Extracting prog: 3m57.299805727s Minimizing prog: 34m23.98880135s Simplifying prog options: 0s Extracting C: 20.003805653s Simplifying C: 3m52.691973096s extracting reproducer from 24 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$9p_virtio-chdir-openat-write$P9_RREADLINK-openat-write$P9_RREADLINK detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r0, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r1, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) (fail_nth: 4) program did not crash single: failed to extract reproducer bisect: bisecting 24 programs with base timeout 30s testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 21, 2, 4, 4, 10, 4, 8, 15, 2, 17, 16, 30, 14, 11, 20, 2, 19, 28, 7, 7, 6, 30, 7] detailed listing: executing program 3: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) executing program 3: r0 = io_uring_setup(0x342d, &(0x7f0000000200)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}], 0x0}, 0x20) io_uring_enter(r0, 0x10ac, 0x44b4, 0x23, &(0x7f0000000040)={[0xe]}, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r5, r6, 0x2, 0x2, 0x0, @void, @value}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) ioctl$HIDIOCGRDESCSIZE(r2, 0x80044801, &(0x7f0000000000)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r9, 0x4004ae8b, &(0x7f0000000100)=ANY=[@ANYBLOB='\b']) pread64(r1, &(0x7f00000043c0)=""/148, 0x94, 0xd) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c0000000206010100000000000000000000000005000100070000000900020073797a3100000000050005000a0000000500040000000000110003"], 0x4c}}, 0x0) (fail_nth: 3) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="010000000000000008001b"], 0x28}}, 0x0) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="010000000000000008001b"], 0x28}}, 0x0) executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x1, 'sh\x00'}, 0x2c) setsockopt(r0, 0x6, 0xd2f2, &(0x7f00000004c0)="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", 0x1000) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f00000001c0)={0x20000000000084, @broadcast, 0x0, 0x200000001, 'ovf\x00'}, 0x2c) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000080)=0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200)={r3, 0x80}, 0x8) write$char_usb(r1, 0x0, 0x0) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="010000000000000008001b"], 0x28}}, 0x0) executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000100)={0x2, 0x9, 0x2, 0x8, 0x8, 0x40}) executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9000}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x34}}, 0x40000d0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x40448c0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100, 0x0, 0x16e}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x30}}) io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c00000000030000060800064000000001700002000c000280050001003a0000002c00018014000300ff02000000000000000000000000000114000400ff01000000000000000000000000000106000340000000002c00018014000300fc01000000000000000000000000000014000400fe80000000000000000000000000001b"], 0x8c}, 0x1, 0x0, 0x0, 0x4004140}, 0x48094) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) truncate(&(0x7f0000000040)='./file0\x00', 0x0) executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38010000100033060000000000000000ac1e0001000000000000000000000000fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}}, 0x0) executing program 0: socketpair(0x27, 0x800, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@nat={'nat\x00', 0x1b, 0x5, 0x3e8, 0x0, 0x1a0, 0xffffffff, 0x248, 0x248, 0x350, 0x350, 0xffffffff, 0x350, 0x350, 0x5, &(0x7f0000000040), {[{{@ip={@broadcast, @private=0xa010100, 0xffffffff, 0xffffffff, 'veth0\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0x5c, 0x2, 0x2}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@socket0={{0x20}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private=0xa010101, @local, @icmp_id=0x67, @port=0x4e20}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4=@multicast1, @port=0x4e24, @gre_key=0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xffffffff, 0xff000000, 'veth1\x00', 'macvlan0\x00', {}, {}, 0x11, 0x2, 0x5}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x6, @multicast2, @private=0xa010101, @port=0x4e22, @port=0x4e21}}}}, {{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@addrtype={{0x30}, {0x609, 0x0, 0x0, 0x1}}, @common=@addrtype={{0x30}, {0x2, 0x9b8, 0x0, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2, @rand_addr=0x64010102, @empty, @gre_key=0x7ff, @gre_key=0x644}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0x11, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @local}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xff000000}]}}]}, 0x44}}, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, &(0x7f0000000980)) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r6, 0x9, 0x0) ioctl$sock_ax25_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@default, @bcast, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='limits\x00') lseek(r7, 0x9, 0x0) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) executing program 1: bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a801800048014000380"], 0x3c}}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) pipe(&(0x7f0000000200)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) executing program 2: prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x44050) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r3, 0x80184947, &(0x7f0000005480)={0x0, 'syz1\x00'}) r4 = syz_open_dev$usbmon(&(0x7f0000001b80), 0x4, 0x400) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) socketpair$unix(0x1, 0x2, 0x0, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_setup(0x29ea, &(0x7f0000000480)={0x0, 0x0, 0x2}) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0xcef, @none}, 0xe) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000080), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r4, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x1004) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000d0a1ede72a05b3fb447e701fe4ce7177d000"/36, @ANYRES16=r0, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r5, @ANYBLOB="080026006c0900000800b70000000000"], 0x2c}}, 0x0) executing program 2: socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000020601030000000000010000000000000900020073797a300000000005000100060000000500050000000000050004000000000014000780080011400000000005001500000000000d000300686173683a6d6163"], 0x5c}}, 0x0) socket$kcm(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x13) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat2(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x101000, 0x4, 0xa}, 0x18) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@default, @default, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) (fail_nth: 4) executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x80010, 0xffffffffffffffff, 0x1000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000080)=0x1) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000080)=ANY=[]) ioctl$KVM_GET_VCPU_EVENTS(r3, 0xc048aeca, &(0x7f0000000080)) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x4f, 0x2, 0x1, "8baadc000000000000ffffffff00000000c300000000000000001c00", 0x51424752}) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) semtimedop(0x0, &(0x7f0000000180)=[{0x4, 0x7, 0x1000}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000004eff2c9902403435d1f8f78c30278b8ea3c91aaa881877246582eb0e986db38d7e82e361d9140dc40441c34ec85012c3c3174742d59c6f164edd651bee942a81f13ae4af3712569008ee9d6f3af1f3107d5c7312fd09466b164132bf8c54d7f3bf208265d3f6f018c06eade3fcc2d2d40b59e00c6b3225b8c0a08de35c0ebc8ebdd76e59ca71d680fef9afd47955cd9a9cadf3f95a74297b2fbaa47196a72509192e1481b803456475d044f8e8d0affd348dab6bcb4ca6d00472a0f486", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$inet6(0xa, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r6], 0x44}}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r7, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r8, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r10 = io_uring_setup(0x168e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffff}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) close(r9) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r9, 0x0, 0x4ffe6, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@default, @default, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x44050) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 3) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r0, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r1, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) (fail_nth: 4) executing program 1: r0 = socket(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000300)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0xb, 0x0, @fd_index=0x7}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0x8e, r0, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) executing program 1: r0 = socket(0x2b, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0xb, 0x0, @fd_index=0x7}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r5, 0x2, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x2, 0x4, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f0000000040)) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_PIT(r8, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000480)=[@text64={0x40, &(0x7f0000000300)="450f01df4a0f7e8753df0000420f01f80f01c5440f786ce30766b811018ee8b805000000b90e2c84030f01c166baf80cb84068588eef66bafc0cecf3f00fc01ba12a3026f5ea6ae621", 0x49}], 0x1, 0x5a, &(0x7f00000004c0)=[@dstype0={0x6, 0x3}, @dstype3={0x7, 0x7}], 0x2) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x5, 0x800000000000, 0x0, 0x2004cb, 0x200000000000, 0x5, 0x0, 0xfffffffffffffffd], 0x0, 0x40200}) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1080002}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400660020ca37cbf6dcad3e680f858ec97bf74eb9b9490a12357fb7e2f6ffc1390145b872a455280100ac8caba1c80c765c272e5324ee49df9df55233867e854c8c3e87d4ecd21a4ac2f510b5088db3b688297681000000000000000a0381969035cedd79b07ea1e036e38511ed5c72797a6f0ef1abd48b0c745ffac0d18698323026b2fdcac65b3d4e", @ANYRES16=r6, @ANYRES8=r2], 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x10) mount_setattr(0xffffffffffffff9c, 0x0, 0x100, &(0x7f0000000000)={0x0, 0x100001, 0x160000}, 0x20) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000540)="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", &(0x7f0000001540)="bea841aed364b1d690bc2b44f72d2802901fac7adde3220fca9a9688dcf2000d27745a264471e17d951a83a1d218da14a20139ece39b38e44ea1cc2d3b041cb5f3e728040d5a9067f866b9e5c71de3f708d71ceacc003ec9be854900e50da43949027b3c3f6d07a819aa0311aacb10b5373de130eb04f628fe4d42f6eb8731c2d6ac5aa0f4e0de3debcd94e517017cce1404e7eb"}}, &(0x7f0000bbdffc)) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r0, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r1, &(0x7f0000000080)={0xf80, 0x17, 0x1, {0x1, '.'}}, 0xa) program did not crash replaying the whole log did not cause a kernel crash single: executing 1 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$9p_virtio-chdir-openat-write$P9_RREADLINK-openat-write$P9_RREADLINK detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r0, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r1, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) (fail_nth: 4) program crashed: kernel BUG in folio_unlock single: successfully extracted reproducer found reproducer with 7 syscalls minimizing guilty program testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$9p_virtio-chdir-openat-write$P9_RREADLINK-openat detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r0, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$9p_virtio-chdir-openat-write$P9_RREADLINK-write$P9_RREADLINK detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r0, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) (fail_nth: 4) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$9p_virtio-chdir-openat-openat-write$P9_RREADLINK detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r0, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) (fail_nth: 4) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$9p_virtio-chdir-write$P9_RREADLINK-openat-write$P9_RREADLINK detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r0, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) (fail_nth: 4) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$9p_virtio-openat-write$P9_RREADLINK-openat-write$P9_RREADLINK detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r0, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r1, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) (fail_nth: 4) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-chdir-openat-write$P9_RREADLINK-openat-write$P9_RREADLINK detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r0, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r1, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) (fail_nth: 4) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$9p_virtio-chdir-openat-write$P9_RREADLINK-openat-write$P9_RREADLINK detailed listing: executing program 0: mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r0, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r1, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) (fail_nth: 4) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$9p_virtio-chdir-openat-write$P9_RREADLINK-openat-write$P9_RREADLINK detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r0, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r1, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$9p_virtio-chdir-openat-write$P9_RREADLINK-openat-write$P9_RREADLINK detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r0, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r1, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) (fail_nth: 4) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$9p_virtio-chdir-openat-write$P9_RREADLINK-openat-write$P9_RREADLINK detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r0, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r1, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) (fail_nth: 4) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$9p_virtio-chdir-openat-write$P9_RREADLINK-openat-write$P9_RREADLINK detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r0, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r1, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) (fail_nth: 4) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$9p_virtio-chdir-openat-write$P9_RREADLINK-openat-write$P9_RREADLINK detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r0, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r1, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) (fail_nth: 4) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$9p_virtio-chdir-openat-write$P9_RREADLINK-openat-write$P9_RREADLINK detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r0, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r1, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) (fail_nth: 4) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$9p_virtio-chdir-openat-write$P9_RREADLINK-openat-write$P9_RREADLINK detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r0, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r1, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) (fail_nth: 4) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$9p_virtio-chdir-openat-write$P9_RREADLINK-openat-write$P9_RREADLINK detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r0, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r1, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) (fail_nth: 4) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$9p_virtio-chdir-openat-write$P9_RREADLINK-openat-write$P9_RREADLINK detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x62881, 0x19d) write$P9_RREADLINK(r0, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r1, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) (fail_nth: 4) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$9p_virtio-chdir-openat-write$P9_RREADLINK-openat-write$P9_RREADLINK detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r1, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) (fail_nth: 4) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$9p_virtio-chdir-openat-write$P9_RREADLINK-openat-write$P9_RREADLINK detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r0, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) r1 = openat(0xffffffffffffff9c, 0x0, 0x62881, 0x19d) write$P9_RREADLINK(r1, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) (fail_nth: 4) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$9p_virtio-chdir-openat-write$P9_RREADLINK-openat-write$P9_RREADLINK detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r0, &(0x7f0000000080)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r1, 0x0, 0x0) (fail_nth: 4) program did not crash extracting C reproducer testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$9p_virtio-chdir-openat-write$P9_RREADLINK-openat-write$P9_RREADLINK program crashed: kernel BUG in folio_unlock simplifying C reproducer testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$9p_virtio-chdir-openat-write$P9_RREADLINK-openat-write$P9_RREADLINK program crashed: kernel BUG in folio_unlock testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$9p_virtio-chdir-openat-write$P9_RREADLINK-openat-write$P9_RREADLINK program crashed: kernel BUG in folio_unlock testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$9p_virtio-chdir-openat-write$P9_RREADLINK-openat-write$P9_RREADLINK program crashed: kernel BUG in folio_unlock testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$9p_virtio-chdir-openat-write$P9_RREADLINK-openat-write$P9_RREADLINK program crashed: kernel BUG in folio_unlock testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$9p_virtio-chdir-openat-write$P9_RREADLINK-openat-write$P9_RREADLINK program crashed: kernel BUG in folio_unlock testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$9p_virtio-chdir-openat-write$P9_RREADLINK-openat-write$P9_RREADLINK program crashed: kernel BUG in folio_unlock testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$9p_virtio-chdir-openat-write$P9_RREADLINK-openat-write$P9_RREADLINK program crashed: kernel BUG in folio_unlock reproducing took 42m33.984433461s repro crashed as (corrupted=false): handle_mm_fault+0x3fa/0xaa0 mm/memory.c:6201 do_user_addr_fault+0x7a3/0x13f0 arch/x86/mm/fault.c:1388 handle_page_fault arch/x86/mm/fault.c:1480 [inline] exc_page_fault+0x5c/0xc0 arch/x86/mm/fault.c:1538 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 ------------[ cut here ]------------ kernel BUG at mm/filemap.c:1499! Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI CPU: 2 UID: 0 PID: 5943 Comm: syz-executor175 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:folio_unlock mm/filemap.c:1499 [inline] RIP: 0010:folio_unlock+0xb3/0xd0 mm/filemap.c:1494 Code: f3 68 ca ff 48 89 ef 31 f6 e8 e9 ed ff ff 5b 5d e9 e2 68 ca ff e8 dd 68 ca ff 48 c7 c6 00 8a 78 8b 48 89 ef e8 de c9 11 00 90 <0f> 0b 48 89 df e8 d3 83 2d 00 e9 7b ff ff ff 66 66 2e 0f 1f 84 00 RSP: 0000:ffffc900016bf988 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc900016bf830 RDX: ffff888022f1a440 RSI: ffffffff81ef7612 RDI: ffff888022f1a884 RBP: ffffea0000cd1c40 R08: 0000000000000000 R09: fffffbfff20c49e2 R10: ffffffff90624f17 R11: 0000000000000003 R12: ffff888039c10890 R13: ffff888039c10bb0 R14: ffffea0000cd1c40 R15: ffffc900016bfde8 FS: 00005555874b3380(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f8e03250028 CR3: 00000000236ec000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: netfs_perform_write+0xc04/0x2140 fs/netfs/buffered_write.c:400 netfs_buffered_write_iter_locked fs/netfs/buffered_write.c:445 [inline] netfs_file_write_iter+0x494/0x550 fs/netfs/buffered_write.c:484 v9fs_file_write_iter+0x9b/0x100 fs/9p/vfs_file.c:407 new_sync_write fs/read_write.c:586 [inline] vfs_write+0x5ae/0x1150 fs/read_write.c:679 ksys_write+0x12b/0x250 fs/read_write.c:731 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f8e031d8829 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffc11f3a258 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007ffc11f3a270 RCX: 00007f8e031d8829 RDX: 000000000000000a RSI: 0000400000000080 RDI: 0000000000000004 RBP: 0000000000000001 R08: 00007ffc11f39ff7 R09: 00000000000000a0 R10: 0000000000000001 R11: 0000000000000246 R12: 00007ffc11f3a26c R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:folio_unlock mm/filemap.c:1499 [inline] RIP: 0010:folio_unlock+0xb3/0xd0 mm/filemap.c:1494 Code: f3 68 ca ff 48 89 ef 31 f6 e8 e9 ed ff ff 5b 5d e9 e2 68 ca ff e8 dd 68 ca ff 48 c7 c6 00 8a 78 8b 48 89 ef e8 de c9 11 00 90 <0f> 0b 48 89 df e8 d3 83 2d 00 e9 7b ff ff ff 66 66 2e 0f 1f 84 00 RSP: 0000:ffffc900016bf988 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc900016bf830 RDX: ffff888022f1a440 RSI: ffffffff81ef7612 RDI: ffff888022f1a884 RBP: ffffea0000cd1c40 R08: 0000000000000000 R09: fffffbfff20c49e2 R10: ffffffff90624f17 R11: 0000000000000003 R12: ffff888039c10890 R13: ffff888039c10bb0 R14: ffffea0000cd1c40 R15: ffffc900016bfde8 FS: 00005555874b3380(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f8e03250028 CR3: 00000000236ec000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 final repro crashed as (corrupted=false): handle_mm_fault+0x3fa/0xaa0 mm/memory.c:6201 do_user_addr_fault+0x7a3/0x13f0 arch/x86/mm/fault.c:1388 handle_page_fault arch/x86/mm/fault.c:1480 [inline] exc_page_fault+0x5c/0xc0 arch/x86/mm/fault.c:1538 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 ------------[ cut here ]------------ kernel BUG at mm/filemap.c:1499! Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI CPU: 2 UID: 0 PID: 5943 Comm: syz-executor175 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:folio_unlock mm/filemap.c:1499 [inline] RIP: 0010:folio_unlock+0xb3/0xd0 mm/filemap.c:1494 Code: f3 68 ca ff 48 89 ef 31 f6 e8 e9 ed ff ff 5b 5d e9 e2 68 ca ff e8 dd 68 ca ff 48 c7 c6 00 8a 78 8b 48 89 ef e8 de c9 11 00 90 <0f> 0b 48 89 df e8 d3 83 2d 00 e9 7b ff ff ff 66 66 2e 0f 1f 84 00 RSP: 0000:ffffc900016bf988 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc900016bf830 RDX: ffff888022f1a440 RSI: ffffffff81ef7612 RDI: ffff888022f1a884 RBP: ffffea0000cd1c40 R08: 0000000000000000 R09: fffffbfff20c49e2 R10: ffffffff90624f17 R11: 0000000000000003 R12: ffff888039c10890 R13: ffff888039c10bb0 R14: ffffea0000cd1c40 R15: ffffc900016bfde8 FS: 00005555874b3380(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f8e03250028 CR3: 00000000236ec000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: netfs_perform_write+0xc04/0x2140 fs/netfs/buffered_write.c:400 netfs_buffered_write_iter_locked fs/netfs/buffered_write.c:445 [inline] netfs_file_write_iter+0x494/0x550 fs/netfs/buffered_write.c:484 v9fs_file_write_iter+0x9b/0x100 fs/9p/vfs_file.c:407 new_sync_write fs/read_write.c:586 [inline] vfs_write+0x5ae/0x1150 fs/read_write.c:679 ksys_write+0x12b/0x250 fs/read_write.c:731 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f8e031d8829 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffc11f3a258 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007ffc11f3a270 RCX: 00007f8e031d8829 RDX: 000000000000000a RSI: 0000400000000080 RDI: 0000000000000004 RBP: 0000000000000001 R08: 00007ffc11f39ff7 R09: 00000000000000a0 R10: 0000000000000001 R11: 0000000000000246 R12: 00007ffc11f3a26c R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:folio_unlock mm/filemap.c:1499 [inline] RIP: 0010:folio_unlock+0xb3/0xd0 mm/filemap.c:1494 Code: f3 68 ca ff 48 89 ef 31 f6 e8 e9 ed ff ff 5b 5d e9 e2 68 ca ff e8 dd 68 ca ff 48 c7 c6 00 8a 78 8b 48 89 ef e8 de c9 11 00 90 <0f> 0b 48 89 df e8 d3 83 2d 00 e9 7b ff ff ff 66 66 2e 0f 1f 84 00 RSP: 0000:ffffc900016bf988 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc900016bf830 RDX: ffff888022f1a440 RSI: ffffffff81ef7612 RDI: ffff888022f1a884 RBP: ffffea0000cd1c40 R08: 0000000000000000 R09: fffffbfff20c49e2 R10: ffffffff90624f17 R11: 0000000000000003 R12: ffff888039c10890 R13: ffff888039c10bb0 R14: ffffea0000cd1c40 R15: ffffc900016bfde8 FS: 00005555874b3380(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f8e03250028 CR3: 00000000236ec000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400