Extracting prog: 58m5.954420016s Minimizing prog: 51m59.498360081s Simplifying prog options: 0s Extracting C: 1m43.544544495s Simplifying C: 16m26.435290406s 30 programs, timeouts [15s 1m40s 6m0s] extracting reproducer from 30 programs single: executing 5 programs separately with timeout 15s testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range-openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$BTRFS_IOC_GET_SUBVOL_INFO detailed listing: executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) program did not crash testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): shutdown-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-getsockopt$inet_sctp_SCTP_HMAC_IDENT-syz_init_net_socket$netrom-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$MAP_UPDATE_ELEM_TAIL_CALL-mkdir-pipe2$9p-write$P9_RVERSION-dup-sendmsg$IPSET_CMD_DESTROY-setsockopt$netrom_NETROM_T2-getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS detailed listing: executing program 0: shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x1, [0x0]}, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xb14dd3a2bd3521d4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) mkdir(0x0, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f00"], 0x15) dup(0xffffffffffffffff) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000030603000000000002000000000000000500010007", @ANYRES32=r2], 0x1c}}, 0x0) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000002300), &(0x7f0000002340)) program did not crash testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-mkdirat-unlinkat detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000140)={[{@nls={'nls', 0x3d, 'iso8859-13'}}, {@gid}, {@gid}, {@barrier}, {@nobarrier}]}, 0x1, 0x5e1, &(0x7f0000002480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file6\x00', 0x200) program did not crash testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getpid-sched_setscheduler-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-sched_setscheduler-memfd_create-fcntl$addseals detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) fcntl$addseals(r3, 0x409, 0x8) program did not crash testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-openat$khugepaged_scan-syz_open_procfs-syz_init_net_socket$nl_generic-sendfile-sched_setaffinity-syz_open_dev$MSR-read$msr-prctl$PR_SCHED_CORE-socket$inet_udp-socket$inet6_sctp-getsockopt$bt_hci-ioctl$CEC_ADAP_S_LOG_ADDRS-sendmsg$OSF_MSG_REMOVE-socket$inet6_tcp-setsockopt$inet6_tcp_TCP_CONGESTION-connect$inet6-write$binfmt_script-syz_emit_vhci-syz_emit_vhci-mknod$loop-inotify_init-inotify_add_watch-inotify_add_watch-syz_emit_vhci detailed listing: executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x0, 0x1}) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f00000011c0)=""/4072, &(0x7f0000001180)=0xfe8) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000315a0000000000aca271db8fd149de9012000000007e58db3c05daeec1bbec0c9f6fe47a5209ae7b28b018b6f57ba4afaa7b392acf82a05e"], 0x14}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1b}}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f00000006c0)={'#! ', './file0', [{}, {0x20, '#N\xbb\xd9)\xaeM\t\x1d:\x14\xb2Pn\xa3W\xf1\x8cC\x99qZ\xfb\xf0\xe8\xd0z8\xa4*\xd3`\xd0X\x84\xab\xe1\xabR\xc2u\x86\x9a0\xcd\xe4\xa6\x86\'\t\x00\x00\x00\xb5\xf35\xe4I\x9d\xc7\xda9ZW\x96\xa4\x92\xb6L?\xc0\xf2\xc5\x81\xc5\x1d|\xdf\xd7\vt\x81\xc7L\xc1\xbd&\xadQP\x9b\x04\xe4\xeec\xf6uGG\xa6Uf`\x95\xedJ\xd4\x9f\x1c?\xca-\xf6j?\xeaL\xdc\xef\xa0\xdf\xcd\rm:Jo\a\xafG\xffeA!\xc0\xff\xff\xff\xee}\xf68\xf4\xaf:O\\\xd9\x99\x8cI<\xda\xcah\x93>22\xe6\xd0\xd7\x94\xd5\xb1\x8c\xc2@\xfd\xa75\xf0\xd8`\x8fP*)\xab\xce\xa7<\x9c\xacX\x16\x8b\xf4\xeb\x85\xf6q\xa24\xf7%\xcf\x10|`,\x88\a(\x88\xae\x9a\xf0\xb7J\xdd\x90\xe5S\x93\xf2\x94'}, {0x20, '%{\\^]:]\xf5:@/\x9b'}, {0x20, '/'}, {0x20, 'fd/3\x00'}, {0x20, '\t\x00\x00\x00\x00\x00\x00\x00eo#\x00\xb9sT\x93\xb1s\x8bQwH\xbd\xc4\x88\xa5\xf2z\xbcp\xcc?\x13\xd7\"\x82r\n\x02\x964\xdc\xecs\'\xa3\xb7j\'\xc4C\a\x82\xfe\x04[\xef\xa4\x8dz\xba\xdb\xe5\xaa\xd2\x93\xe0 K_V0\x96\x11z\x974\xa7E\xd2\xf4\x9a\xf7H]\xe7\x00\xe4v\xc9\x17Um\x1d\x96\xc1r/\xe2\xaa\xb6\xb3D\xa1t\n-\x16B\x93\xbe\xd9;\x87\xc5\xfd8\xf6\xf3\x15B\xcc|^((]\x82\xc0E\x93\x8d\xff\xad>\x10:\xc9McR\x1c<\xc62}Q\x00'}]}, 0x190) syz_emit_vhci(0x0, 0x9) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x1) inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x16000281) syz_emit_vhci(0x0, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 30 programs with base timeout 15s testing program (duration=22s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 6, 12, 2, 7, 15, 3, 2, 27, 15, 3, 4, 2, 14, 4, 11, 3, 7, 23, 4, 14, 14, 5, 5, 29, 3, 7, 3, 17, 4] detailed listing: executing program 1: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000180)='i=Ov:cb2e\xdf\xff\xff\x04\x00\xff\xff\xff') executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000280)="86e1ac82c5b4ba8244f1ee6a47076ac4d8f2fc88012f305b3ab8616eca3f5cc82adcf4557d4fae0c970bae3790565a07315e551d7c1417b0e1312b59184800c63e1d816504f1a6b9d0a21b1c1456d4a43f7481f7ca124bb8dcadac79bf5936a712288b76bec4982caa51cc1d1b515783c7b2c57393aff55b80cfe2a78b201fe685ceaaed5b6aac18311f4607703c0d8a4eb55e38748e536f304afc28d025859bef37b3332c57885db1", 0xa9) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000300)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x7) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)=0x10000) executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffe}]}) getgroups(0x0, 0x0) executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) request_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000001400)={'syz', 0x1}, &(0x7f0000001440)='/\x00', 0xfffffffffffffffe) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0x1, 0xfffffffffffffffe) executing program 4: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x2, 0x8, 0xc}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x4bfb, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x0, 0x0, 0x2, 0x3}, 0x20) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3011, 0x17) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$UFFDIO_CONTINUE(r5, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0xfffffffffffffef4) executing program 4: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000f00), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000006c0)={0x14, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x0, 0x1}) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f00000011c0)=""/4072, &(0x7f0000001180)=0xfe8) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000315a0000000000aca271db8fd149de9012000000007e58db3c05daeec1bbec0c9f6fe47a5209ae7b28b018b6f57ba4afaa7b392acf82a05e"], 0x14}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1b}}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f00000006c0)={'#! ', './file0', [{}, {0x20, '#N\xbb\xd9)\xaeM\t\x1d:\x14\xb2Pn\xa3W\xf1\x8cC\x99qZ\xfb\xf0\xe8\xd0z8\xa4*\xd3`\xd0X\x84\xab\xe1\xabR\xc2u\x86\x9a0\xcd\xe4\xa6\x86\'\t\x00\x00\x00\xb5\xf35\xe4I\x9d\xc7\xda9ZW\x96\xa4\x92\xb6L?\xc0\xf2\xc5\x81\xc5\x1d|\xdf\xd7\vt\x81\xc7L\xc1\xbd&\xadQP\x9b\x04\xe4\xeec\xf6uGG\xa6Uf`\x95\xedJ\xd4\x9f\x1c?\xca-\xf6j?\xeaL\xdc\xef\xa0\xdf\xcd\rm:Jo\a\xafG\xffeA!\xc0\xff\xff\xff\xee}\xf68\xf4\xaf:O\\\xd9\x99\x8cI<\xda\xcah\x93>22\xe6\xd0\xd7\x94\xd5\xb1\x8c\xc2@\xfd\xa75\xf0\xd8`\x8fP*)\xab\xce\xa7<\x9c\xacX\x16\x8b\xf4\xeb\x85\xf6q\xa24\xf7%\xcf\x10|`,\x88\a(\x88\xae\x9a\xf0\xb7J\xdd\x90\xe5S\x93\xf2\x94'}, {0x20, '%{\\^]:]\xf5:@/\x9b'}, {0x20, '/'}, {0x20, 'fd/3\x00'}, {0x20, '\t\x00\x00\x00\x00\x00\x00\x00eo#\x00\xb9sT\x93\xb1s\x8bQwH\xbd\xc4\x88\xa5\xf2z\xbcp\xcc?\x13\xd7\"\x82r\n\x02\x964\xdc\xecs\'\xa3\xb7j\'\xc4C\a\x82\xfe\x04[\xef\xa4\x8dz\xba\xdb\xe5\xaa\xd2\x93\xe0 K_V0\x96\x11z\x974\xa7E\xd2\xf4\x9a\xf7H]\xe7\x00\xe4v\xc9\x17Um\x1d\x96\xc1r/\xe2\xaa\xb6\xb3D\xa1t\n-\x16B\x93\xbe\xd9;\x87\xc5\xfd8\xf6\xf3\x15B\xcc|^((]\x82\xc0E\x93\x8d\xff\xad>\x10:\xc9McR\x1c<\xc62}Q\x00'}]}, 0x190) syz_emit_vhci(0x0, 0x9) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x1) inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x16000281) syz_emit_vhci(0x0, 0x0) executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x480402, 0x142) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xae8e4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket(0x18, 0x0, 0x0) close(r3) socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$nfc_llcp(r3, 0x6b, 0x0, 0x0, 0xf0ff1f00000000) executing program 3: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000001980)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}]}, @NL80211_ATTR_MAC={0xa}]}, 0x3c}}, 0x0) executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fed06b9b"}}) executing program 3: madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_CAPBSET_DROP(0x1c, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x158, 0x288, 0x158, 0x288, 0x1f0, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x38}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000180), 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) executing program 0: socket$kcm(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) r0 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, &(0x7f0000000080)) executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) fcntl$addseals(r3, 0x409, 0x8) executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}}}, 0x24}}, 0x0) executing program 0: sched_setscheduler(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800c0001007061796c6f6164002c000280080005400000000008000840000000000800024000000000080004400002000008000340000000000900010073797a30000000000900020073797a320000"], 0x94}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) chdir(&(0x7f0000000140)='./bus\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)={@desc={0x4091, 0x0, @desc3}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x90) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r5, r6, 0x11, 0x0, r5}, 0x11) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(0xffffffffffffffff) executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r1) preadv(r0, &(0x7f0000000240), 0x0, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) recvmmsg(r4, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001600)}}], 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x480402, 0x142) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xae8e4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket(0x18, 0x0, 0x0) close(r2) socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$nfc_llcp(r2, 0x6b, 0x0, 0x0, 0xf0ff1f00000000) executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mmap(&(0x7f00004c7000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r1, 0x10d, 0xb1, 0x0, &(0x7f0000000000)) executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./bus\x00', 0x200000, &(0x7f00000023c0)=ANY=[], 0x13, 0x70a, &(0x7f0000000740)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000380), 0x1040c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xa0000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') keyctl$link(0x1d, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000003fb3aa2a4014ecb300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0x19, &(0x7f0000000040)=0x633, 0x4) sendto$inet(r5, &(0x7f0000000180)="0100000000000000", 0x8, 0x0, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, 0xfffdffff, r7}) recvfrom$inet(r5, 0x0, 0x0, 0x220, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x2, 0x4, 0x1ff, 0x900, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x0, 0x1, 0x20000006}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x10) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000200)={@host}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f00000001c0)={@hyper}) close_range(r1, 0xffffffffffffffff, 0x0) executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}}}, 0x24}}, 0x0) executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000140)={[{@nls={'nls', 0x3d, 'iso8859-13'}}, {@gid}, {@gid}, {@barrier}, {@nobarrier}]}, 0x1, 0x5e1, &(0x7f0000002480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file6\x00', 0x200) executing program 2: shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x1, [0x0]}, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xb14dd3a2bd3521d4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) mkdir(0x0, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f00"], 0x15) dup(0xffffffffffffffff) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000030603000000000002000000000000000500010007", @ANYRES32=r2], 0x1c}}, 0x0) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000002300), &(0x7f0000002340)) executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) program did not crash replaying the whole log did not cause a kernel crash single: executing 5 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range-openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$BTRFS_IOC_GET_SUBVOL_INFO detailed listing: executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): shutdown-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-getsockopt$inet_sctp_SCTP_HMAC_IDENT-syz_init_net_socket$netrom-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$MAP_UPDATE_ELEM_TAIL_CALL-mkdir-pipe2$9p-write$P9_RVERSION-dup-sendmsg$IPSET_CMD_DESTROY-setsockopt$netrom_NETROM_T2-getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS detailed listing: executing program 0: shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x1, [0x0]}, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xb14dd3a2bd3521d4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) mkdir(0x0, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f00"], 0x15) dup(0xffffffffffffffff) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000030603000000000002000000000000000500010007", @ANYRES32=r2], 0x1c}}, 0x0) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000002300), &(0x7f0000002340)) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-mkdirat-unlinkat detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000140)={[{@nls={'nls', 0x3d, 'iso8859-13'}}, {@gid}, {@gid}, {@barrier}, {@nobarrier}]}, 0x1, 0x5e1, &(0x7f0000002480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file6\x00', 0x200) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getpid-sched_setscheduler-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-sched_setscheduler-memfd_create-fcntl$addseals detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) fcntl$addseals(r3, 0x409, 0x8) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-openat$khugepaged_scan-syz_open_procfs-syz_init_net_socket$nl_generic-sendfile-sched_setaffinity-syz_open_dev$MSR-read$msr-prctl$PR_SCHED_CORE-socket$inet_udp-socket$inet6_sctp-getsockopt$bt_hci-ioctl$CEC_ADAP_S_LOG_ADDRS-sendmsg$OSF_MSG_REMOVE-socket$inet6_tcp-setsockopt$inet6_tcp_TCP_CONGESTION-connect$inet6-write$binfmt_script-syz_emit_vhci-syz_emit_vhci-mknod$loop-inotify_init-inotify_add_watch-inotify_add_watch-syz_emit_vhci detailed listing: executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x0, 0x1}) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f00000011c0)=""/4072, &(0x7f0000001180)=0xfe8) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000315a0000000000aca271db8fd149de9012000000007e58db3c05daeec1bbec0c9f6fe47a5209ae7b28b018b6f57ba4afaa7b392acf82a05e"], 0x14}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1b}}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f00000006c0)={'#! ', './file0', [{}, {0x20, '#N\xbb\xd9)\xaeM\t\x1d:\x14\xb2Pn\xa3W\xf1\x8cC\x99qZ\xfb\xf0\xe8\xd0z8\xa4*\xd3`\xd0X\x84\xab\xe1\xabR\xc2u\x86\x9a0\xcd\xe4\xa6\x86\'\t\x00\x00\x00\xb5\xf35\xe4I\x9d\xc7\xda9ZW\x96\xa4\x92\xb6L?\xc0\xf2\xc5\x81\xc5\x1d|\xdf\xd7\vt\x81\xc7L\xc1\xbd&\xadQP\x9b\x04\xe4\xeec\xf6uGG\xa6Uf`\x95\xedJ\xd4\x9f\x1c?\xca-\xf6j?\xeaL\xdc\xef\xa0\xdf\xcd\rm:Jo\a\xafG\xffeA!\xc0\xff\xff\xff\xee}\xf68\xf4\xaf:O\\\xd9\x99\x8cI<\xda\xcah\x93>22\xe6\xd0\xd7\x94\xd5\xb1\x8c\xc2@\xfd\xa75\xf0\xd8`\x8fP*)\xab\xce\xa7<\x9c\xacX\x16\x8b\xf4\xeb\x85\xf6q\xa24\xf7%\xcf\x10|`,\x88\a(\x88\xae\x9a\xf0\xb7J\xdd\x90\xe5S\x93\xf2\x94'}, {0x20, '%{\\^]:]\xf5:@/\x9b'}, {0x20, '/'}, {0x20, 'fd/3\x00'}, {0x20, '\t\x00\x00\x00\x00\x00\x00\x00eo#\x00\xb9sT\x93\xb1s\x8bQwH\xbd\xc4\x88\xa5\xf2z\xbcp\xcc?\x13\xd7\"\x82r\n\x02\x964\xdc\xecs\'\xa3\xb7j\'\xc4C\a\x82\xfe\x04[\xef\xa4\x8dz\xba\xdb\xe5\xaa\xd2\x93\xe0 K_V0\x96\x11z\x974\xa7E\xd2\xf4\x9a\xf7H]\xe7\x00\xe4v\xc9\x17Um\x1d\x96\xc1r/\xe2\xaa\xb6\xb3D\xa1t\n-\x16B\x93\xbe\xd9;\x87\xc5\xfd8\xf6\xf3\x15B\xcc|^((]\x82\xc0E\x93\x8d\xff\xad>\x10:\xc9McR\x1c<\xc62}Q\x00'}]}, 0x190) syz_emit_vhci(0x0, 0x9) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x1) inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x16000281) syz_emit_vhci(0x0, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 30 programs with base timeout 1m40s testing program (duration=1m47s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 6, 12, 2, 7, 15, 3, 2, 27, 15, 3, 4, 2, 14, 4, 11, 3, 7, 23, 4, 14, 14, 5, 5, 29, 3, 7, 3, 17, 4] detailed listing: executing program 1: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000180)='i=Ov:cb2e\xdf\xff\xff\x04\x00\xff\xff\xff') executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000280)="86e1ac82c5b4ba8244f1ee6a47076ac4d8f2fc88012f305b3ab8616eca3f5cc82adcf4557d4fae0c970bae3790565a07315e551d7c1417b0e1312b59184800c63e1d816504f1a6b9d0a21b1c1456d4a43f7481f7ca124bb8dcadac79bf5936a712288b76bec4982caa51cc1d1b515783c7b2c57393aff55b80cfe2a78b201fe685ceaaed5b6aac18311f4607703c0d8a4eb55e38748e536f304afc28d025859bef37b3332c57885db1", 0xa9) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000300)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x7) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)=0x10000) executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffe}]}) getgroups(0x0, 0x0) executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) request_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000001400)={'syz', 0x1}, &(0x7f0000001440)='/\x00', 0xfffffffffffffffe) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0x1, 0xfffffffffffffffe) executing program 4: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x2, 0x8, 0xc}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x4bfb, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x0, 0x0, 0x2, 0x3}, 0x20) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3011, 0x17) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$UFFDIO_CONTINUE(r5, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0xfffffffffffffef4) executing program 4: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000f00), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000006c0)={0x14, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x0, 0x1}) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f00000011c0)=""/4072, &(0x7f0000001180)=0xfe8) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000315a0000000000aca271db8fd149de9012000000007e58db3c05daeec1bbec0c9f6fe47a5209ae7b28b018b6f57ba4afaa7b392acf82a05e"], 0x14}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1b}}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f00000006c0)={'#! ', './file0', [{}, {0x20, '#N\xbb\xd9)\xaeM\t\x1d:\x14\xb2Pn\xa3W\xf1\x8cC\x99qZ\xfb\xf0\xe8\xd0z8\xa4*\xd3`\xd0X\x84\xab\xe1\xabR\xc2u\x86\x9a0\xcd\xe4\xa6\x86\'\t\x00\x00\x00\xb5\xf35\xe4I\x9d\xc7\xda9ZW\x96\xa4\x92\xb6L?\xc0\xf2\xc5\x81\xc5\x1d|\xdf\xd7\vt\x81\xc7L\xc1\xbd&\xadQP\x9b\x04\xe4\xeec\xf6uGG\xa6Uf`\x95\xedJ\xd4\x9f\x1c?\xca-\xf6j?\xeaL\xdc\xef\xa0\xdf\xcd\rm:Jo\a\xafG\xffeA!\xc0\xff\xff\xff\xee}\xf68\xf4\xaf:O\\\xd9\x99\x8cI<\xda\xcah\x93>22\xe6\xd0\xd7\x94\xd5\xb1\x8c\xc2@\xfd\xa75\xf0\xd8`\x8fP*)\xab\xce\xa7<\x9c\xacX\x16\x8b\xf4\xeb\x85\xf6q\xa24\xf7%\xcf\x10|`,\x88\a(\x88\xae\x9a\xf0\xb7J\xdd\x90\xe5S\x93\xf2\x94'}, {0x20, '%{\\^]:]\xf5:@/\x9b'}, {0x20, '/'}, {0x20, 'fd/3\x00'}, {0x20, '\t\x00\x00\x00\x00\x00\x00\x00eo#\x00\xb9sT\x93\xb1s\x8bQwH\xbd\xc4\x88\xa5\xf2z\xbcp\xcc?\x13\xd7\"\x82r\n\x02\x964\xdc\xecs\'\xa3\xb7j\'\xc4C\a\x82\xfe\x04[\xef\xa4\x8dz\xba\xdb\xe5\xaa\xd2\x93\xe0 K_V0\x96\x11z\x974\xa7E\xd2\xf4\x9a\xf7H]\xe7\x00\xe4v\xc9\x17Um\x1d\x96\xc1r/\xe2\xaa\xb6\xb3D\xa1t\n-\x16B\x93\xbe\xd9;\x87\xc5\xfd8\xf6\xf3\x15B\xcc|^((]\x82\xc0E\x93\x8d\xff\xad>\x10:\xc9McR\x1c<\xc62}Q\x00'}]}, 0x190) syz_emit_vhci(0x0, 0x9) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x1) inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x16000281) syz_emit_vhci(0x0, 0x0) executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x480402, 0x142) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xae8e4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket(0x18, 0x0, 0x0) close(r3) socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$nfc_llcp(r3, 0x6b, 0x0, 0x0, 0xf0ff1f00000000) executing program 3: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000001980)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}]}, @NL80211_ATTR_MAC={0xa}]}, 0x3c}}, 0x0) executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fed06b9b"}}) executing program 3: madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_CAPBSET_DROP(0x1c, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x158, 0x288, 0x158, 0x288, 0x1f0, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x38}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000180), 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) executing program 0: socket$kcm(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) r0 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, &(0x7f0000000080)) executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) fcntl$addseals(r3, 0x409, 0x8) executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}}}, 0x24}}, 0x0) executing program 0: sched_setscheduler(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800c0001007061796c6f6164002c000280080005400000000008000840000000000800024000000000080004400002000008000340000000000900010073797a30000000000900020073797a320000"], 0x94}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) chdir(&(0x7f0000000140)='./bus\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)={@desc={0x4091, 0x0, @desc3}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x90) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r5, r6, 0x11, 0x0, r5}, 0x11) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(0xffffffffffffffff) executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r1) preadv(r0, &(0x7f0000000240), 0x0, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) recvmmsg(r4, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001600)}}], 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x480402, 0x142) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xae8e4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket(0x18, 0x0, 0x0) close(r2) socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$nfc_llcp(r2, 0x6b, 0x0, 0x0, 0xf0ff1f00000000) executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mmap(&(0x7f00004c7000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r1, 0x10d, 0xb1, 0x0, &(0x7f0000000000)) executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./bus\x00', 0x200000, &(0x7f00000023c0)=ANY=[], 0x13, 0x70a, &(0x7f0000000740)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000380), 0x1040c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xa0000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') keyctl$link(0x1d, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000003fb3aa2a4014ecb300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0x19, &(0x7f0000000040)=0x633, 0x4) sendto$inet(r5, &(0x7f0000000180)="0100000000000000", 0x8, 0x0, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, 0xfffdffff, r7}) recvfrom$inet(r5, 0x0, 0x0, 0x220, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x2, 0x4, 0x1ff, 0x900, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x0, 0x1, 0x20000006}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x10) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000200)={@host}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f00000001c0)={@hyper}) close_range(r1, 0xffffffffffffffff, 0x0) executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}}}, 0x24}}, 0x0) executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000140)={[{@nls={'nls', 0x3d, 'iso8859-13'}}, {@gid}, {@gid}, {@barrier}, {@nobarrier}]}, 0x1, 0x5e1, &(0x7f0000002480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file6\x00', 0x200) executing program 2: shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x1, [0x0]}, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xb14dd3a2bd3521d4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) mkdir(0x0, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f00"], 0x15) dup(0xffffffffffffffff) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000030603000000000002000000000000000500010007", @ANYRES32=r2], 0x1c}}, 0x0) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000002300), &(0x7f0000002340)) executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) program did not crash replaying the whole log did not cause a kernel crash single: executing 5 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range-openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$BTRFS_IOC_GET_SUBVOL_INFO detailed listing: executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): shutdown-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-getsockopt$inet_sctp_SCTP_HMAC_IDENT-syz_init_net_socket$netrom-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$MAP_UPDATE_ELEM_TAIL_CALL-mkdir-pipe2$9p-write$P9_RVERSION-dup-sendmsg$IPSET_CMD_DESTROY-setsockopt$netrom_NETROM_T2-getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS detailed listing: executing program 0: shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x1, [0x0]}, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xb14dd3a2bd3521d4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) mkdir(0x0, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f00"], 0x15) dup(0xffffffffffffffff) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000030603000000000002000000000000000500010007", @ANYRES32=r2], 0x1c}}, 0x0) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000002300), &(0x7f0000002340)) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-mkdirat-unlinkat detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000140)={[{@nls={'nls', 0x3d, 'iso8859-13'}}, {@gid}, {@gid}, {@barrier}, {@nobarrier}]}, 0x1, 0x5e1, &(0x7f0000002480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file6\x00', 0x200) program crashed: KMSAN: uninit-value in hfsplus_delete_cat single: successfully extracted reproducer found reproducer with 3 syscalls minimizing guilty program testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-mkdirat detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000140)={[{@nls={'nls', 0x3d, 'iso8859-13'}}, {@gid}, {@gid}, {@barrier}, {@nobarrier}]}, 0x1, 0x5e1, &(0x7f0000002480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-unlinkat detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000140)={[{@nls={'nls', 0x3d, 'iso8859-13'}}, {@gid}, {@gid}, {@barrier}, {@nobarrier}]}, 0x1, 0x5e1, &(0x7f0000002480)="$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") unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file6\x00', 0x200) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-unlinkat detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file6\x00', 0x200) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-mkdirat-unlinkat detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000140)={[{@nls={'nls', 0x3d, 'iso8859-13'}}, {@gid}, {@gid}, {@barrier}, {@nobarrier}]}, 0x1, 0x5e1, &(0x7f0000002480)="$eJzs3U9vHGcdB/DvbGLHDlK6SZOmICSscgA1IrF3IxMkJKAUZKEKVeLSq5VsaiubNLK3yO0BmYpz+xbKwZw5cEJByoEzb8GoRwR334xmdtbeJtuN88fZtfL5SLPP88wz88xvfpmZzMzK2gCvrJUPMvMwRVauvLdVtnd32t3dnfbdQT3JmSSNZC5JUc7+W5Kvku30p3x70DFUPqb4YuXm2oPPL/dbc/VULV+MW+9oDmJp9mOtyhc1Xuu5xzvcw4UkF+oSJm5/4N8ju5/zvAQAplmRnBo1v5mcrW/Wy+eA/l1x/x77RNuedAAAAADwEry2l71s5dyk4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICTpP79/6KeGoP6QorB7//P1vNS10+0h5MOAAAAAAAAAACOaNyX9N/by162cm7Q3i+q7/zfqhoXq89v5eNsppONXM1WVtNLLxtZStIc3sjWaq+3sXSENVsj12y92H0GAAAAAAAAgFfMZ1k5/P4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACmQZGc6hfVdHFQb6ZxOslcktlyue3kwaB+kj2cdAAAAADwEry2l71s5dygvV9Uz/xvVM/9c/k499LLenrpppNb1buA/lN/Y3en3d3dad8tp8fH/cX/niqMasT03z2M3vJitcSlgzVW8uv8LldmBu3fZzW9dLKQd6vaaoo067cXzUGco+P9+dda7z8p1jerSOZzO+tVbFdzMx+lm1tpVPtQLTN+i38ss1P8rHbEHN2qy3KPflOX06FZZWTmICOLde7LbJwfn4mxx8nME7e0lMbBO6iLx5Dzs3VZ5vrdY875Z0+19KOZaA0dfW+Mz0Sy2Prv/bXuvTtrtzevTM9h9IwezUR7KBOXX6lMzNbZ6F9FR1wts5D3s5H1EVfLt6p1z2U9v81HuZVObmQxN7Kc62lnOT/J8lBeL+0XTzzXGk93rn3/h3WlPOt/NfLsn5Qyr+eH8jp8pWtWfcNzDrN04cVfkU5/p66UB+s7U/e/wPlHrs2DTLw+PhN/3i8/N7v37mysrd4/4vZ+UJdlBn45VZkoj5cL5T9W1fr60VH2vT6yb6nqu3jQ13is79JB35PO1Nn6Hu7xkVpV3+WRfe2q782hvlF3OQBMvbNvn52d/8/8v+a/nP/T/Nr8e3PvnLlx5ruzmfnn6b+f+mvjL42fFm/ny/zh8PkfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4dpuffHpntdvtbKioHHsl28kUhKFyhMqkr0zAcbvWu3v/2uYnn/5o/e7qh50PO/euLy23rl9fXP7xjWu317udxf7npMMEAF6goWczAAAAAAAAAAAAAABgSr2Uv/oGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4RisfZOZhiiwtXl0s27s77W45DepJiv6Sc4PqP5J8lWynP6U5NFzxTdspvli5ufbg88uHY80Nli/GrXc0B7GUH41HYnqe8cpxWs893uEeLiS5UJcwcf8PAAD//wPmAUg=") mkdirat(0xffffffffffffff9c, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file6\x00', 0x200) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-mkdirat-unlinkat detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000140)={[{@nls={'nls', 0x3d, 'iso8859-13'}}, {@gid}, {@gid}, {@barrier}, {@nobarrier}]}, 0x1, 0x5e1, &(0x7f0000002480)="$eJzs3U9vHGcdB/DvbGLHDlK6SZOmICSscgA1IrF3IxMkJKAUZKEKVeLSq5VsaiubNLK3yO0BmYpz+xbKwZw5cEJByoEzb8GoRwR334xmdtbeJtuN88fZtfL5SLPP88wz88xvfpmZzMzK2gCvrJUPMvMwRVauvLdVtnd32t3dnfbdQT3JmSSNZC5JUc7+W5Kvku30p3x70DFUPqb4YuXm2oPPL/dbc/VULV+MW+9oDmJp9mOtyhc1Xuu5xzvcw4UkF+oSJm5/4N8ju5/zvAQAplmRnBo1v5mcrW/Wy+eA/l1x/x77RNuedAAAAADwEry2l71s5dyk4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICTpP79/6KeGoP6QorB7//P1vNS10+0h5MOAAAAAAAAAACOaNyX9N/by162cm7Q3i+q7/zfqhoXq89v5eNsppONXM1WVtNLLxtZStIc3sjWaq+3sXSENVsj12y92H0GAAAAAAAAgFfMZ1k5/P4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACmQZGc6hfVdHFQb6ZxOslcktlyue3kwaB+kj2cdAAAAADwEry2l71s5dygvV9Uz/xvVM/9c/k499LLenrpppNb1buA/lN/Y3en3d3dad8tp8fH/cX/niqMasT03z2M3vJitcSlgzVW8uv8LldmBu3fZzW9dLKQd6vaaoo067cXzUGco+P9+dda7z8p1jerSOZzO+tVbFdzMx+lm1tpVPtQLTN+i38ss1P8rHbEHN2qy3KPflOX06FZZWTmICOLde7LbJwfn4mxx8nME7e0lMbBO6iLx5Dzs3VZ5vrdY875Z0+19KOZaA0dfW+Mz0Sy2Prv/bXuvTtrtzevTM9h9IwezUR7KBOXX6lMzNbZ6F9FR1wts5D3s5H1EVfLt6p1z2U9v81HuZVObmQxN7Kc62lnOT/J8lBeL+0XTzzXGk93rn3/h3WlPOt/NfLsn5Qyr+eH8jp8pWtWfcNzDrN04cVfkU5/p66UB+s7U/e/wPlHrs2DTLw+PhN/3i8/N7v37mysrd4/4vZ+UJdlBn45VZkoj5cL5T9W1fr60VH2vT6yb6nqu3jQ13is79JB35PO1Nn6Hu7xkVpV3+WRfe2q782hvlF3OQBMvbNvn52d/8/8v+a/nP/T/Nr8e3PvnLlx5ruzmfnn6b+f+mvjL42fFm/ny/zh8PkfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4dpuffHpntdvtbKioHHsl28kUhKFyhMqkr0zAcbvWu3v/2uYnn/5o/e7qh50PO/euLy23rl9fXP7xjWu317udxf7npMMEAF6goWczAAAAAAAAAAAAAABgSr2Uv/oGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4RisfZOZhiiwtXl0s27s77W45DepJiv6Sc4PqP5J8lWynP6U5NFzxTdspvli5ufbg88uHY80Nli/GrXc0B7GUH41HYnqe8cpxWs893uEeLiS5UJcwcf8PAAD//wPmAUg=") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) program did not crash extracting C reproducer testing compiled C program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-mkdirat-unlinkat program crashed: KMSAN: uninit-value in hfsplus_delete_cat simplifying C reproducer testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-mkdirat-unlinkat program crashed: KMSAN: uninit-value in hfsplus_delete_cat testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-mkdirat-unlinkat program crashed: KMSAN: uninit-value in hfsplus_delete_cat testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-mkdirat-unlinkat program crashed: KMSAN: uninit-value in hfsplus_delete_cat testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-mkdirat-unlinkat program crashed: KMSAN: uninit-value in hfsplus_delete_cat testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-mkdirat-unlinkat program crashed: KMSAN: uninit-value in hfsplus_delete_cat testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-mkdirat-unlinkat program crashed: KMSAN: uninit-value in hfsplus_delete_cat testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-mkdirat-unlinkat program crashed: KMSAN: uninit-value in hfsplus_delete_cat reproducing took 2h8m15.432647866s repro crashed as (corrupted=false): loop0: detected capacity change from 0 to 1024 ===================================================== BUG: KMSAN: uninit-value in hfsplus_subfolders_dec fs/hfsplus/catalog.c:248 [inline] BUG: KMSAN: uninit-value in hfsplus_delete_cat+0x10f0/0x1340 fs/hfsplus/catalog.c:419 hfsplus_subfolders_dec fs/hfsplus/catalog.c:248 [inline] hfsplus_delete_cat+0x10f0/0x1340 fs/hfsplus/catalog.c:419 hfsplus_rmdir+0x140/0x2e0 fs/hfsplus/dir.c:425 vfs_rmdir+0x5bf/0x800 fs/namei.c:4293 do_rmdir+0x630/0x8b0 fs/namei.c:4352 __do_sys_unlinkat fs/namei.c:4528 [inline] __se_sys_unlinkat fs/namei.c:4522 [inline] __x64_sys_unlinkat+0x1ba/0x220 fs/namei.c:4522 x64_sys_call+0x2981/0x3c10 arch/x86/include/generated/asm/syscalls_64.h:264 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was stored to memory at: hfsplus_subfolders_inc fs/hfsplus/catalog.c:232 [inline] hfsplus_create_cat+0x17f6/0x1800 fs/hfsplus/catalog.c:314 hfsplus_mknod+0x201/0x560 fs/hfsplus/dir.c:494 hfsplus_mkdir+0x58/0x70 fs/hfsplus/dir.c:529 vfs_mkdir+0x4a0/0x780 fs/namei.c:4210 do_mkdirat+0x529/0x810 fs/namei.c:4233 __do_sys_mkdirat fs/namei.c:4248 [inline] __se_sys_mkdirat fs/namei.c:4246 [inline] __x64_sys_mkdirat+0xc6/0x120 fs/namei.c:4246 x64_sys_call+0x39e5/0x3c10 arch/x86/include/generated/asm/syscalls_64.h:259 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was stored to memory at: hfsplus_subfolders_inc fs/hfsplus/catalog.c:232 [inline] hfsplus_create_cat+0x17f6/0x1800 fs/hfsplus/catalog.c:314 hfsplus_fill_super+0x227f/0x2700 fs/hfsplus/super.c:566 mount_bdev+0x39a/0x520 fs/super.c:1668 hfsplus_mount+0x4d/0x60 fs/hfsplus/super.c:647 legacy_get_tree+0x114/0x290 fs/fs_context.c:662 vfs_get_tree+0xa7/0x570 fs/super.c:1789 do_new_mount+0x71f/0x15e0 fs/namespace.c:3472 path_mount+0x742/0x1f10 fs/namespace.c:3799 do_mount fs/namespace.c:3812 [inline] __do_sys_mount fs/namespace.c:4020 [inline] __se_sys_mount+0x722/0x810 fs/namespace.c:3997 __x64_sys_mount+0xe4/0x150 fs/namespace.c:3997 x64_sys_call+0xed5/0x3c10 arch/x86/include/generated/asm/syscalls_64.h:166 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was created at: __alloc_pages_noprof+0x9d6/0xe70 mm/page_alloc.c:4719 __alloc_pages_node_noprof include/linux/gfp.h:269 [inline] alloc_pages_node_noprof include/linux/gfp.h:296 [inline] alloc_slab_page mm/slub.c:2321 [inline] allocate_slab+0x203/0x1220 mm/slub.c:2484 new_slab mm/slub.c:2537 [inline] ___slab_alloc+0x12ef/0x35e0 mm/slub.c:3723 __slab_alloc mm/slub.c:3813 [inline] __slab_alloc_node mm/slub.c:3866 [inline] slab_alloc_node mm/slub.c:4025 [inline] kmem_cache_alloc_lru_noprof+0x584/0xb30 mm/slub.c:4056 hfsplus_alloc_inode+0x5a/0xd0 fs/hfsplus/super.c:633 alloc_inode+0x86/0x460 fs/inode.c:263 iget_locked+0x2a7/0xf20 fs/inode.c:1342 hfsplus_iget+0x59/0xaf0 fs/hfsplus/super.c:64 hfsplus_btree_open+0x13e/0x1d00 fs/hfsplus/btree.c:150 hfsplus_fill_super+0x1113/0x2700 fs/hfsplus/super.c:479 mount_bdev+0x39a/0x520 fs/super.c:1668 hfsplus_mount+0x4d/0x60 fs/hfsplus/super.c:647 legacy_get_tree+0x114/0x290 fs/fs_context.c:662 vfs_get_tree+0xa7/0x570 fs/super.c:1789 do_new_mount+0x71f/0x15e0 fs/namespace.c:3472 path_mount+0x742/0x1f10 fs/namespace.c:3799 do_mount fs/namespace.c:3812 [inline] __do_sys_mount fs/namespace.c:4020 [inline] __se_sys_mount+0x722/0x810 fs/namespace.c:3997 __x64_sys_mount+0xe4/0x150 fs/namespace.c:3997 x64_sys_call+0xed5/0x3c10 arch/x86/include/generated/asm/syscalls_64.h:166 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f CPU: 0 UID: 0 PID: 5174 Comm: syz-executor708 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 ===================================================== final repro crashed as (corrupted=false): loop0: detected capacity change from 0 to 1024 ===================================================== BUG: KMSAN: uninit-value in hfsplus_subfolders_dec fs/hfsplus/catalog.c:248 [inline] BUG: KMSAN: uninit-value in hfsplus_delete_cat+0x10f0/0x1340 fs/hfsplus/catalog.c:419 hfsplus_subfolders_dec fs/hfsplus/catalog.c:248 [inline] hfsplus_delete_cat+0x10f0/0x1340 fs/hfsplus/catalog.c:419 hfsplus_rmdir+0x140/0x2e0 fs/hfsplus/dir.c:425 vfs_rmdir+0x5bf/0x800 fs/namei.c:4293 do_rmdir+0x630/0x8b0 fs/namei.c:4352 __do_sys_unlinkat fs/namei.c:4528 [inline] __se_sys_unlinkat fs/namei.c:4522 [inline] __x64_sys_unlinkat+0x1ba/0x220 fs/namei.c:4522 x64_sys_call+0x2981/0x3c10 arch/x86/include/generated/asm/syscalls_64.h:264 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was stored to memory at: hfsplus_subfolders_inc fs/hfsplus/catalog.c:232 [inline] hfsplus_create_cat+0x17f6/0x1800 fs/hfsplus/catalog.c:314 hfsplus_mknod+0x201/0x560 fs/hfsplus/dir.c:494 hfsplus_mkdir+0x58/0x70 fs/hfsplus/dir.c:529 vfs_mkdir+0x4a0/0x780 fs/namei.c:4210 do_mkdirat+0x529/0x810 fs/namei.c:4233 __do_sys_mkdirat fs/namei.c:4248 [inline] __se_sys_mkdirat fs/namei.c:4246 [inline] __x64_sys_mkdirat+0xc6/0x120 fs/namei.c:4246 x64_sys_call+0x39e5/0x3c10 arch/x86/include/generated/asm/syscalls_64.h:259 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was stored to memory at: hfsplus_subfolders_inc fs/hfsplus/catalog.c:232 [inline] hfsplus_create_cat+0x17f6/0x1800 fs/hfsplus/catalog.c:314 hfsplus_fill_super+0x227f/0x2700 fs/hfsplus/super.c:566 mount_bdev+0x39a/0x520 fs/super.c:1668 hfsplus_mount+0x4d/0x60 fs/hfsplus/super.c:647 legacy_get_tree+0x114/0x290 fs/fs_context.c:662 vfs_get_tree+0xa7/0x570 fs/super.c:1789 do_new_mount+0x71f/0x15e0 fs/namespace.c:3472 path_mount+0x742/0x1f10 fs/namespace.c:3799 do_mount fs/namespace.c:3812 [inline] __do_sys_mount fs/namespace.c:4020 [inline] __se_sys_mount+0x722/0x810 fs/namespace.c:3997 __x64_sys_mount+0xe4/0x150 fs/namespace.c:3997 x64_sys_call+0xed5/0x3c10 arch/x86/include/generated/asm/syscalls_64.h:166 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was created at: __alloc_pages_noprof+0x9d6/0xe70 mm/page_alloc.c:4719 __alloc_pages_node_noprof include/linux/gfp.h:269 [inline] alloc_pages_node_noprof include/linux/gfp.h:296 [inline] alloc_slab_page mm/slub.c:2321 [inline] allocate_slab+0x203/0x1220 mm/slub.c:2484 new_slab mm/slub.c:2537 [inline] ___slab_alloc+0x12ef/0x35e0 mm/slub.c:3723 __slab_alloc mm/slub.c:3813 [inline] __slab_alloc_node mm/slub.c:3866 [inline] slab_alloc_node mm/slub.c:4025 [inline] kmem_cache_alloc_lru_noprof+0x584/0xb30 mm/slub.c:4056 hfsplus_alloc_inode+0x5a/0xd0 fs/hfsplus/super.c:633 alloc_inode+0x86/0x460 fs/inode.c:263 iget_locked+0x2a7/0xf20 fs/inode.c:1342 hfsplus_iget+0x59/0xaf0 fs/hfsplus/super.c:64 hfsplus_btree_open+0x13e/0x1d00 fs/hfsplus/btree.c:150 hfsplus_fill_super+0x1113/0x2700 fs/hfsplus/super.c:479 mount_bdev+0x39a/0x520 fs/super.c:1668 hfsplus_mount+0x4d/0x60 fs/hfsplus/super.c:647 legacy_get_tree+0x114/0x290 fs/fs_context.c:662 vfs_get_tree+0xa7/0x570 fs/super.c:1789 do_new_mount+0x71f/0x15e0 fs/namespace.c:3472 path_mount+0x742/0x1f10 fs/namespace.c:3799 do_mount fs/namespace.c:3812 [inline] __do_sys_mount fs/namespace.c:4020 [inline] __se_sys_mount+0x722/0x810 fs/namespace.c:3997 __x64_sys_mount+0xe4/0x150 fs/namespace.c:3997 x64_sys_call+0xed5/0x3c10 arch/x86/include/generated/asm/syscalls_64.h:166 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f CPU: 0 UID: 0 PID: 5174 Comm: syz-executor708 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 =====================================================