0}, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r1, 0x100000000)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(r0, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x2000042, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')

program did not crash
testing program (duration=45.237181297s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-prctl$PR_SET_IO_FLUSHER-sendmsg$nl_route-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-mmap-bind$inet-listen-mkdirat-mount
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x240458c0}, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r1, 0x100000000)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(0xffffffffffffffff, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x2000042, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')

program did not crash
testing program (duration=45.237181297s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket$nl_route-prctl$PR_SET_IO_FLUSHER-sendmsg$nl_route-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-mmap-bind$inet-listen-mkdirat-mount
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r2, 0x100000000)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(r0, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x2000042, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')

program did not crash
testing program (duration=45.237181297s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket$nl_route-prctl$PR_SET_IO_FLUSHER-sendmsg$nl_route-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-mmap-bind$inet-listen-mkdirat-mount
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240458c0}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r2, 0x100000000)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(r0, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x2000042, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')

program did not crash
testing program (duration=45.237181297s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket$nl_route-prctl$PR_SET_IO_FLUSHER-sendmsg$nl_route-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-mmap-bind$inet-listen-mkdirat-mount
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x240458c0}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r2, 0x100000000)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(r0, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x2000042, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')

program did not crash
testing program (duration=45.237181297s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket$nl_route-prctl$PR_SET_IO_FLUSHER-sendmsg$nl_route-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-mmap-bind$inet-listen-mkdirat-mount
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x240458c0}, 0x0)
r2 = syz_open_dev$dri(0x0, 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r2, 0x100000000)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(r0, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x2000042, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')

program did not crash
testing program (duration=45.237181297s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket$nl_route-prctl$PR_SET_IO_FLUSHER-sendmsg$nl_route-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-mmap-bind$inet-listen-mkdirat-mount
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x240458c0}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r2, 0x100000000)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(r0, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x2000042, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')

program did not crash
testing program (duration=45.237181297s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket$nl_route-prctl$PR_SET_IO_FLUSHER-sendmsg$nl_route-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-mmap-bind$inet-listen-mkdirat-mount
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x240458c0}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r2, 0x100000000)
bind$inet(r0, 0x0, 0x0)
listen(r0, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x2000042, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')

program did not crash
testing program (duration=45.237181297s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket$nl_route-prctl$PR_SET_IO_FLUSHER-sendmsg$nl_route-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-mmap-bind$inet-listen-mkdirat-mount
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x240458c0}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r2, 0x100000000)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(r0, 0xa)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x2000042, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')

program did not crash
testing program (duration=45.237181297s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket$nl_route-prctl$PR_SET_IO_FLUSHER-sendmsg$nl_route-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-mmap-bind$inet-listen-mkdirat-mount
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x240458c0}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r2, 0x100000000)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(r0, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x2000042, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')

program did not crash
testing program (duration=45.237181297s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket$nl_route-prctl$PR_SET_IO_FLUSHER-sendmsg$nl_route-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-mmap-bind$inet-listen-mkdirat-mount
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x240458c0}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r2, 0x100000000)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(r0, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', 0x0, &(0x7f0000000400)='cifs\x00', 0x2000042, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')

program did not crash
testing program (duration=45.237181297s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket$nl_route-prctl$PR_SET_IO_FLUSHER-sendmsg$nl_route-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-mmap-bind$inet-listen-mkdirat-mount
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x240458c0}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r2, 0x100000000)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(r0, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', 0x0, 0x2000042, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')

program did not crash
testing program (duration=45.237181297s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket$nl_route-prctl$PR_SET_IO_FLUSHER-sendmsg$nl_route-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-mmap-bind$inet-listen-mkdirat-mount
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x240458c0}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r2, 0x100000000)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(r0, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x2000042, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=45.237181297s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket$nl_route-prctl$PR_SET_IO_FLUSHER-sendmsg$nl_route-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-mmap-bind$inet-listen-mkdirat-mount
program did not crash
simplifying guilty program options
testing program (duration=45.237181297s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket$nl_route-prctl$PR_SET_IO_FLUSHER-sendmsg$nl_route-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-mmap-bind$inet-listen-mkdirat-mount
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x240458c0}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r2, 0x100000000)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(r0, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x2000042, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')

program did not crash
testing program (duration=45.237181297s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket$nl_route-prctl$PR_SET_IO_FLUSHER-sendmsg$nl_route-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-mmap-bind$inet-listen-mkdirat-mount
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x240458c0}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r2, 0x100000000)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(r0, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x2000042, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')

program did not crash
testing program (duration=45.237181297s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket$nl_route-prctl$PR_SET_IO_FLUSHER-sendmsg$nl_route-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-mmap-bind$inet-listen-mkdirat-mount
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x240458c0}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r2, 0x100000000)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(r0, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x2000042, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')

program did not crash
testing program (duration=45.237181297s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket$nl_route-prctl$PR_SET_IO_FLUSHER-sendmsg$nl_route-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-mmap-bind$inet-listen-mkdirat-mount
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x240458c0}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r2, 0x100000000)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(r0, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x2000042, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')

program did not crash
validation run: crashed=false
testing program (duration=45.237181297s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket$nl_route-prctl$PR_SET_IO_FLUSHER-sendmsg$nl_route-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-mmap-bind$inet-listen-mkdirat-mount
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x240458c0}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r2, 0x100000000)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(r0, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x2000042, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')

program crashed: WARNING in smb2_add_credits
validation run: crashed=true
testing program (duration=45.237181297s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket$nl_route-prctl$PR_SET_IO_FLUSHER-sendmsg$nl_route-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-mmap-bind$inet-listen-mkdirat-mount
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x240458c0}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r2, 0x100000000)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(r0, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x2000042, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')

program did not crash
validation run: crashed=false
testing program (duration=45.237181297s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket$nl_route-prctl$PR_SET_IO_FLUSHER-sendmsg$nl_route-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-mmap-bind$inet-listen-mkdirat-mount
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x240458c0}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r2, 0x100000000)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(r0, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x2000042, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')

program did not crash
validation run: crashed=false
testing program (duration=45.237181297s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket$nl_route-prctl$PR_SET_IO_FLUSHER-sendmsg$nl_route-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-mmap-bind$inet-listen-mkdirat-mount
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x240458c0}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r2, 0x100000000)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(r0, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x2000042, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')

program did not crash
validation run: crashed=false
testing program (duration=45.237181297s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket$nl_route-prctl$PR_SET_IO_FLUSHER-sendmsg$nl_route-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-mmap-bind$inet-listen-mkdirat-mount
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x240458c0}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r2, 0x100000000)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(r0, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x2000042, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')

program did not crash
validation run: crashed=false
testing program (duration=45.237181297s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket$nl_route-prctl$PR_SET_IO_FLUSHER-sendmsg$nl_route-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-mmap-bind$inet-listen-mkdirat-mount
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x240458c0}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r2, 0x100000000)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(r0, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x2000042, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')

program did not crash
validation run: crashed=false
testing program (duration=45.237181297s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket$nl_route-prctl$PR_SET_IO_FLUSHER-sendmsg$nl_route-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-mmap-bind$inet-listen-mkdirat-mount
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x240458c0}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r2, 0x100000000)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(r0, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x2000042, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')

program did not crash
validation run: crashed=false
testing program (duration=45.237181297s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket$nl_route-prctl$PR_SET_IO_FLUSHER-sendmsg$nl_route-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-mmap-bind$inet-listen-mkdirat-mount
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x240458c0}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r2, 0x100000000)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(r0, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x2000042, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')

program crashed: WARNING in smb2_add_credits
validation run: crashed=true
testing program (duration=45.237181297s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket$nl_route-prctl$PR_SET_IO_FLUSHER-sendmsg$nl_route-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-mmap-bind$inet-listen-mkdirat-mount
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x240458c0}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r2, 0x100000000)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(r0, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x2000042, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')

program crashed: WARNING in smb2_add_credits
validation run: crashed=true
reproducing took 40m42.62818291s
repro crashed as (corrupted=false):
CIFS: Attempting to mount //127.0.0.1/share
CIFS: VFS: \\127.0.0.1 Error -104 sending data on socket to server
------------[ cut here ]------------
server->in_flight == 0
WARNING: fs/smb/client/smb2ops.c:104 at smb2_add_credits+0x1213/0x1790 fs/smb/client/smb2ops.c:104, CPU#0: syz.0.94/6249
Modules linked in:
CPU: 0 UID: 0 PID: 6249 Comm: syz.0.94 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:smb2_add_credits+0x1213/0x1790 fs/smb/client/smb2ops.c:104
Code: c6 e8 81 7d b1 fe 84 db 0f 85 0a fb ff ff e8 64 83 b1 fe 48 8d 3d 2d 28 f1 0d 67 48 0f b9 3a e9 f4 fa ff ff e8 4e 83 b1 fe 90 <0f> 0b 90 0f b6 05 3c a0 d1 0d 31 ff 89 c6 88 44 24 28 e8 46 7d b1
RSP: 0018:ffffc90003c37208 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff88802dc96300 RCX: 0000000000000001
RDX: ffff88803264cb00 RSI: ffffffff83597e82 RDI: ffff88803264cb00
RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90003c37448
R13: 0000000000000200 R14: 0000000000000001 R15: ffff88802dc96000
FS:  00007feb2db4b6c0(0000) GS:ffff8880d5ba2000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f83ab5eb7c0 CR3: 000000002cd5f000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 add_credits fs/smb/client/cifsglob.h:894 [inline]
 compound_send_recv+0x1030/0x2a10 fs/smb/client/transport.c:979
 cifs_send_recv+0x43/0x60 fs/smb/client/transport.c:1106
 SMB2_negotiate+0x15c4/0x5380 fs/smb/client/smb2pdu.c:1188
 cifs_negotiate_protocol fs/smb/client/connect.c:4043 [inline]
 cifs_negotiate_protocol+0x268/0x4c0 fs/smb/client/connect.c:4014
 cifs_get_smb_ses+0xfc9/0x2170 fs/smb/client/connect.c:2492
 cifs_mount_get_session+0xf8/0x460 fs/smb/client/connect.c:3578
 get_session fs/smb/client/dfs.c:65 [inline]
 dfs_mount_share+0x200/0x1e20 fs/smb/client/dfs.c:275
 cifs_mount+0xc4/0xdb0 fs/smb/client/connect.c:3860
 cifs_smb3_do_mount+0x2c0/0x1b10 fs/smb/client/cifsfs.c:1026
 smb3_get_tree_common fs/smb/client/fs_context.c:897 [inline]
 smb3_get_tree fs/smb/client/fs_context.c:917 [inline]
 smb3_get_tree+0x1fd/0x440 fs/smb/client/fs_context.c:909
 vfs_get_tree+0x92/0x320 fs/super.c:1947
 fc_mount fs/namespace.c:1198 [inline]
 do_new_mount_fc fs/namespace.c:3772 [inline]
 do_new_mount fs/namespace.c:3848 [inline]
 path_mount+0x7d0/0x24c0 fs/namespace.c:4168
 do_mount fs/namespace.c:4181 [inline]
 __do_sys_mount fs/namespace.c:4397 [inline]
 __se_sys_mount fs/namespace.c:4374 [inline]
 __x64_sys_mount+0x293/0x310 fs/namespace.c:4374
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7feb2cb9e0d9
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007feb2db4b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007feb2ce25fa0 RCX: 00007feb2cb9e0d9
RDX: 0000200000000400 RSI: 0000200000000300 RDI: 0000200000000200
RBP: 00007feb2cc35024 R08: 0000200000000500 R09: 0000000000000000
R10: 0000000002000042 R11: 0000000000000246 R12: 0000000000000000
R13: 00007feb2ce26038 R14: 00007feb2ce25fa0 R15: 00007ffc23ad5988
 </TASK>

final repro crashed as (corrupted=false):
CIFS: Attempting to mount //127.0.0.1/share
CIFS: VFS: \\127.0.0.1 Error -104 sending data on socket to server
------------[ cut here ]------------
server->in_flight == 0
WARNING: fs/smb/client/smb2ops.c:104 at smb2_add_credits+0x1213/0x1790 fs/smb/client/smb2ops.c:104, CPU#0: syz.0.94/6249
Modules linked in:
CPU: 0 UID: 0 PID: 6249 Comm: syz.0.94 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:smb2_add_credits+0x1213/0x1790 fs/smb/client/smb2ops.c:104
Code: c6 e8 81 7d b1 fe 84 db 0f 85 0a fb ff ff e8 64 83 b1 fe 48 8d 3d 2d 28 f1 0d 67 48 0f b9 3a e9 f4 fa ff ff e8 4e 83 b1 fe 90 <0f> 0b 90 0f b6 05 3c a0 d1 0d 31 ff 89 c6 88 44 24 28 e8 46 7d b1
RSP: 0018:ffffc90003c37208 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff88802dc96300 RCX: 0000000000000001
RDX: ffff88803264cb00 RSI: ffffffff83597e82 RDI: ffff88803264cb00
RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90003c37448
R13: 0000000000000200 R14: 0000000000000001 R15: ffff88802dc96000
FS:  00007feb2db4b6c0(0000) GS:ffff8880d5ba2000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f83ab5eb7c0 CR3: 000000002cd5f000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 add_credits fs/smb/client/cifsglob.h:894 [inline]
 compound_send_recv+0x1030/0x2a10 fs/smb/client/transport.c:979
 cifs_send_recv+0x43/0x60 fs/smb/client/transport.c:1106
 SMB2_negotiate+0x15c4/0x5380 fs/smb/client/smb2pdu.c:1188
 cifs_negotiate_protocol fs/smb/client/connect.c:4043 [inline]
 cifs_negotiate_protocol+0x268/0x4c0 fs/smb/client/connect.c:4014
 cifs_get_smb_ses+0xfc9/0x2170 fs/smb/client/connect.c:2492
 cifs_mount_get_session+0xf8/0x460 fs/smb/client/connect.c:3578
 get_session fs/smb/client/dfs.c:65 [inline]
 dfs_mount_share+0x200/0x1e20 fs/smb/client/dfs.c:275
 cifs_mount+0xc4/0xdb0 fs/smb/client/connect.c:3860
 cifs_smb3_do_mount+0x2c0/0x1b10 fs/smb/client/cifsfs.c:1026
 smb3_get_tree_common fs/smb/client/fs_context.c:897 [inline]
 smb3_get_tree fs/smb/client/fs_context.c:917 [inline]
 smb3_get_tree+0x1fd/0x440 fs/smb/client/fs_context.c:909
 vfs_get_tree+0x92/0x320 fs/super.c:1947
 fc_mount fs/namespace.c:1198 [inline]
 do_new_mount_fc fs/namespace.c:3772 [inline]
 do_new_mount fs/namespace.c:3848 [inline]
 path_mount+0x7d0/0x24c0 fs/namespace.c:4168
 do_mount fs/namespace.c:4181 [inline]
 __do_sys_mount fs/namespace.c:4397 [inline]
 __se_sys_mount fs/namespace.c:4374 [inline]
 __x64_sys_mount+0x293/0x310 fs/namespace.c:4374
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7feb2cb9e0d9
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007feb2db4b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007feb2ce25fa0 RCX: 00007feb2cb9e0d9
RDX: 0000200000000400 RSI: 0000200000000300 RDI: 0000200000000200
RBP: 00007feb2cc35024 R08: 0000200000000500 R09: 0000000000000000
R10: 0000000002000042 R11: 0000000000000246 R12: 0000000000000000
R13: 00007feb2ce26038 R14: 00007feb2ce25fa0 R15: 00007ffc23ad5988
 </TASK>