Extracting prog: 1h9m30.708258367s Minimizing prog: 1h14m32.592425592s Simplifying prog options: 0s Extracting C: 2m31.148575606s Simplifying C: 17m41.554734873s 30 programs, timeouts [15s 1m40s 6m0s] extracting reproducer from 30 programs single: executing 5 programs separately with timeout 15s testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-dup-ioctl$KVM_SET_MSRS detailed listing: executing program 0: memfd_create(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4040ae9e, &(0x7f0000000700)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT]) program did not crash testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-socket$packet-ioctl$sock_SIOCGIFINDEX-setsockopt$packet_int-sendto$packet detailed listing: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'hsr0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r0, &(0x7f00000000c0)="3f0402e9260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1506fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) program did not crash testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-openat$tun-ioctl$TUNSETIFF-openat$cgroup_ro-close-socketpair$unix-ioctl$TUNSETNOCSUM detailed listing: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="61aa000000b4eb8a990002031e7d9800000001"], 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ipvlan1\x00', 0x3001}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$TUNSETNOCSUM(r1, 0x8923, 0x20000000) program did not crash testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-prlimit64-sched_setscheduler-pipe2$9p-write$P9_RVERSION-dup-write$FUSE_BMAP-write$FUSE_DIRENTPLUS-write$FUSE_DIRENTPLUS-mount$9p_fd-listxattr detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4812, &(0x7f0000002140)=ANY=[], 0x11, 0x6aa, &(0x7f0000000fc0)="$eJzs3c1vHGcdB/DvrNcvm0qO26ZpQJVqGqkgIpI4VgrhkoAQClKFqiDB2WqcxsomDY6L0h6IC0hcOfAHlEO4wAmEkJCQIpUz3CpuFqdKSFx6Sntg0M7Obtburr1JmqxDPx9rdn7PPLPP/OY3L/siWRvgc+v8sTTvpJXzx1692Wlv3V5ub91evtqNG+0ks0kaSbM7S3EtKd5PzqU75QudhfVwxajt/HrtzIUPPtr6sNtq5t54nYfW6ASb4+zFZj1lMclUPX8I28Z7/cHGm70XFv3KdAp2tFc4mLTpJOU2Pz58r2eYcmqgMfJ6B54cRfd1c0D3+l9IDiSZ672gbXY7G48/wz3d171o89HlAQAAAPvGwbu3kpuZn3QeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CSpf/+/qKdGL15M0fv9/5mB39ifmXC6o+2e2VwvuNN4HMkAAAAAAAAAwKP14t387kJZzvfaZZHGD6fqxqHq8am8lRtZzXqO52ZWspGNrGcpycLAQDM3VzY21pfyUveZn5RlOeKZp4Y+89SYCbcefp8BAAAAAAAA4P/I2Xr+s5zP/IRzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAbYpkqjurpkO9eCGNZpK5JDOd9TaTf/TiJ9mdSScAAAAAj8HBu7mbm5nvtcui+sx/uPrcP5e3ci0bWctG2lnNxeq7gO6n/sbW7eX21u3lq53p0+N+6z/34j/O75lGNWK63z0M3/KRao1WLmWtWnI8r+fNtHMxjeqZHUd6+QzP691OTsXZrrLM7DgFuljPO3v+q3q+PyxUFZnuV+RkJ7eiW8end6/E4NF5gC0tpdH/5ufQfdT87K5bKf5blt3oQG9J8tT39q759H3tzEPZWYlTA2ff4d0rkXz5T7//0eX2tSuXi81j++c0GubF4Ytn/9U7Qr1KdG1mNcsDlXh+7EpcurHPKzFSc1urkef68fl8Nz/IsSzmtaxnLT/JSjaymsV8p4pW6vO587iwe6XObWu9tldOM/VxmdqR05cOdue75fRS9dz5rOX7eTMXs5pXqr9TWcrXczqnc2bgCD83xlXfGHLV/3l08ke/UgetJL+s5/tDp65PD9R18J67UPUNLmmkrF9ZnvnM7o19zS/WQedI/HzgGpy8fiXm0n+V6GX3bK8C00Mr8ZvqtnKjfe3K+uWV6zvGLTaHb+/lbN/9/XMj6Zwvz/TvEdvPjk7fs0P7lqq+Q/2+xs6+37b6fXtdqTP1e7hPj3Sq6nt+aN9y1XdkoK/zfmsuyWo+Kcuy+34LgH3vwFcPzLT+3fp7673WL1qXW6/OfXv2G7MvzGT6b9PfbJ6cernxQvGHvJefZu9P6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ5uvP3OlZV2e3V9R1CW5a0RXY8kSDPZtuSvfxlYp/qtsSTjD9hZ+1wjqZY0Uwf3l9itB9uddx+0CP+sj8ljKfhnEsyNPH92Bh+XZbk/ch4nKGv7JZ9JBBO9LQGPwYmNq9dP3Hj7na+tXV15Y/WN1WtnTp8+c/LM6VeWT1xaa89NOj3gEape66v3OZPOBAAAAAAAAAAAABjXeP+cU/SXNJPc9//2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyE88fSvJMiSyePn+y0t24vtztTL7635sdJGkmKxaR4PzmX7pSFgeGKUdvZTC588NHWh91Ws56q9RsPvxeb9ZTFJFP1fIi5YQvLW6PGK6pxro8eb0xFvzKdgh3tFQ4m7X8BAAD//yq0FcU=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffff069}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="2001"], 0x120) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) listxattr(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0xf9) program did not crash testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-prctl$PR_SET_SECCOMP-rt_sigprocmask-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-syz_mount_image$hfsplus-bpf$MAP_CREATE-bpf$PROG_LOAD-mount-chroot-memfd_create-pwrite64-bpf$BPF_RAW_TRACEPOINT_OPEN-mmap-chdir-symlink-umount2 detailed listing: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x1193080, &(0x7f0000000c40)=ANY=[], 0x1, 0x5f2, &(0x7f0000001040)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mount(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000080)='./file0/../file0\x00') r1 = memfd_create(&(0x7f0000000000)='secer\x03\x00\x00\x00selin\x8cB\xabl\xa6e\x15ux\x00\xab', 0x0) pwrite64(r1, &(0x7f000003bfff)='/', 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) chdir(&(0x7f0000000240)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 30 programs with base timeout 15s testing program (duration=22s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 29, 5, 27, 8, 1, 15, 1, 7, 3, 1, 7, 5, 3, 2, 9, 2, 4, 7, 3, 3, 7, 17, 3, 13, 11, 2, 7, 5, 6] detailed listing: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000f7230000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) executing program 0: r0 = epoll_create1(0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="102598e3133ffc3d43cccd5f2c152ea47b6dc89f99cc957b84f4b579c528c4542df3c2d319c6a25a66d48b7a745096dcf8fa36a14e0d19d9a5fedc262dadc2ed8b8df36331bebfbce18881fa2bc80d3c9333b79949ee006476f3879f0036629fe1940c4517857bfa813839e82825da999c938b3e3bd6d51b2ec886b6c5aacda96b58ee789281a69f5ac81f01a8da883c3b78d9d277dbdac78fb97600b711f0c5118d794568d9"}, {&(0x7f0000000680)="b1ebc0b5e4d565cf2c8851db293e7a24939df464944ea945445e1ecf0f52754c0eb861448363c7b3d13ce66e451e54ac775af1144b35109cec8ca6829228b0cf3f192f7ad432b2df62f1553c57bdf4401766ae704e52bcb51bd04de018df2552d380bb217c96ebc2e318eef5fab4f3c25b3e0ab9c964b9302242bceaa92beba5cf6e2f49356be4e1be893fb3d93368e0e311c5662a678953dec3691d6a272c7cb421a3"}], 0x3}, 0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757331e372c84ef65ec9", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r3 = syz_io_uring_setup(0x181b, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000000100), &(0x7f00000000c0)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00140}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000a40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000200)={r5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000180)={0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1c}}, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000240)={r6, 0x3, r8, 0xffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000280)={r6}) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r9, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000180)) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r10, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r10, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x44}) r11 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8942, &(0x7f0000000640)) close(r10) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x8020000, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 1: socket$phonet(0x23, 0x2, 0x1) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x18, &(0x7f0000000800)={0x0, 0x1, 0x6, @local}, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="0303020000010000000045", 0xff4b, 0x4000050, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000090000000040"]) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x5, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000070601020000000000000000000000000500010007000000080006400000000a"], 0x24}}, 0x0) io_setup(0x1, &(0x7f0000000040)) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0x10, 0x3, 0x10) r7 = openat$cgroup_procs(r6, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000180), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, 0xffffffffffffffff, 0x0) executing program 3: socket$inet6(0xa, 0xa, 0x1) socket(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x2, 0x0, @private}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x2e, 0x1, 0xf}]}}}], 0x18}, 0x0) executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8}], {0x95, 0x0, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$input_event(r3, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600004, 0x15) executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x45e, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000001900000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="61aa000000b4eb8a990002031e7d9800000001"], 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ipvlan1\x00', 0x3001}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$TUNSETNOCSUM(r1, 0x8923, 0x20000000) executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fff2000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0xfffe) executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a600000ff0f040b067c55a1bc000900080006990300000015000500fe8081780d001500033f01400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5", 0xa2}], 0x1}, 0x0) executing program 3: syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000100)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2004400, &(0x7f0000000880)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYRESHEX, @ANYBLOB="eeb4a2e44957c0da6987213cace654f5830509bea94fc8f075e209cb543c1dacb1d721360aaee4622e7e12f2fc5c04975c3ffaffed71264fa69c26c2475c012a3a6617ec49d94b4bff651b1c2d65f54d3957a1a320a6d4b344a24254179d548edfe70713cf7923bb409ab7c90ae7b66e1b07c69eb1e662f96983b126762bdda2b1a514654338b69aa02d4184eff35324c4b3887d9555bcbdea896b26e9d04190"], 0x1, 0xa1b, &(0x7f0000001540)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x275a, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) pread64(r0, 0x0, 0x0, 0x0) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) close(0x3) executing program 4: socket$inet6(0xa, 0xa, 0x1) socket(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x2, 0x0, @private}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x2e, 0x1, 0xf}]}}}], 0x18}, 0x0) executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000a40)={[{@dioread_nolock}, {@lazytime}, {@quota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_continue}, {@data_err_ignore}, {@errors_remount}, {@delalloc}, {@auto_da_alloc}, {@norecovery}, {@errors_continue}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0xee, 0x442, &(0x7f0000000d00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001380)=ANY=[@ANYBLOB="000000004c9002000700000003000100"/128, @ANYBLOB="c039b8d78786d4f954ab1af0830c41819a8ade39d851b22932a98fcb91325fda171806000000000000001b"]) executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) io_cancel(0x0, 0x0, 0x0) executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x1193080, &(0x7f0000000c40)=ANY=[], 0x1, 0x5f2, &(0x7f0000001040)="$eJzs3U9vHGcdB/DvbGLHG6R0k6ZNQUhY5QBqROI/kTESElAKslCFKnHpCclKNrWVTRrZW+T2gFzEuX0L5WCucOCEgpQDZ96CUY8I7haXoJmdsTe26ziJ47XD5yPNPs+zz8wzv/nlmcnMrKIE+L+18H7GHqbIwtV318r25sZsb3Nj9m5TT3IuSSuZSFKUX/8lyZfJfJL1sv31pmOo3KP4fOHm0oPPrgxaE/VSrt8+cLvDWW9i6QxircqjGm/muccrto9wMsmluoSRe9T4577dz3leAgAnWfHf+j5g1/ed5Hx9s14+Bwzuigf32Kfa+qgDAAAAgGPwyla2spYLo44DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATpMiOTMoqqXV1CdTNP///3j9Xer6qfZw1AEAAAAAAAAAwBH41la2spYLTftRUf3m/2bVuFx9fi0fZTXdrORa1rKYfvpZyXSSztBA42uL/f7K9CG2nNl3y5njOV4AAAAAAAAAeEn9Lgs7v/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBJUCRnBkW1XG7qnbTOJplIMl6ut548aOrJn8ZHHPYzezjqAAAAAOAYvLKVrazlQtN+VFTP/K9Xz/0T+Sj30s9y+umlm1vVu4DBU39rc2O2t7kxe7dc9o77k/88VRjViBm8e9h/z1PVGq9tb7GQn+dXuZrJvJeVLOc3WUw/3Uzmnaq2mCKd+u1Fp4lzLMneeH/8WOu9J8X6RhVJO7ezXMV2LTfzYXq5lVZ1DNU6zR73z9CnZXaKH9UOmaNbdVke0S/q8mToVBkZ287IVJ37MhsXD87EU86T3XuaTqt5B5XLLyDn5+uyzPU7x5rzsSf0787EzNDse/3gTCRTM/++v9S7d2fp9urVkzONntHuTMwOZeLK4TIxlpciE+N1NgZX0ae7Wr5ZbXshy/llPsytdDOfqcxnLjcym7n8IHODvLbrIZ94rrWe7lz79nfrSjnzf3aIM+D4lHm9OJTX4Stdp+ob/mZn9l06+ivS2W/UlXKyvn3i/ha4uOva3GTi1YMz8YdH5edq796dlaXF+4fc33fqsszAT09UJsr5cqn8w6paj8+Osu/Vffumq77L232tPX2vbfc96Uwdr+/h9o40U/Vd2bdvtup7Y6hvv7scAE6882+dH2//q/2P9hft37eX2u9OvH1u/tw3xzP297N/PfPn1h9bPyzeyhf57c7zPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8OxWP/7kzmKv111RUVF5vHJqTpBPf330I4/6ygS8aNf7d+9fX/34k+8t3138oPtB996N6bmZGzem5r4/f/32cq87NfgcdZgAwBHauekfdSQAAAAAAAAAAAAAAMBXOY5/nzzqYwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF5uC+9n7GGKTE9dmyrbmxuzvXJp6jtrTiQpysrfknyZrGewpDM0XPFV+yk+X7i59OCzKztjTTTrFwdtdziPxdLaFdPzjjfz3OPtHOFkkkt1CSP3vwAAAP//4WMFng==") bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mount(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000080)='./file0/../file0\x00') r1 = memfd_create(&(0x7f0000000000)='secer\x03\x00\x00\x00selin\x8cB\xabl\xa6e\x15ux\x00\xab', 0x0) pwrite64(r1, &(0x7f000003bfff)='/', 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) chdir(&(0x7f0000000240)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) executing program 4: socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @val=@tcx}, 0x40) syz_emit_ethernet(0x22, &(0x7f0000000100)={@broadcast, @local, @val={@void}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "534ead40a3537293"}}}}, 0x0) executing program 1: syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4812, &(0x7f0000002140)=ANY=[], 0x11, 0x6aa, &(0x7f0000000fc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffff069}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="2001"], 0x120) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) listxattr(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0xf9) executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a600000ff0f040b067c55a1bc000900080006990300000015000500fe8081780d001500033f01400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a", 0xbd}], 0x1}, 0x0) executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="61aa000000b4eb8a990002031e7d9800000001"], 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ipvlan1\x00', 0x3001}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$TUNSETNOCSUM(r1, 0x8923, 0x20000000) executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200000a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d68b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e6d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf01860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e748fafa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f0844307df70f532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce"], 0x0}, 0x90) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'hsr0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r0, &(0x7f00000000c0)="3f0402e9260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1506fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) executing program 2: memfd_create(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4040ae9e, &(0x7f0000000700)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT]) program did not crash replaying the whole log did not cause a kernel crash single: executing 5 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-dup-ioctl$KVM_SET_MSRS detailed listing: executing program 0: memfd_create(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4040ae9e, &(0x7f0000000700)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT]) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-socket$packet-ioctl$sock_SIOCGIFINDEX-setsockopt$packet_int-sendto$packet detailed listing: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'hsr0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r0, &(0x7f00000000c0)="3f0402e9260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1506fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-openat$tun-ioctl$TUNSETIFF-openat$cgroup_ro-close-socketpair$unix-ioctl$TUNSETNOCSUM detailed listing: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="61aa000000b4eb8a990002031e7d9800000001"], 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ipvlan1\x00', 0x3001}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$TUNSETNOCSUM(r1, 0x8923, 0x20000000) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-prlimit64-sched_setscheduler-pipe2$9p-write$P9_RVERSION-dup-write$FUSE_BMAP-write$FUSE_DIRENTPLUS-write$FUSE_DIRENTPLUS-mount$9p_fd-listxattr detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4812, &(0x7f0000002140)=ANY=[], 0x11, 0x6aa, &(0x7f0000000fc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffff069}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="2001"], 0x120) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) listxattr(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0xf9) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-prctl$PR_SET_SECCOMP-rt_sigprocmask-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-syz_mount_image$hfsplus-bpf$MAP_CREATE-bpf$PROG_LOAD-mount-chroot-memfd_create-pwrite64-bpf$BPF_RAW_TRACEPOINT_OPEN-mmap-chdir-symlink-umount2 detailed listing: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x1193080, &(0x7f0000000c40)=ANY=[], 0x1, 0x5f2, &(0x7f0000001040)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mount(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000080)='./file0/../file0\x00') r1 = memfd_create(&(0x7f0000000000)='secer\x03\x00\x00\x00selin\x8cB\xabl\xa6e\x15ux\x00\xab', 0x0) pwrite64(r1, &(0x7f000003bfff)='/', 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) chdir(&(0x7f0000000240)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 30 programs with base timeout 1m40s testing program (duration=1m47s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 29, 5, 27, 8, 1, 15, 1, 7, 3, 1, 7, 5, 3, 2, 9, 2, 4, 7, 3, 3, 7, 17, 3, 13, 11, 2, 7, 5, 6] detailed listing: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000f7230000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) executing program 0: r0 = epoll_create1(0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="102598e3133ffc3d43cccd5f2c152ea47b6dc89f99cc957b84f4b579c528c4542df3c2d319c6a25a66d48b7a745096dcf8fa36a14e0d19d9a5fedc262dadc2ed8b8df36331bebfbce18881fa2bc80d3c9333b79949ee006476f3879f0036629fe1940c4517857bfa813839e82825da999c938b3e3bd6d51b2ec886b6c5aacda96b58ee789281a69f5ac81f01a8da883c3b78d9d277dbdac78fb97600b711f0c5118d794568d9"}, {&(0x7f0000000680)="b1ebc0b5e4d565cf2c8851db293e7a24939df464944ea945445e1ecf0f52754c0eb861448363c7b3d13ce66e451e54ac775af1144b35109cec8ca6829228b0cf3f192f7ad432b2df62f1553c57bdf4401766ae704e52bcb51bd04de018df2552d380bb217c96ebc2e318eef5fab4f3c25b3e0ab9c964b9302242bceaa92beba5cf6e2f49356be4e1be893fb3d93368e0e311c5662a678953dec3691d6a272c7cb421a3"}], 0x3}, 0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757331e372c84ef65ec9", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r3 = syz_io_uring_setup(0x181b, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000000100), &(0x7f00000000c0)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00140}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000a40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000200)={r5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000180)={0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1c}}, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000240)={r6, 0x3, r8, 0xffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000280)={r6}) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r9, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000180)) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r10, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r10, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x44}) r11 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8942, &(0x7f0000000640)) close(r10) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x8020000, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 1: socket$phonet(0x23, 0x2, 0x1) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x18, &(0x7f0000000800)={0x0, 0x1, 0x6, @local}, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="0303020000010000000045", 0xff4b, 0x4000050, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000090000000040"]) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x5, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000070601020000000000000000000000000500010007000000080006400000000a"], 0x24}}, 0x0) io_setup(0x1, &(0x7f0000000040)) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0x10, 0x3, 0x10) r7 = openat$cgroup_procs(r6, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000180), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, 0xffffffffffffffff, 0x0) executing program 3: socket$inet6(0xa, 0xa, 0x1) socket(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x2, 0x0, @private}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x2e, 0x1, 0xf}]}}}], 0x18}, 0x0) executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8}], {0x95, 0x0, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$input_event(r3, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600004, 0x15) executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x45e, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000001900000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="61aa000000b4eb8a990002031e7d9800000001"], 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ipvlan1\x00', 0x3001}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$TUNSETNOCSUM(r1, 0x8923, 0x20000000) executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fff2000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0xfffe) executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a600000ff0f040b067c55a1bc000900080006990300000015000500fe8081780d001500033f01400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5", 0xa2}], 0x1}, 0x0) executing program 3: syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000100)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2004400, &(0x7f0000000880)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYRESHEX, @ANYBLOB="eeb4a2e44957c0da6987213cace654f5830509bea94fc8f075e209cb543c1dacb1d721360aaee4622e7e12f2fc5c04975c3ffaffed71264fa69c26c2475c012a3a6617ec49d94b4bff651b1c2d65f54d3957a1a320a6d4b344a24254179d548edfe70713cf7923bb409ab7c90ae7b66e1b07c69eb1e662f96983b126762bdda2b1a514654338b69aa02d4184eff35324c4b3887d9555bcbdea896b26e9d04190"], 0x1, 0xa1b, &(0x7f0000001540)="$eJzs209sm+d9B/Dfw1dyaKdrFbdzkzbLWLQIMqUN5P9KvAH2rApt5iZGZWXzZTBlyQ4RiVIluXC6ofWwAUWAHowC62EDhlx2GLCDd9hlp2CHYcCwwdhhKFa009I1S28sNiCnTcP78qFEyXKsxbElO5+PYX/Jl7+XfP7Q5Es+fAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiPjNL58aOZh2uhUAwP300sTXRw57/weAj5RzPv8DAAAAAAAAAAAAAMBul6KIP40Ur/64ky5U17vqZ1rtK1cnx8a33m1vihS1KKr68m/94KHDR44eOz7ay/ff/8P2RLw8ce5U4/T83MLizNLSzHRjst26OD89s+17uNv9NxuuBqAx99qV6UuXlhqHnju84earQ+888uiBoRPHXzy/v1c7OTY+PtFXMzD4gR/9Frc7w2NPFPHTSFH/7rupGRG1uPuxuMNz517bW3ViuOrE5Nh41ZHZVrO9XN6YarmqFjHUt9PJ3hjdh7m4K42Ia2XzywYPl92bWGguNqdmZxpnm4vLreXWfDvVuq0t+zMUtRhNEQsR0SluvbvBKOLfIsX33uukqYgoeuPwbHVi8J3bU7sHfdyGgbJvRcTNeADmbBd7JIp4I1J8//xIXMzjWg3b0xFfK/OpiG+UuRJxPV9P5RPkyYhfbPF84sEyEEX8Y6SYT5003Zv76nXlzCuNr7YvzffV9l5XHvj3h/tpl7821aOIqeoVv5M++MEOAAAAAAC7TxF/EyluzD2TFqJ/TbHVvtw415ya7X4r3Pvuv5H3Wl1dXR1K3WzkHMl5MufZnBdyLuS8lvN6zjdz3sj5Vs6bOVdydnJGLT9+zkbOkZwnc57NeSHnQs5rOa/nfDPnjZxv5byZcyVnJ2dY9wIAAAAAAABgl9kbRfwoUnz+r79ZnVcc1Xnpnzgx+sxXvtB/zvin73A/Ze1zEXEjtndO7mA+dTjVyj8ffr/YnnoU8e18/t8f7HRjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHVWLIj4dKX7wRidFiohGxIXo5kqx060DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPoh6KuJ0pPj5l+vV9ZsR8ZmI+N/V8k9ErKxustMtBgAAAAAAAABukYoYiRSPPdFJQxFxdeidRx49MHTi+Ivn9xdRRCpL+utfnjh3qnF6fm5hcWZpaWa6MdluXZyfntnuw9XPtNpXrk6Ojd+TztzR3nvc/r310/MLry+2Lr+6vOXt++qnppaWF5sXt7459kYtYqR/y3DV4Mmx8arRs61mu9o11W7TwFpEY7udAQAAAAAAAOChsS8VcTRSvNo6knrrxgPdNf9f6l4r1mr//PfXfwswuyl7+n8/sJ3LabsNHa4W3huTY+PjE32bBwZvLS3blFIRfxUpPvs7j1fr4Sn2bbk2XtbtiRTHvnkk1w19tqw7uaGqPjw5Nt54ab79pVOzs/MXm8vNqdmZxsRC8+K2fzgAAAAAAAAAAPfQvlTEn0WK3x25mXrnnef1/4Hutb71/1+vltAr9bQx11Rr+x+v1va7lz9xYrQx/qu3234v1v/LNqVUxL9Gisd+7/HqfPre+v/Iptqy7r8ixb/8w5O5rranrDvY6073Hi+1ZmdGUh6rzz3bq42q9niu/eR67cGy9nOR4i+e3lg7mms/tV57qKz9o0jxP0e3rv3l9drDZe0fRorfervRq91X1p7JtQfWa5+7OD87fadhLef/byPF2Z9/JfX6fNv57/v9x7VNueaWOX//yx/W/A/1bbuW5/VHef4P3mH+/y5S/PFPnsx13bE/lG9/rPp3ff5/O1L8569srD2Wa/ev1x7cbrd2Wjn/X4wUJ374w7U+5/nPI7s+Q/3z/5mBjbn2LNmh+X+sb9tQbtfh/+dYfBQtvf6t15qzszOLLrjgggtrF3b6lYn7oXz//6dI8cKZWuodx+T3/491r60f/7337fX3/xc25Zodev/f37fthXzUMjgQUV+eWxg8EFFfev1bX2rNNS/PXJ5pjx47euT50WPHnh/c0zu2W7+07aF7KJTzfyZSvPKTf177HLPx+G/r4/99m3LNDs3/J/v7tOG4ZttD8ZFUzv/1SPGdt99d+7z5fsf/vc//z3x+Y679/9uh+f9U37bqN/4fj3i+b9ueiDi13ccCAACAh8y+vE7+J7/292vnvG/8/B9f6NX2f/9zO7vh/H8AAAAAAPio25eK+MtI8d8jX0y9c8i28/vP6U25Zod+/3egb9v0fTqvZduDDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwC6Uo4qlI8eqPO2mlKK931c+02leuTo6Nb73b3hQpalFU9eXf+sFDh48cPXZ8tJfvv/+H7Yl4eeLcqcbp+bmFxZmlpZnpxmS7dXF+embb93C3+282XA1AY+61K9OXLi01Dj13eMPNV4feeeTRA0Mnjr94fn+vdnJsfHyir2Zg8AM/+i3SbbbviSIuRYr6d99N/15E1OLux+IOz517bW/VieGqE5Nj41VHZlvN9nJ5Y6rlqlrEUN9OJ3tjdB/m4q40Iq6VzS8bPFx2b2Khudicmp1pnG0uLreWW/PtVOu2tuzPUNRiNEUsRESnuPXuBqOIqUjxvfc66e0iouiNw7MvTXx95PCd21O7B33st/qdLTcPlH0rIm7GAzBnu9gjUcTHIsX3z4/ET4vuuFbD9nTE18p8KuIbZa5EXM/XU/kEeTLiF1s8n3iwDEQRZyPFfOqk/yjy3FevK2deaXy1fWm+r7b3uvLAvz/cT7v8takeRfysesXvpJ/5/wwAAAAA8BAp4jcixY25Z1K1Pri2pthqX26ca07Ndr/W733338h7ra6urg6lbjZyjuQ8mfNszgs5F3Jey3k955s5b+R8K+fNnCs5Ozmjlh8/ZyPnSM6TOc/mvJBzIee1nNdzvpnzRs63ct7MuZKzkzN8Tw4AAAAAAADsQrUo4vFI8YM3Omm16C7wXohurljnfOj9XwAAAP//dBg+9w==") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x275a, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) pread64(r0, 0x0, 0x0, 0x0) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) close(0x3) executing program 4: socket$inet6(0xa, 0xa, 0x1) socket(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x2, 0x0, @private}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x2e, 0x1, 0xf}]}}}], 0x18}, 0x0) executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000a40)={[{@dioread_nolock}, {@lazytime}, {@quota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_continue}, {@data_err_ignore}, {@errors_remount}, {@delalloc}, {@auto_da_alloc}, {@norecovery}, {@errors_continue}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0xee, 0x442, &(0x7f0000000d00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001380)=ANY=[@ANYBLOB="000000004c9002000700000003000100"/128, @ANYBLOB="c039b8d78786d4f954ab1af0830c41819a8ade39d851b22932a98fcb91325fda171806000000000000001b"]) executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) io_cancel(0x0, 0x0, 0x0) executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x1193080, &(0x7f0000000c40)=ANY=[], 0x1, 0x5f2, &(0x7f0000001040)="$eJzs3U9vHGcdB/DvbGLHG6R0k6ZNQUhY5QBqROI/kTESElAKslCFKnHpCclKNrWVTRrZW+T2gFzEuX0L5WCucOCEgpQDZ96CUY8I7haXoJmdsTe26ziJ47XD5yPNPs+zz8wzv/nlmcnMrKIE+L+18H7GHqbIwtV318r25sZsb3Nj9m5TT3IuSSuZSFKUX/8lyZfJfJL1sv31pmOo3KP4fOHm0oPPrgxaE/VSrt8+cLvDWW9i6QxircqjGm/muccrto9wMsmluoSRe9T4577dz3leAgAnWfHf+j5g1/ed5Hx9s14+Bwzuigf32Kfa+qgDAAAAgGPwyla2spYLo44DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATpMiOTMoqqXV1CdTNP///3j9Xer6qfZw1AEAAAAAAAAAwBH41la2spYLTftRUf3m/2bVuFx9fi0fZTXdrORa1rKYfvpZyXSSztBA42uL/f7K9CG2nNl3y5njOV4AAAAAAAAAeEn9Lgs7v/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBJUCRnBkW1XG7qnbTOJplIMl6ut548aOrJn8ZHHPYzezjqAAAAAOAYvLKVrazlQtN+VFTP/K9Xz/0T+Sj30s9y+umlm1vVu4DBU39rc2O2t7kxe7dc9o77k/88VRjViBm8e9h/z1PVGq9tb7GQn+dXuZrJvJeVLOc3WUw/3Uzmnaq2mCKd+u1Fp4lzLMneeH/8WOu9J8X6RhVJO7ezXMV2LTfzYXq5lVZ1DNU6zR73z9CnZXaKH9UOmaNbdVke0S/q8mToVBkZ287IVJ37MhsXD87EU86T3XuaTqt5B5XLLyDn5+uyzPU7x5rzsSf0787EzNDse/3gTCRTM/++v9S7d2fp9urVkzONntHuTMwOZeLK4TIxlpciE+N1NgZX0ae7Wr5ZbXshy/llPsytdDOfqcxnLjcym7n8IHODvLbrIZ94rrWe7lz79nfrSjnzf3aIM+D4lHm9OJTX4Stdp+ob/mZn9l06+ivS2W/UlXKyvn3i/ha4uOva3GTi1YMz8YdH5edq796dlaXF+4fc33fqsszAT09UJsr5cqn8w6paj8+Osu/Vffumq77L232tPX2vbfc96Uwdr+/h9o40U/Vd2bdvtup7Y6hvv7scAE6882+dH2//q/2P9hft37eX2u9OvH1u/tw3xzP297N/PfPn1h9bPyzeyhf57c7zPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8OxWP/7kzmKv111RUVF5vHJqTpBPf330I4/6ygS8aNf7d+9fX/34k+8t3138oPtB996N6bmZGzem5r4/f/32cq87NfgcdZgAwBHauekfdSQAAAAAAAAAAAAAAMBXOY5/nzzqYwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF5uC+9n7GGKTE9dmyrbmxuzvXJp6jtrTiQpysrfknyZrGewpDM0XPFV+yk+X7i59OCzKztjTTTrFwdtdziPxdLaFdPzjjfz3OPtHOFkkkt1CSP3vwAAAP//4WMFng==") bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mount(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000080)='./file0/../file0\x00') r1 = memfd_create(&(0x7f0000000000)='secer\x03\x00\x00\x00selin\x8cB\xabl\xa6e\x15ux\x00\xab', 0x0) pwrite64(r1, &(0x7f000003bfff)='/', 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) chdir(&(0x7f0000000240)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) executing program 4: socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @val=@tcx}, 0x40) syz_emit_ethernet(0x22, &(0x7f0000000100)={@broadcast, @local, @val={@void}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "534ead40a3537293"}}}}, 0x0) executing program 1: syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4812, &(0x7f0000002140)=ANY=[], 0x11, 0x6aa, &(0x7f0000000fc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffff069}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="2001"], 0x120) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) listxattr(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0xf9) executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a600000ff0f040b067c55a1bc000900080006990300000015000500fe8081780d001500033f01400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a", 0xbd}], 0x1}, 0x0) executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="61aa000000b4eb8a990002031e7d9800000001"], 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ipvlan1\x00', 0x3001}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$TUNSETNOCSUM(r1, 0x8923, 0x20000000) executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'hsr0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r0, &(0x7f00000000c0)="3f0402e9260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1506fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) executing program 2: memfd_create(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4040ae9e, &(0x7f0000000700)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT]) program did not crash replaying the whole log did not cause a kernel crash single: executing 5 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-dup-ioctl$KVM_SET_MSRS detailed listing: executing program 0: memfd_create(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4040ae9e, &(0x7f0000000700)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT]) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-socket$packet-ioctl$sock_SIOCGIFINDEX-setsockopt$packet_int-sendto$packet detailed listing: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'hsr0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r0, &(0x7f00000000c0)="3f0402e9260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1506fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-openat$tun-ioctl$TUNSETIFF-openat$cgroup_ro-close-socketpair$unix-ioctl$TUNSETNOCSUM detailed listing: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="61aa000000b4eb8a990002031e7d9800000001"], 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ipvlan1\x00', 0x3001}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$TUNSETNOCSUM(r1, 0x8923, 0x20000000) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-prlimit64-sched_setscheduler-pipe2$9p-write$P9_RVERSION-dup-write$FUSE_BMAP-write$FUSE_DIRENTPLUS-write$FUSE_DIRENTPLUS-mount$9p_fd-listxattr detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4812, &(0x7f0000002140)=ANY=[], 0x11, 0x6aa, &(0x7f0000000fc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffff069}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="2001"], 0x120) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) listxattr(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0xf9) program crashed: KMSAN: uninit-value in hfs_find_1st_rec_by_cnid single: successfully extracted reproducer found reproducer with 11 syscalls minimizing guilty program testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-prlimit64-sched_setscheduler-pipe2$9p-write$P9_RVERSION-dup-write$FUSE_BMAP-write$FUSE_DIRENTPLUS-write$FUSE_DIRENTPLUS-mount$9p_fd detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4812, &(0x7f0000002140)=ANY=[], 0x11, 0x6aa, &(0x7f0000000fc0)="$eJzs3c1vHGcdB/DvrNcvm0qO26ZpQJVqGqkgIpI4VgrhkoAQClKFqiDB2WqcxsomDY6L0h6IC0hcOfAHlEO4wAmEkJCQIpUz3CpuFqdKSFx6Sntg0M7Obtburr1JmqxDPx9rdn7PPLPP/OY3L/siWRvgc+v8sTTvpJXzx1692Wlv3V5ub91evtqNG+0ks0kaSbM7S3EtKd5PzqU75QudhfVwxajt/HrtzIUPPtr6sNtq5t54nYfW6ASb4+zFZj1lMclUPX8I28Z7/cHGm70XFv3KdAp2tFc4mLTpJOU2Pz58r2eYcmqgMfJ6B54cRfd1c0D3+l9IDiSZ672gbXY7G48/wz3d171o89HlAQAAAPvGwbu3kpuZn3QeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CSpf/+/qKdGL15M0fv9/5mB39ifmXC6o+2e2VwvuNN4HMkAAAAAAAAAwKP14t387kJZzvfaZZHGD6fqxqHq8am8lRtZzXqO52ZWspGNrGcpycLAQDM3VzY21pfyUveZn5RlOeKZp4Y+89SYCbcefp8BAAAAAAAA4P/I2Xr+s5zP/IRzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAbYpkqjurpkO9eCGNZpK5JDOd9TaTf/TiJ9mdSScAAAAAj8HBu7mbm5nvtcui+sx/uPrcP5e3ci0bWctG2lnNxeq7gO6n/sbW7eX21u3lq53p0+N+6z/34j/O75lGNWK63z0M3/KRao1WLmWtWnI8r+fNtHMxjeqZHUd6+QzP691OTsXZrrLM7DgFuljPO3v+q3q+PyxUFZnuV+RkJ7eiW8end6/E4NF5gC0tpdH/5ufQfdT87K5bKf5blt3oQG9J8tT39q759H3tzEPZWYlTA2ff4d0rkXz5T7//0eX2tSuXi81j++c0GubF4Ytn/9U7Qr1KdG1mNcsDlXh+7EpcurHPKzFSc1urkef68fl8Nz/IsSzmtaxnLT/JSjaymsV8p4pW6vO587iwe6XObWu9tldOM/VxmdqR05cOdue75fRS9dz5rOX7eTMXs5pXqr9TWcrXczqnc2bgCD83xlXfGHLV/3l08ke/UgetJL+s5/tDp65PD9R18J67UPUNLmmkrF9ZnvnM7o19zS/WQedI/HzgGpy8fiXm0n+V6GX3bK8C00Mr8ZvqtnKjfe3K+uWV6zvGLTaHb+/lbN/9/XMj6Zwvz/TvEdvPjk7fs0P7lqq+Q/2+xs6+37b6fXtdqTP1e7hPj3Sq6nt+aN9y1XdkoK/zfmsuyWo+Kcuy+34LgH3vwFcPzLT+3fp7673WL1qXW6/OfXv2G7MvzGT6b9PfbJ6cernxQvGHvJefZu9P6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ5uvP3OlZV2e3V9R1CW5a0RXY8kSDPZtuSvfxlYp/qtsSTjD9hZ+1wjqZY0Uwf3l9itB9uddx+0CP+sj8ljKfhnEsyNPH92Bh+XZbk/ch4nKGv7JZ9JBBO9LQGPwYmNq9dP3Hj7na+tXV15Y/WN1WtnTp8+c/LM6VeWT1xaa89NOj3gEape66v3OZPOBAAAAAAAAAAAABjXeP+cU/SXNJPc9//2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyE88fSvJMiSyePn+y0t24vtztTL7635sdJGkmKxaR4PzmX7pSFgeGKUdvZTC588NHWh91Ws56q9RsPvxeb9ZTFJFP1fIi5YQvLW6PGK6pxro8eb0xFvzKdgh3tFQ4m7X8BAAD//yq0FcU=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffff069}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="2001"], 0x120) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-prlimit64-sched_setscheduler-pipe2$9p-write$P9_RVERSION-dup-write$FUSE_BMAP-write$FUSE_DIRENTPLUS-write$FUSE_DIRENTPLUS-listxattr detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4812, &(0x7f0000002140)=ANY=[], 0x11, 0x6aa, &(0x7f0000000fc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffff069}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="2001"], 0x120) listxattr(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0xf9) program crashed: KMSAN: uninit-value in hfs_find_1st_rec_by_cnid testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-prlimit64-sched_setscheduler-pipe2$9p-write$P9_RVERSION-dup-write$FUSE_BMAP-write$FUSE_DIRENTPLUS-listxattr detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4812, &(0x7f0000002140)=ANY=[], 0x11, 0x6aa, &(0x7f0000000fc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffff069}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) listxattr(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0xf9) program crashed: KMSAN: uninit-value in hfs_find_1st_rec_by_cnid testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-prlimit64-sched_setscheduler-pipe2$9p-write$P9_RVERSION-dup-write$FUSE_BMAP-listxattr detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4812, &(0x7f0000002140)=ANY=[], 0x11, 0x6aa, &(0x7f0000000fc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffff069}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18}, 0x18) listxattr(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0xf9) program crashed: KMSAN: uninit-value in hfs_find_1st_rec_by_cnid testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-prlimit64-sched_setscheduler-pipe2$9p-write$P9_RVERSION-dup-listxattr detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4812, &(0x7f0000002140)=ANY=[], 0x11, 0x6aa, &(0x7f0000000fc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffff069}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) dup(r0) listxattr(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0xf9) program crashed: KMSAN: uninit-value in hfs_find_1st_rec_by_cnid testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-prlimit64-sched_setscheduler-pipe2$9p-write$P9_RVERSION-listxattr detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4812, &(0x7f0000002140)=ANY=[], 0x11, 0x6aa, &(0x7f0000000fc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffff069}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) listxattr(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0xf9) program crashed: KMSAN: uninit-value in hfs_find_1st_rec_by_cnid testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-prlimit64-sched_setscheduler-pipe2$9p-listxattr detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4812, &(0x7f0000002140)=ANY=[], 0x11, 0x6aa, &(0x7f0000000fc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffff069}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) pipe2$9p(&(0x7f0000002180), 0x0) listxattr(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0xf9) program crashed: KMSAN: uninit-value in hfs_find_1st_rec_by_cnid testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-prlimit64-sched_setscheduler-listxattr detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4812, &(0x7f0000002140)=ANY=[], 0x11, 0x6aa, &(0x7f0000000fc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffff069}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) listxattr(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0xf9) program crashed: KMSAN: uninit-value in hfs_find_1st_rec_by_cnid testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-prlimit64-listxattr detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4812, &(0x7f0000002140)=ANY=[], 0x11, 0x6aa, &(0x7f0000000fc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffff069}, 0x0) listxattr(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0xf9) program crashed: KMSAN: uninit-value in hfs_find_1st_rec_by_cnid testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-listxattr detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4812, &(0x7f0000002140)=ANY=[], 0x11, 0x6aa, &(0x7f0000000fc0)="$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") listxattr(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0xf9) program crashed: KMSAN: uninit-value in hfs_find_1st_rec_by_cnid testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): listxattr detailed listing: executing program 0: listxattr(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0xf9) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-listxattr detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4812, &(0x7f0000002140)=ANY=[], 0x11, 0x6aa, &(0x7f0000000fc0)="$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") listxattr(0x0, 0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-listxattr program crashed: KMSAN: uninit-value in hfs_find_1st_rec_by_cnid simplifying C reproducer testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-listxattr program crashed: KMSAN: uninit-value in hfs_find_1st_rec_by_cnid testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-listxattr program crashed: KMSAN: uninit-value in hfs_find_1st_rec_by_cnid testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-listxattr program crashed: KMSAN: uninit-value in hfs_find_1st_rec_by_cnid testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-listxattr program crashed: KMSAN: uninit-value in hfs_find_1st_rec_by_cnid testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-listxattr program crashed: KMSAN: uninit-value in hfs_find_1st_rec_by_cnid testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-listxattr program crashed: KMSAN: uninit-value in hfs_find_1st_rec_by_cnid testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-listxattr program crashed: KMSAN: uninit-value in hfs_find_1st_rec_by_cnid reproducing took 2h44m16.004017661s repro crashed as (corrupted=false): loop0: detected capacity change from 0 to 1024 ===================================================== BUG: KMSAN: uninit-value in hfs_find_1st_rec_by_cnid+0x27a/0x3f0 fs/hfsplus/bfind.c:67 hfs_find_1st_rec_by_cnid+0x27a/0x3f0 fs/hfsplus/bfind.c:67 __hfsplus_brec_find+0x26f/0x7b0 fs/hfsplus/bfind.c:124 hfsplus_brec_find+0x445/0x970 fs/hfsplus/bfind.c:184 hfsplus_find_attr+0x30c/0x390 hfsplus_listxattr+0x586/0x1a50 fs/hfsplus/xattr.c:706 vfs_listxattr fs/xattr.c:493 [inline] listxattr+0x1f3/0x6b0 fs/xattr.c:840 path_listxattr fs/xattr.c:864 [inline] __do_sys_listxattr fs/xattr.c:876 [inline] __se_sys_listxattr fs/xattr.c:873 [inline] __x64_sys_listxattr+0x168/0x2e0 fs/xattr.c:873 x64_sys_call+0xded/0x3c10 arch/x86/include/generated/asm/syscalls_64.h:195 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was created at: slab_post_alloc_hook mm/slub.c:3994 [inline] slab_alloc_node mm/slub.c:4037 [inline] __do_kmalloc_node mm/slub.c:4157 [inline] __kmalloc_noprof+0x661/0xf30 mm/slub.c:4170 kmalloc_noprof include/linux/slab.h:685 [inline] hfsplus_find_init+0x95/0x1d0 fs/hfsplus/bfind.c:21 hfsplus_listxattr+0x44a/0x1a50 fs/hfsplus/xattr.c:693 vfs_listxattr fs/xattr.c:493 [inline] listxattr+0x1f3/0x6b0 fs/xattr.c:840 path_listxattr fs/xattr.c:864 [inline] __do_sys_listxattr fs/xattr.c:876 [inline] __se_sys_listxattr fs/xattr.c:873 [inline] __x64_sys_listxattr+0x168/0x2e0 fs/xattr.c:873 x64_sys_call+0xded/0x3c10 arch/x86/include/generated/asm/syscalls_64.h:195 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f CPU: 1 UID: 0 PID: 5043 Comm: syz-executor393 Not tainted 6.10.0-syzkaller-12246-g786c8248dbd3 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 ===================================================== final repro crashed as (corrupted=false): loop0: detected capacity change from 0 to 1024 ===================================================== BUG: KMSAN: uninit-value in hfs_find_1st_rec_by_cnid+0x27a/0x3f0 fs/hfsplus/bfind.c:67 hfs_find_1st_rec_by_cnid+0x27a/0x3f0 fs/hfsplus/bfind.c:67 __hfsplus_brec_find+0x26f/0x7b0 fs/hfsplus/bfind.c:124 hfsplus_brec_find+0x445/0x970 fs/hfsplus/bfind.c:184 hfsplus_find_attr+0x30c/0x390 hfsplus_listxattr+0x586/0x1a50 fs/hfsplus/xattr.c:706 vfs_listxattr fs/xattr.c:493 [inline] listxattr+0x1f3/0x6b0 fs/xattr.c:840 path_listxattr fs/xattr.c:864 [inline] __do_sys_listxattr fs/xattr.c:876 [inline] __se_sys_listxattr fs/xattr.c:873 [inline] __x64_sys_listxattr+0x168/0x2e0 fs/xattr.c:873 x64_sys_call+0xded/0x3c10 arch/x86/include/generated/asm/syscalls_64.h:195 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was created at: slab_post_alloc_hook mm/slub.c:3994 [inline] slab_alloc_node mm/slub.c:4037 [inline] __do_kmalloc_node mm/slub.c:4157 [inline] __kmalloc_noprof+0x661/0xf30 mm/slub.c:4170 kmalloc_noprof include/linux/slab.h:685 [inline] hfsplus_find_init+0x95/0x1d0 fs/hfsplus/bfind.c:21 hfsplus_listxattr+0x44a/0x1a50 fs/hfsplus/xattr.c:693 vfs_listxattr fs/xattr.c:493 [inline] listxattr+0x1f3/0x6b0 fs/xattr.c:840 path_listxattr fs/xattr.c:864 [inline] __do_sys_listxattr fs/xattr.c:876 [inline] __se_sys_listxattr fs/xattr.c:873 [inline] __x64_sys_listxattr+0x168/0x2e0 fs/xattr.c:873 x64_sys_call+0xded/0x3c10 arch/x86/include/generated/asm/syscalls_64.h:195 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f CPU: 1 UID: 0 PID: 5043 Comm: syz-executor393 Not tainted 6.10.0-syzkaller-12246-g786c8248dbd3 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 =====================================================