Extracting prog: 5m27.731141908s
Minimizing prog: 39m26.457917748s
Simplifying prog options: 0s
Extracting C: 49.860161132s
Simplifying C: 10m3.774842375s


extracting reproducer from 37 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$inet6_icmp_raw-getpgid-syz_pidfd_open-mkdirat-mount-openat-write-openat-creat-write-setns-mount$9p_fd-syz_clone-sendmsg$nl_route
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = getpgid(0x0)
syz_pidfd_open(r1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='e:my_read_msr1 msr/read_msr', 0x1b)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0)
creat(&(0x7f0000000300)='./tracing/dynamic_events\x00', 0x21)
write(r3, &(0x7f0000000340)='1', 0x1)
setns(0xffffffffffffffff, 0x66020000)
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x104000, 0x0)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0xba01}, 0x30008804)

program did not crash
single: failed to extract reproducer
bisect: bisecting 37 programs with base timeout 30s
testing program (duration=39s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 10, 14, 3, 3, 27, 27, 4, 11, 14, 10, 22, 15, 5, 4, 1, 6, 12, 4, 13, 22, 12, 20, 15, 11, 3, 4, 6, 9, 5, 2, 5, 3, 24, 6, 15, 20]
detailed listing:
executing program 2:
socket$inet6(0xa, 0x2, 0x0)
socket$inet6(0xa, 0x3, 0x5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0})
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socket(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020782500000000f01f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
executing program 2:
r0 = open$dir(&(0x7f00000004c0)='./file0\x00', 0x7e, 0x0)
inotify_init()
vmsplice(r0, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x6}}, 0x20)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)
executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file7\x00', 0x0, &(0x7f0000000000)={[{@user_xattr}, {@nombcache}]}, 0x1, 0x507, &(0x7f0000000c00)="$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")
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x824)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.stat\x00', 0x275a, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./file0\x00', 0x200008, &(0x7f0000000400)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYRESOCT], 0x1, 0x3b7, &(0x7f0000000500)="$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")
capset(&(0x7f0000000900)={0x20071026}, &(0x7f0000000940)={0x6, 0x6, 0x2, 0x8008b, 0xffffffff, 0x2})
lchown(&(0x7f0000000a00)='./file1\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x5508, &(0x7f0000001500)="$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")
syz_mount_image$msdos(&(0x7f0000006a40), &(0x7f0000006a80)='.\x00', 0x8512c75d3d1fea97, &(0x7f0000006ac0)=ANY=[], 0x0, 0x0, &(0x7f0000006b00))
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000001c0)='./bus\x00', 0x32020, &(0x7f0000000440)=ANY=[@ANYBLOB="73686f72746e3d312c696575726f2c757466383d312c757466383d312c69b28e6861727365743d63833934392c6e66732c756e695f786c6174653d302c756e695f786c6174653d302c757466383d302c726f6469722c757466383d312c757466383d302c73686f72746e616d653d6d697865648c80f5ca731c7495262c696f636861727365743d6d6163677265656b2c00"/166], 0x0, 0x38b, &(0x7f0000001140)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000a40)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000000a80))
executing program 2:
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000340)={[{@umask={'umask', 0x3d, 0x81}}, {@utf8}, {@utf8}, {@namecase}, {@fmask={'fmask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@discard}, {@errors_continue}, {@namecase}]}, 0x1, 0x1555, &(0x7f0000000400)="$eJzs3QuYjtXaOPD7Xms9YxzS2ySHYa11P7zJYZEkOSTJIUmSJMkpISTZkpAYckoakpCck8MQksPEpHE+nw8JSbInSUJyStb/Gsxf7fb+dvvb7XzfN/fvut7Lumc993rWmvs9PM+awbddhlZvWKNKfSKCfwte/iMBAGIBYCAAXA8AAQCUiSsTl96fVWLCv3cS9sd6NOlaz4BdS1z/zI3rn7lx/TM3rn/mxvXP3Lj+mRvXP3Pj+jOWmW2Zke8GfmTex3+9//9g9t/9ROL9//+F+PP//5C0EmO/Wlfipq4AMb83hev/vx/+G7lc//+zgt9zENc/c+P6Z1ax13oC7H8Afv1nBln+YQ/XP3Pj+jOWmf1yLzgWrv1+9J/9gMh/8mcgvtfl7/K/kNP2XoA/c/2MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxtif4Ky/SgFARvtaz4sxxhhjjDHGGGN/HJ/lWs+AMcYYY4wxxhhj/3kIAiQoCCAGskAsZIVsIABiMvpvgDi4EXLBTZAb8kBeyAfxkB8KgAYDFghCKAiFIAo3Q2G4BYpAUSgGxcFBCSgJt0IpuA1Kw+1QBu6AsnAnlIPyUAEqwl1QCe6GynAPVIF7oSpUg+pQA+6DmnA/1IIHoDY8CHXgIagLD0M9eATqw6PQAB6DhvA4NIInoDE0gabQDJr/vvzZywqUurSay/kvQQ94GXpCL0iA3tAHXoG+0A/6wwAYCK/CIHgNBsPrkAhDYCi8AcPgTRgOb8EIGAmj4G0YDe/AGBgL42A8TICJMAnehcnwHkyBqTANpkMSzICZ8D7MgtkwBz6AufAhzIP5sAAWQjJ8BItgMaTAx7AEPoFUWArLYDmsgJWwClbDGlgL62A9bICNsAk2wxbYCttgO+yAnbALPoXd8Bnsgb2wDz6H/fDFv5h/5m/yuyIgoECBChXGYAzGYixmw2yYA3NgTsyJEYxgHMZhLsyFuTE35sW8GI/xWAALoEGDhIQFsSBGMYqFsTAWwSJYDIuhQ4clsSSWwtuwNJbGMlgGy2JZLIflsTxWxIpYCSthZayMVbAKVsWqWB2r4314H/bGWlgLa2NtrIN1MransD7WxwbYABtiQ2yEjbAxNsam2BSbY3NsgS2wJbbE1tga22AbbIftsD22xw7YATtiR+yEnbAzdsYu2AW7YjfslvZSFsCX8WXshVVFb+yDfbAvJmbpjwNwAL6Kg/A1fA1fx0QcgkPxDXwD38TheBpHXByJo3AUVhLv4BgciyTG4wScgJNwEk7GyTgFp+JUnI5JOANn4kychbNxNn6Ac/FD/BDn43xciMmYjItwMaZgCi7BM5iKS3EZLscVuBJX4Gpcg6txHa7HdbgRN+Jm3IxbcStux+24E3fip6gA8DPci3sxEffjfjyAB/AgHsRDeAjTMA0P42E8gkfwKB7FY3gMj+MJPIkn8BSewtN4Bs/iWTyP5/ECvhD/dYNPi65NBJFOCSViRIyIFbEim8gmcogcIqfIKSIiIuJEnMglconcIrfIK/KKeBEvCogCwggjSITp7xQiKqKisCgsiogiopgoJpxwoqQoKUqJUqK0KC3KiDtEWXGnKCfKi1auoqgoKonWrrK4R1QRVURVUU1UFzVEDVFT1BS1RC1RW9QWdUQdUVc8LOqJ3tgfHxXplWkohmAjMRQbiyZCXnmHaiGGY0vRSrQWT4uROALbiRauvXhWdBBjsKP4ixiLz4vOYjx2ES+KrqKb6C5eEj1ES9dT9BJTsLfoI6ZjX9FP9BcDxCysJj7AuVmri9dFohgihoo3xEJ8UwwX2cUIMVKMEm+L0eIdMUaMFePEeDFBTBSTxLtisnhPTBFTxTQxXSSJGWKmeF/MErPFHPGBmCs+FPPEfLFALBTJ4iOxSCwWKeJjsUR8IlLFUrFMLBcrxEqxSqwWa8RasU6sFxvERrFJbBZbxFaxTWwXO8ROsUt8KnaLz8QesVfsE5+L/eILcUB8KQ6Kr8Qh8VeRJr4Wh8U34oj4VhwV34lj4ntxXJwQJ8UP4pT4UZwWZ8RZcU6cFz+JC+JncVF4ARKlkFIqGcgYmUXGyqwym8wuc8gg4/1fxskbZS55k8wt88i8Mp+Ml/llAamlkVaSDGVBWUhG5c2ysLxFFpFFZTFZXDpZQpaUt8pS8jZZWt4uy8g7ZFl5pywny8sKsqK8S1aSd0uIXD5HVVlNVpc15H0yAe6XteQDsrZ8UNaRD8m68mFZTz4i68tHZQP5mGwoH5eN5BOysWwim8pmsrl8UraQT8mWspVsLZ+WbWRb2U4+I9vLZ2UH6a88RZ6XneULsot8UXaV3WR3+bO8KL3sKXtJ6A2yj3xF9pX9ZH85QA6Ur8pB8jU5WL4uE+UQOVS+IYfJN+Vw+ZYcIUfKUfJtOVq+I8fIsXKcHC8nyIlyknxXTpbvySlyqpwmp8skOUP2vzLSHCn/af67fyd/8KWzb5Zb5Fa5TW6XO+ROuUt+KnfL3XKP3CP3yX1yv9wvD8gD8qA8KA/JQzJNpsnD8rA8Io/Io/KoPCaPyePyhDwnf5CnApCn5Rl5Rp6T5+V5eeHK9wAUKqGkUipQMSqLilVZVTaVXeVQ16mc6noVUTeoOHWjyqVuUrlVHpVX5VPxKr8qoLQyyipSoSqoCqmouhmvPGFUMVVcOVVClVS3/iv5qrC6RRVRRX+VnzG/hH8wv+aquWqhWqiWqqVqrVqrNqqNaqfaqfaqveqgOqiOqqPqpDqpzqqz6qK6qK6qq+quuqseqofqqXqqBJWg+qhXVF/VT/VXA9RA9apIX8NgNVglqkQ1VA1Vw9QwNVwNVyPUCDVKjVKj1Wg1Ro1R49Q4NUFNUJPUJDVZTVZT1BQ1TU1TSSpJzVQz1Sw1S81Rc9RcNVfNU/PUArVAJatktUgtUikqRS1RS1SqWqqWquVquVqpVqrVarVaq9aq9Wq92qg2qlS1RW1R29Q2tUPtULvULrVb7VZ71B61T+1T+9V+dUAdUAfVQXVIHVJpKk0dVofVEXVEHVVH1TF1TB1Xx9VJdVKdUqfUaXVanVVn1Xl1Xl1QF9RFdTH9si8QgQhUoIKYICaIDWKDbEG2IEeQI8gZ5AwiQSSIC+KCXMFNP+UO8gR5g3xBfJA/KBDowAQ2EFeKHg1uDgoHtwRFgqJBsaB44IISQcng1qBUcFtQOrg9KBPcEZQN7gzKBeWDCkHF4K6gUnB3UDm4J6gS3BtUDaoF1YMawX1BzeD+oFbwQFA7eDCoEzwU1A0eDuoFjwT1g0eDBsFjQcPg8aBR8ETQOGgSNA2aBc3/0PG9P53nKddT99IJurfuo1/RfXU/3V8P0AP1q3qQfk0P1q/rRD1ED9Vv6GH6TT1cv6VH6JF6lH5bj9bv6DF6rB6nx+sJeqKepN/Vk/V7eoqeqqfp6TpJz9Az9ft6lp6t5+gP9Fz9oZ6n5+sFeqFO1h/pRXqxTtEf6yX6E52ql+plerleoVfqVXq1XqPX6nV6vd6gN+pNerPeorfqbXq73qF36l36U71bf6b36L16n/5c79df6AP6S31Qf6UP6Xt0mv5aH9bf6CP6W31Uf6eP6e/1cX1Cl9Y/6FP6R31an9Fn9Tl9Xv+kL+if9UXt0y/u0z/ejTLKxJgYE2tiTTaTzeQwOUxOk9NETMTEmTiTy+QyuU1uk9fkNfEm3hQwBUw6MmQKmoImaqKmsClsipgippgpZpxxpqQpaUqZUqa0KW3KmDKmrClryplypoKpYO4yd5m7zd3mHnOPudfca6qZaqaGqWFqmpqmlqllapvapo6pY+qauqaeqWfqm/qmgWlgGpqGppFpZBqbxqapaWqam+amhWlhWpqWprVpbdqYNqadaWfam/amg+lgOpqOppPpZDqbzqaL6WK6mq6mu+luepgepqfpaRJMgulj+pi+pq/pb/qbgWagGWQGmcFmsEk0iWaoGWqGmWFmuBluRpiRZlT6hap5x4wxY804M95MMBNM+ofPZDPZTDFTzDQzzSSZJDPTzDSzzCwzx8wxc81cM8/MMwvMApNsks0is8ikmBSzxCwxqSbVLDPLzAqzwqwyq8was8asM+vMBthgNplNZovZYraZbWaH2WF2mV1mt9lt9pg9Zp/ZZ/ab/eaAOWAOmoPmkDlk0kyaOWwOmyPmiDlqjppj5pg5bo6bk+akOWVOmdPmtDlrzprzJs+Vz0tvYm1Wm81mtznsdTanvd7+bZzX5rPxNr8tYLXNbfP8KjbW2iK2qC1mi1tnS9iS9tbfxOVseVvBVrR32Ur2blv5N3FNe7+tZR+wte2Dtoa971dxHfuQrWsft/UQAWwT28A2sw3t47aRfcI2tk1sU9vMtrFtbTv7jG1vn7Ud7HO/iRfZxXaNXWvX2fV2j91rz9pz9oj91p63P9metpcdaF+1g+xrdrB93SbaIb+JR9m37Wj7jh1jx9pxdvxv4ml2uk2yM+xM+76dZWf/Jk62H9m5NsXOs/PtArvwUpw+pxT7sV1iP7GpNoBldrldYVfaVXb1/5/rcrvRbrKb7W77md1mt9sddqfdlXEhbPfaffZzu99+YQ/bb+xB+5U9ZI/aNPv1pTh9fUftd/aY/d4etyfsSfuDPWV/VBnZ6Wv/wf5sL1pvgZCAJCkKKIayUCxlpWyUnXLQdZSTrqcI3UBxdCPlopsoN+WhvJSP4ik/FSBNhiwRhVSQClGUbqaM6RWj4uSoBJWkW6kU3Ual6XYqQ3dQWbqTylF5qkAV6S6qRHdTZbqHqtC9VJWqUXWqQfdRTbqfatEDVJsepDr0ENWlh6kePUL16VFqQI9RQ3qcGtET1JiaUFNqRs3pSWpBT1FLakWt6WlqQ22pHT1D7elZ6kDPUUf6C3Wi56kzvUBd6EXqSt2oO71EPehl6km9KIF6Ux96hfpSP+pPA2ggvUqD6DUaTK9TIg2hofQGDaM3aTi9RSNoJI2it2k0vUNjaCyNo/E0gSbSJHqXJtN7NIWm0jSaTkk0g2bS+zSLZtMc+oDm0oc0j+bTAlpIyfQRLaLFlEIf0xL6hFJpKS2j5bSCVtIqWk1raC2to/W0gTbSJtpMW2grbaPttIN20i76lHbTZ7SH9tI++pz20xd0gL6kg/QVHaK/Uhp9TYfpGzpC39JR+s73ou/pOJ2gk/QDnaIf6TSdobN0js7TT3SBfqaL5AlCDEUoQxUGYUyYJYwNs4bZwuxhjvC6MGd4fRgJbwjjwhvDXOFNYe4wT5g3zBfGh/nDAqEOTWhDCsOwYFgojIY3h4XDW8IiYdGwWFg8dGGJsGR4a1gqvC0sHd4elgnvCMuGd4blwvLh4w9WDO8KK4V3h5XDe8Iq4b1h1bBaWD2sEd4X1gzvD2uFD4S1wwfD0uFDYd3w4bBe+EhYP3w0bBA+FjYMHw8bhU+EjcMmYdOwWdg8fDJsET4Vtgxbha3D7GGbsG3YLnwmbB8+G3YIn7vU/9DijP6nf9OfEPYO+4SvhK+E3j8gF0QXRpOjH0UXRRdHU6IfR5dEP4mmRpdGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGN0U3R72vkQUcOuGkUy5wMS6Li3VZXTaX3eVw17mc7noXcTe4OHejy+VucrldHpfX5XPxLr8r4LQzzjpyoSvoCrmou9kVdre4Iq6oK+aKO+dKuJKumWvumrsW7inX0rVyrd3T7mnX1rV1z7hn3LOug3vOdXR/cZ3c866ze8G94F50XV0319295Hq4iTkvvyYTXB/Xx/V1fV1/198NdAPdIDfIDXaDXaJLdEPdUDfMDXPD3XA3wo1wo9woN9qNdmPcGDfOjXMT3AQ3yU1yk91kN8VNcdPcNJfkktxMN9PNcrNcpdmXzzLPzXML3AKX7JLdIpd+zZjilrglLtWlumVumVvhVrhVbpVb49a4dW6d2+A2uE1uk9vitrhtbpvb4Xa4XW6X2+12uz3++suDuv3ugDvgDrqD7pD7q0tzX7vD7ht3xH3rjrrv3DH3vTvuTriT7gd3yv3oTrsz7qw75867n9wF97O76LybEJkYmRR5NzI58l5kSmRqZFpkeiQpMiMyM/J+ZFZkdmRO5IPI3MiHkXmR+ZEFkYWR5MhHkUWRxZGUyMeRJZFPIqmRpZFlkeWRFZGVEe/zbwt9QV/IR/3NvrC/xRfxRX0xX9w7X8KX9Lf6yzuQkOr9Hb6sv9OX8+V9Bf+Eb+yb+Ka+mW/un/Qt/FO+pW/lW/unfRvf1rfzz/j2/lnfwT/nO/q/+E7+ed/Zv+C7+Bd9V9/Nd/cv+R7+Zd/T9/IJvrfv41/xfX0/398P8AP9q36Qf80P9q/7RD/ED/Vv+GH+TT/cv+VH+JF+VMzbfnTGLTKM9xP8RD/Jv+sn+/f8FD/VT/PTfZKf4Wf69/0sP9vP8R/4uf5DP8/P9wv8Qp/sP/KL/GKf4j/2S/wnPtUvzdg09qv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8dr/D7/S7/Kd+t//M7/F7/T7/ud/vv/AH/Jf+oP/KH/J/9Wn+a3/Yf+OP+G/9Uf+dP+a/98f9CX/S/+BP+R/9aX/Gn/Xn/Hn/k7/gf/YX+e+sMcYYY4z9LhOvNsWvey5v5/cGgNi/yRG/OLgPAFy3PV/aL/vTryg35L7c7ifiL6U/26vLoxmPqlUTEhKuHJsqISg0HyDjJ0HpLv3qwZV4KbSGttAeWkGpvzv/fqLbefon40fvAMj2i5z0CWXEV8f/EgATLq331+M/+fSoRWXDs3H/xfjzAYoUupqTFa7GS6H1pf2VVlD6H8w/T4t/Mv+sX00AaPmLnBxwNb46/5LwFDwH7X91JGOMMcYYY4wxdlk/UaFTxv1nxm98/r3783h1NScLXI3/2f05Y4wxxhhjjDHGrr3nu3V/5sn27Vt1+tcblf9bWb+70Qj+UyNnnsbFK/+bw+862HuAjK8oAPg3zw6Q3pB/5pK3/uEj49/pSrzy0vnbrhXnfAD/M+r+RzSu8RsTY4wxxhhj7A939aL/119X12pCjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZYJvRn/HNi13qNjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG2LX2/wIAAP//4KP80g==")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
executing program 2:
r0 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)=@newtfilter={0x10b0, 0x2c, 0xf2f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r1, {0xc, 0xa}, {}, {0xfff3, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x1080, 0x2, [@TCA_BASIC_EMATCHES={0x107c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffe}}, @TCA_EMATCH_TREE_LIST={0x1070, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x100c, 0x1, 0x0, 0x0, {{0x9, 0x0, 0xd}, "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"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xc943, 0x1, 0x990}, {0x5, 0x800, 0xffff, 0x1, 0x4, 0xa5a1f9ed655838d0, 0x2}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0xe657, 0x2, 0x400}, {0x4, 0x2, 0x0, "48c0"}}}, @TCF_EM_IPT={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x9, 0xffff}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}]}}, @TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x100, 0x9, 0x5}}}, @TCF_EM_META={0xc, 0x3, 0x0, 0x0, {{0x5, 0x4, 0xde}}}]}]}]}}]}, 0x10b0}, 0x1, 0x0, 0x0, 0x20045085}, 0x4880)
executing program 2:
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0xc00000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x8)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00')
mknodat(r0, &(0x7f00000023c0)='./file0\x00', 0x8000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0)
process_mrelease(r0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000540)='./bus\x00', 0x38880, &(0x7f0000000280), 0x1, 0x51a, &(0x7f0000000f00)="$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")
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x8010, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/17], 0x1, 0x14e0, &(0x7f0000002a80)="$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")
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='mode\x00', &(0x7f00000002c0)='\b\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
truncate(&(0x7f0000000100)='./file1\x00', 0x20fdfffffe)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20100, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x6)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000480)="0f011a66b83c2900000f23c80f21f866350c00d0000f23f866b9800000c00f326635000100000f30ba2100ed3e6664660f54e866660f3881b8cfa8baf80c66b8345dc08966efbafc0c66ed66b9ee0900000f320fb4020f01c4", 0x7e}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000300)={0x66666666666682e})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = socket(0x1e, 0x2, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000480), 0x4)
executing program 32:
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0xc00000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x8)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00')
mknodat(r0, &(0x7f00000023c0)='./file0\x00', 0x8000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0)
process_mrelease(r0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000540)='./bus\x00', 0x38880, &(0x7f0000000280), 0x1, 0x51a, &(0x7f0000000f00)="$eJzs3c9vI1cdAPCvnThxfnSTlh4AQbu0hQWt1km8bVT1AOWIUCVEjyBtQ+KNothxFDulCXtIz1yRqMSJHvkDOPfEgRsXBDcuywGJHxFog8TBaMaTrDdrb6xNYqfx5yON5r2ZWX+/L868t36O/QIYWTcj4iAiJiLig4iYy47nsi3ebW/JdY8OH6weHT5YzUWr9f4/c+n55Fh0/JvETPaYxYj44acRP8k9Hbext7+5Uq1WdrL6QrO2vdDY27+zUVtZr6xXtsrl5aXlxbfvvlW+sLa+WpvISl99+IeDb/0sSWs2O9LZjovUbnrhJE5iPCK+fxnBhmAsa8/EsBPhueQj4qWIeC29/+diLH02AYDrrNWai9ZcZx0AuO7y6RxYLl/K5gJmI58vldpzeC/HdL5abzRv36/vbq2158rmo5C/v1GtLGZzhfNRyCX1pbT8uF4+Vb8bES9GxC8mp9J6abVeXRvmf3wAYITNnBr//zPZHv8BgGuuOOwEAICB6zH+Hww6DwBgcLz+B4DRY/wHgNFTTL/DYWrYaQAAA+T1PwCMHuM/AIyUH7z3XrK1jrLvv177cG93s/7hnbVKY7NU210trdZ3tkvr9fp6+p09tbMer1qvby+9GbsfzX97u9FcaOzt36vVd7ea99Lv9b5XKaRX+WQBAAzTi69+9udcMiK/M5Vu0bGWQ2GomQGXLT/sBIChGetRBq4/q33B6DrHa3zTA3BNdFmi9wnF6PIBoVar1bq8lIBLdutL5v9hVHXM//srYBgx5vxhdJn/h9HVauX6XfM/+r0QALjazPEDPd7/fynb/yZ7c+DHa6ev+OQyswIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICr7Xj931K2Fvhs5POlUsQLETEfhdz9jWplMSJuRMSfJguTSX1pyDkDAOeV/1suW//r1twbs0+cemXmpDgRET/91fu//Gil2dz5Y8RE7l+Tx8ebn2THy4PPHgA42/E4ne47Xsg/OnywerwNMp+/fzciiu34R4cTcXQSfzzG030xChEx/e9cVm/LdcxdnMfBxxHxxW7tz8VsOgfSXvn0dPwk9gsDjZ9/In4+PdfeJz+LL1xALjBqPkv6n3e73X/5uJnuu9//xbSHOr+s/0seavUo7QMfxz/u/8Z69H83+43x5u++1y5NPX3u44gvj0ccxz7q6H+O4+d6xH+jz/h/+corr/U61/p1xK3oHr8z1kKztr3Q2Nu/s1FbWa+sV7bK5eWl5cW3775VXkjnqBd6jwb/eOf2jV7nkvZP94hfPKP9X++z/Z/+74Mffe0Z8b/5erf4+Xj5GfGTMfEbfcZfmf5tsde5JP5aj/af9fzf7jP+w7/uP7VsOAAwPI29/c2VarWy86zCjaOIs675XBaiv4t/n/2wrkTOI11InoUrkEbXwnc6jszEJcaa6HEz/vz19q/pZETnL3ar9VyxevUYFzHrBlwFJzd9RPx32MkAAAAAAAAAAAAAAABdDeLTUcNuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANfX/wMAAP//jMfJaQ==")
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x8010, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/17], 0x1, 0x14e0, &(0x7f0000002a80)="$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")
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='mode\x00', &(0x7f00000002c0)='\b\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
truncate(&(0x7f0000000100)='./file1\x00', 0x20fdfffffe)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20100, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x6)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000480)="0f011a66b83c2900000f23c80f21f866350c00d0000f23f866b9800000c00f326635000100000f30ba2100ed3e6664660f54e866660f3881b8cfa8baf80c66b8345dc08966efbafc0c66ed66b9ee0900000f320fb4020f01c4", 0x7e}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000300)={0x66666666666682e})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = socket(0x1e, 0x2, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000480), 0x4)
executing program 1:
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x80401c, &(0x7f0000000240)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5532, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000007040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000007080)='2', 0x1, 0x8000c61)
lseek(r0, 0x595e, 0x3)
executing program 1:
r0 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000540), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000a80), 0x10106, 0x2, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000ac0)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000080)={0xa0002011})
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)={0xe})
poll(&(0x7f0000000b40)=[{r3, 0x8}, {r2, 0x2cfc08c20dafc34e}], 0x2, 0x8000007)
executing program 0:
pipe2$watch_queue(0x0, 0x80)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000002480)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000024c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000002500)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000002540)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002580)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000025c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000002640), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000002680), 0x4000087, 0x2, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4)
executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
listen(0xffffffffffffffff, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = gettid()
ioprio_get$pid(0x2, r1)
executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000300)="6665f30f093666660f695f00670f01d166baf80cb87425d383ef66bafc0cb8fbf31bbbef0f0065ac0f22c70f01c2d9dcf2a666baf80cb884954d85ef66bafc0ced", 0x41}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x3, 0x6, @random="7c6a97bead69"}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x801, &(0x7f00000000c0)=ANY=[], 0x2, 0x252, &(0x7f0000000440)="$eJzsmb9rFEEUx7+zu7d3hAS0sLE5i4ARkr3dPZU0gloqgpCIWh5mDTGTnNxdkTvwR7Cx8Q/wb7DWIoVY2NmIhZVFDAQstLRRcGR+Zed+rTm4zvcp5t68eTPvvZndN3ALgiD+Ww6+/tx/cXV5dRHALOZRNvpvfm7jOfZfXvolI77f9rA3uB4DIETeD/7hPwTw7ooPPNXLCvFLuOPzZs1V4QMVrbsFD+fM+G0wRDZWIdFiBoa7Rv3AkW3w4Bm71+Rr9zd4FssmkU0qmzog+uL/scuwBu1eemBOfO1ub7PBgWtMCTxraQ0vCevHasYKwdE6PAtG2BTtX4CDfXlCl5wtkOd15/mzXdmPjD6Gp/ZSksBDYg6mDoYVo19GGVEUVU03S5z8Twf5+r4+Nid/J9xKUbaV4o2YtnByqdDGJjHGxj74ztBbIzw+hDPEUBzGH3GsmIUQTyZJMBx3BNMQ7Dt/zFnSdHIXXnV4Vphr5ga9N0dsQm9z8RUwUYKs3cUJnZ7WMHOUl03SH4ZnHU77Ed1zNY8GbUJM0Zetm0NDn2Y4v2E1qLS7H6+boVN965zpfwuOhLDoIcnrJwuAs8aUQYjAuRVqna2HtXa3t7Sx1VjP1rPtNK1fjM/H8YW0pmqzbgvqX0XVpxmn/pX0lTFgJ52H2Gl0Oq1kB+i0ktD209eqdSruypvmdzXPU/XPw8JvIcz1UlJpl0fHo+6/sp7HVG/BHxs8QRAEQRAEQRAEQRAEQRBEAdXP+tf8dT03i6pnPoTpD1ViNEF6U034GwAA//89J0vl")
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000700)={0x1, &(0x7f0000000740)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r5 = getpid()
syz_pidfd_open(r5, 0x0)
umount2(&(0x7f0000000780)='.\x00', 0x2)
close_range(r4, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
lseek(0xffffffffffffffff, 0x10001, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000240)={0x0, 0x7, 0x200000, 0x2000, &(0x7f00002a8000/0x2000)=nil, 0x100000})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0x58, &(0x7f0000000a00)={0x0, <r6=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r6, 0xffff}, 0xc)
executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = getpgid(0x0)
syz_pidfd_open(r1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='e:my_read_msr1 msr/read_msr', 0x1b)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0)
creat(&(0x7f0000000300)='./tracing/dynamic_events\x00', 0x21)
write(r3, &(0x7f0000000340)='1', 0x1)
setns(0xffffffffffffffff, 0x66020000)
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x104000, 0x0)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0xba01}, 0x30008804)
executing program 0:
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
unshare(0x62020600)
r1 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0], 0x1, 0x3a9, &(0x7f0000000200)="$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")
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000980))
executing program 4:
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'team_slave_1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newtfilter={0xac, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x5}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_POLICE={0x50, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x5, 0x6ed, 0xfffffff8, 0x1000, {0x4, 0x2, 0x1, 0x6ca, 0x8}, {0xc, 0x2, 0x5, 0xfffc, 0x0, 0x8}, 0x78, 0xfffffffe, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x5, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x1a}}]}, 0xac}}, 0x24040084)
executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0xe, &(0x7f00000028c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000003340), 0x8, 0x10, &(0x7f0000003380), 0x10}, 0x94)
executing program 4:
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x400, &(0x7f00000002c0)={[{@noinit_itable}, {@user_xattr}, {@bh}, {@delalloc}, {@dioread_nolock}, {@noquota}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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")
unshare(0x60000600)
socket$nl_netfilter(0x10, 0x3, 0xc)
setxattr$system_posix_acl(&(0x7f0000000580)='.\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x4}, [], {0x10, 0x7}}, 0x24, 0x0)
syz_mount_image$vfat(&(0x7f0000000640), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1195412, 0x0, 0x40, 0x0, &(0x7f0000000780))
unlinkat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200)
executing program 3:
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x400c000)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000540)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000005c0), 0x2d, 0x20040040)
connect$unix(r1, &(0x7f0000000600)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r0, &(0x7f0000000680)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x37)
r3 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000700)={0x40000006})
connect$unix(r0, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
executing program 1:
syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x804, &(0x7f0000000540)={[{@uni_xlateno}, {@shortname_lower}, {@shortname_win95}, {@fat=@nocase}, {@shortname_mixed}, {@shortname_lower}, {@uni_xlateno}, {@shortname_lower}, {@utf8}, {@rodir}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@uni_xlateno}]}, 0x1, 0x298, &(0x7f0000000880)="$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")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f00000000c0)={[{@rodir}, {@numtail}, {@shortname_lower}, {@utf8no}, {@shortname_lower}, {@utf8}, {@numtail}, {@shortname_winnt}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@utf8}, {@fat=@quiet}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp860'}}]}, 0x3, 0x281, &(0x7f0000000180)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='.\x00', 0x101000, 0x108)
getdents64(r0, &(0x7f0000001ac0)=""/4096, 0x1000)
executing program 3:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000480)='syz0\x00', 0x1ff)
r1 = openat$cgroup_type(r0, &(0x7f00000003c0), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000540), 0x9)
r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_misc(r2, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
bind$packet(r3, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000300)="6665f30f093666660f695f00670f01d166baf80cb87425d383ef66bafc0cb8fbf31bbbef0f0065ac0f22c70f01c2d9dcf2a666baf80cb884954d85ef66bafc0ced", 0x41}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x3, 0x6, @random="7c6a97bead69"}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x801, &(0x7f00000000c0)=ANY=[], 0x2, 0x252, &(0x7f0000000440)="$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")
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000700)={0x1, &(0x7f0000000740)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r5 = getpid()
syz_pidfd_open(r5, 0x0)
umount2(&(0x7f0000000780)='.\x00', 0x2)
close_range(r4, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
lseek(0xffffffffffffffff, 0x10001, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000240)={0x0, 0x7, 0x200000, 0x2000, &(0x7f00002a8000/0x2000)=nil, 0x100000})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0x58, &(0x7f0000000a00)={0x0, <r6=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={r6, 0xffff}, 0xc)
executing program 5:
rt_tgsigqueueinfo(0x0, 0x0, 0x21, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x4000087, 0x2, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x50008000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
executing program 3:
socket$inet6(0xa, 0x2, 0x0)
socket$inet6(0xa, 0x3, 0x5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x83, 0x7fff0000}]})
recvmsg$unix(r0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020782500000000f01f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = getpgid(0x0)
syz_pidfd_open(r1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='e:my_read_msr1 msr/read_msr', 0x1b)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0)
creat(&(0x7f0000000300)='./tracing/dynamic_events\x00', 0x21)
write(r3, &(0x7f0000000340)='1', 0x1)
setns(0xffffffffffffffff, 0x66020000)
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x104000, 0x0)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0xba01}, 0x30008804)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x4000, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', 0x802, 0x165)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000000800), &(0x7f0000000840)='./file2\x00', 0x2000000, &(0x7f0000000880)=ANY=[], 0xfb, 0x1501, &(0x7f0000000e80)="$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")
write(r2, &(0x7f0000000400)='10', 0x2)
sendmsg$nl_route_sched(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@newtfilter={0x24, 0x2c, 0x200, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x10}, {0xfff2, 0x2}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20048010}, 0x0)
setresuid(0xee00, 0xee01, 0xee01)
executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000003c0)={0x3, 0x1}, 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x4, 0x1c, 0x66, 0xe0, 0x4, 0x2, 0x0, @private=0xa010101, @empty}, {0x11, 0x5, 0x0, @broadcast}}}}}, 0x0)
executing program 3:
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'team_slave_1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newtfilter={0xac, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x5}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_POLICE={0x50, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x5, 0x6ed, 0xfffffff8, 0x1000, {0x4, 0x2, 0x1, 0x6ca, 0x8}, {0xc, 0x2, 0x5, 0xfffc, 0x0, 0x8}, 0x78, 0xfffffffe, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x5, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x1a}}]}, 0xac}}, 0x24040084)
executing program 4:
timer_settime(0x0, 0x1, 0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
unshare(0x64000600)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000)
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000d40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
lseek(r0, 0xffffffffffff2a09, 0x4)
executing program 3:
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x880, &(0x7f0000000400)=ANY=[@ANYBLOB='time_offset=0x0000000000000006,iocharset=iso8859-13,utf8,allow_utime=00000000000000000000003,discard,uid=', @ANYRESHEX=0x0, @ANYRES8=0x0], 0x1, 0x1548, &(0x7f0000001140)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1, 0x3, &(0x7f0000000c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5ae5, 0x0, 0x0, 0x0, 0x8000000b}}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat(0xffffffffffffff9c, &(0x7f0000002740)='./file1\x00', 0x28242, 0x81)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x10005, 0x0)
add_key(&(0x7f00000001c0)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd)
stat(0x0, 0x0)
lchown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
executing program 5:
syz_clone3(0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0x2f, 0x0, @val=@tcx}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x31ad407, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x10008, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="611829c670ad8a2b2400128009000100697069700000000014000280050009000400000005000a0001"], 0x58}, 0x1, 0x0, 0x0, 0x4008000}, 0x40020)
executing program 0:
r0 = userfaultfd(0x80001)
syz_mount_image$ext4(&(0x7f0000000480)='ext3\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1018e58, &(0x7f00000003c0)={[{@journal_dev={'journal_dev', 0x3d, 0x8}}, {@oldalloc}, {@data_writeback}]}, 0x4, 0x653, &(0x7f0000001cc0)="$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")
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000008c0)={0xaa, 0x310})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000900)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000940)={{&(0x7f0000001000/0x1000)=nil, 0x1000}})
executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xa, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x7, 0x2, 0xdbe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4020}, 0x8094)
executing program 3:
socket$inet(0x2, 0x2, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000001c0), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x100000000e2)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x30, r4, 0x1, 0x70bd28, 0x0, {{}, {}, {0x14, 0x19, {0xfffffff7, 0xff, 0x1, 0xfffffffc}}}}, 0x30}, 0x1, 0x0, 0x0, 0x2000c8d3}, 0x8)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199)
keyctl$clear(0x3, 0xfffffffffffffffd)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newlink={0x50, 0x10, 0x401, 0xffffffff, 0x25dfdbfc, {0x0, 0x0, 0xffff, 0x0, 0x589c1, 0x28829}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x4008894)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f00000002c0)={0xaf76, 0x3, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5455a3247e500f61669905db88235f8a5447dd2a2ed6e91626f158881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb7bc33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a825782f14eee686be0e358e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39e1aefe363590d1f600"})
mkdirat(0xffffffffffffffff, 0x0, 0xff)
capset(&(0x7f00000005c0)={0x20080522}, &(0x7f0000000600)={0x9, 0x200003, 0x800801, 0x4, 0x7, 0x8})
recvmsg(0xffffffffffffffff, 0x0, 0x10002)
clock_getres(0x2, &(0x7f0000000700))
socket(0x10, 0x3, 0x0)
executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x81, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000000)={0x9f63422128820807, 0x0, {[0xb, 0xffffffff, 0x4000000000010019, 0xfffffffffffffff6, 0x5, 0xa8, 0x2, 0xc00]}})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, 0x0}], 0x1, 0x58, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = getpgid(0x0)
syz_pidfd_open(r1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='e:my_read_msr1 msr/read_msr', 0x1b)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0)
creat(&(0x7f0000000300)='./tracing/dynamic_events\x00', 0x21)
write(r3, &(0x7f0000000340)='1', 0x1)
setns(0xffffffffffffffff, 0x66020000)
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x104000, 0x0)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0xba01}, 0x30008804)
executing program 1:
socket$inet6(0xa, 0x2, 0x0)
socket$inet6(0xa, 0x3, 0x5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x83, 0x7fff0000}]})
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
socket(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020782500000000f01f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$inet6_icmp_raw-getpgid-syz_pidfd_open-mkdirat-mount-openat-write-openat-creat-write-setns-mount$9p_fd-syz_clone-sendmsg$nl_route
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = getpgid(0x0)
syz_pidfd_open(r1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='e:my_read_msr1 msr/read_msr', 0x1b)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0)
creat(&(0x7f0000000300)='./tracing/dynamic_events\x00', 0x21)
write(r3, &(0x7f0000000340)='1', 0x1)
setns(0xffffffffffffffff, 0x66020000)
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x104000, 0x0)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0xba01}, 0x30008804)

program crashed: KASAN: use-after-free Read in tracing_open_file_tr
single: successfully extracted reproducer
found reproducer with 15 syscalls
minimizing guilty program
testing program (duration=1m34.252834984s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$inet6_icmp_raw-getpgid-syz_pidfd_open-mkdirat-mount-openat-write-openat-creat-write-setns-mount$9p_fd-syz_clone
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = getpgid(0x0)
syz_pidfd_open(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='e:my_read_msr1 msr/read_msr', 0x1b)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0)
creat(&(0x7f0000000300)='./tracing/dynamic_events\x00', 0x21)
write(r2, &(0x7f0000000340)='1', 0x1)
setns(0xffffffffffffffff, 0x66020000)
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x104000, 0x0)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)

program crashed: KASAN: use-after-free Read in tracing_open_file_tr
testing program (duration=1m34.252834984s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$inet6_icmp_raw-getpgid-syz_pidfd_open-mkdirat-mount-openat-write-openat-creat-write-setns-mount$9p_fd
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = getpgid(0x0)
syz_pidfd_open(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='e:my_read_msr1 msr/read_msr', 0x1b)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0)
creat(&(0x7f0000000300)='./tracing/dynamic_events\x00', 0x21)
write(r2, &(0x7f0000000340)='1', 0x1)
setns(0xffffffffffffffff, 0x66020000)
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x104000, 0x0)

program crashed: KASAN: use-after-free Read in tracing_open_file_tr
testing program (duration=1m34.252834984s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$inet6_icmp_raw-getpgid-syz_pidfd_open-mkdirat-mount-openat-write-openat-creat-write-setns
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = getpgid(0x0)
syz_pidfd_open(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='e:my_read_msr1 msr/read_msr', 0x1b)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0)
creat(&(0x7f0000000300)='./tracing/dynamic_events\x00', 0x21)
write(r2, &(0x7f0000000340)='1', 0x1)
setns(0xffffffffffffffff, 0x66020000)

program crashed: KASAN: use-after-free Read in tracing_open_file_tr
testing program (duration=1m34.252834984s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$inet6_icmp_raw-getpgid-syz_pidfd_open-mkdirat-mount-openat-write-openat-creat-write
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = getpgid(0x0)
syz_pidfd_open(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='e:my_read_msr1 msr/read_msr', 0x1b)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0)
creat(&(0x7f0000000300)='./tracing/dynamic_events\x00', 0x21)
write(r2, &(0x7f0000000340)='1', 0x1)

program crashed: KASAN: use-after-free Read in tracing_open_file_tr
testing program (duration=1m34.252834984s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$inet6_icmp_raw-getpgid-syz_pidfd_open-mkdirat-mount-openat-write-openat-creat
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = getpgid(0x0)
syz_pidfd_open(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='e:my_read_msr1 msr/read_msr', 0x1b)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0)
creat(&(0x7f0000000300)='./tracing/dynamic_events\x00', 0x21)

program crashed: KASAN: use-after-free Read in tracing_open_file_tr
testing program (duration=1m34.252834984s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$inet6_icmp_raw-getpgid-syz_pidfd_open-mkdirat-mount-openat-write-openat
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = getpgid(0x0)
syz_pidfd_open(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='e:my_read_msr1 msr/read_msr', 0x1b)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0)

program did not crash
testing program (duration=1m34.252834984s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$inet6_icmp_raw-getpgid-syz_pidfd_open-mkdirat-mount-openat-write-creat
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = getpgid(0x0)
syz_pidfd_open(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='e:my_read_msr1 msr/read_msr', 0x1b)
creat(&(0x7f0000000300)='./tracing/dynamic_events\x00', 0x21)

program did not crash
testing program (duration=1m34.252834984s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$inet6_icmp_raw-getpgid-syz_pidfd_open-mkdirat-mount-openat-openat-creat
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = getpgid(0x0)
syz_pidfd_open(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/dynamic_events\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0)
creat(&(0x7f0000000300)='./tracing/dynamic_events\x00', 0x21)

program did not crash
testing program (duration=1m34.252834984s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$inet6_icmp_raw-getpgid-syz_pidfd_open-mkdirat-mount-write-openat-creat
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = getpgid(0x0)
syz_pidfd_open(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000280)='e:my_read_msr1 msr/read_msr', 0x1b)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0)
creat(&(0x7f0000000300)='./tracing/dynamic_events\x00', 0x21)

program did not crash
testing program (duration=1m34.252834984s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$inet6_icmp_raw-getpgid-syz_pidfd_open-mkdirat-openat-write-openat-creat
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = getpgid(0x0)
syz_pidfd_open(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='e:my_read_msr1 msr/read_msr', 0x1b)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0)
creat(&(0x7f0000000300)='./tracing/dynamic_events\x00', 0x21)

program did not crash
testing program (duration=1m34.252834984s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$inet6_icmp_raw-getpgid-syz_pidfd_open-mount-openat-write-openat-creat
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = getpgid(0x0)
syz_pidfd_open(r0, 0x0)
mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='e:my_read_msr1 msr/read_msr', 0x1b)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0)
creat(&(0x7f0000000300)='./tracing/dynamic_events\x00', 0x21)

program did not crash
testing program (duration=1m34.252834984s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$inet6_icmp_raw-getpgid-mkdirat-mount-openat-write-openat-creat
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getpgid(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)='e:my_read_msr1 msr/read_msr', 0x1b)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0)
creat(&(0x7f0000000300)='./tracing/dynamic_events\x00', 0x21)

program crashed: KASAN: use-after-free Read in tracing_open_file_tr
testing program (duration=1m34.252834984s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$inet6_icmp_raw-mkdirat-mount-openat-write-openat-creat
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)='e:my_read_msr1 msr/read_msr', 0x1b)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0)
creat(&(0x7f0000000300)='./tracing/dynamic_events\x00', 0x21)

program crashed: KASAN: use-after-free Read in tracing_open_file_tr
testing program (duration=1m34.252834984s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-mkdirat-mount-openat-write-openat-creat
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)='e:my_read_msr1 msr/read_msr', 0x1b)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0)
creat(&(0x7f0000000300)='./tracing/dynamic_events\x00', 0x21)

program crashed: KASAN: use-after-free Read in tracing_open_file_tr
testing program (duration=1m34.252834984s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-creat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)='e:my_read_msr1 msr/read_msr', 0x1b)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0)
creat(&(0x7f0000000300)='./tracing/dynamic_events\x00', 0x21)

program crashed: KASAN: use-after-free Read in tracing_open_file_tr
testing program (duration=1m34.252834984s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-creat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)='e:my_read_msr1 msr/read_msr', 0x1b)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0)
creat(&(0x7f0000000300)='./tracing/dynamic_events\x00', 0x21)

program did not crash
testing program (duration=1m34.252834984s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-creat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)='e:my_read_msr1 msr/read_msr', 0x1b)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0)
creat(&(0x7f0000000300)='./tracing/dynamic_events\x00', 0x21)

program did not crash
testing program (duration=1m34.252834984s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-creat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./tracing\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)='e:my_read_msr1 msr/read_msr', 0x1b)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0)
creat(&(0x7f0000000300)='./tracing/dynamic_events\x00', 0x21)

program did not crash
testing program (duration=1m34.252834984s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-creat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, &(0x7f0000000280)='e:my_read_msr1 msr/read_msr', 0x1b)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0)
creat(&(0x7f0000000300)='./tracing/dynamic_events\x00', 0x21)

program did not crash
testing program (duration=1m34.252834984s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-creat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0)
creat(&(0x7f0000000300)='./tracing/dynamic_events\x00', 0x21)

program did not crash
testing program (duration=1m34.252834984s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-creat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280), 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0)
creat(&(0x7f0000000300)='./tracing/dynamic_events\x00', 0x21)

program did not crash
testing program (duration=1m34.252834984s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-creat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)='e:my_read_msr1 msr/read_msr', 0x1b)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
creat(&(0x7f0000000300)='./tracing/dynamic_events\x00', 0x21)

program did not crash
testing program (duration=1m34.252834984s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-creat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)='e:my_read_msr1 msr/read_msr', 0x1b)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0)
creat(0x0, 0x21)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m34.252834984s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-creat
program crashed: KASAN: use-after-free Read in tracing_open_file_tr
simplifying C reproducer
testing compiled C program (duration=1m34.252834984s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-creat
program crashed: KASAN: use-after-free Read in tracing_open_file_tr
testing compiled C program (duration=1m34.252834984s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-creat
program did not crash
testing compiled C program (duration=1m34.252834984s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-creat
program crashed: KASAN: use-after-free Read in tracing_open_file_tr
testing compiled C program (duration=1m34.252834984s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-creat
program crashed: KASAN: use-after-free Read in tracing_open_file_tr
testing compiled C program (duration=1m34.252834984s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-creat
program crashed: KASAN: use-after-free Read in tracing_open_file_tr
testing compiled C program (duration=1m34.252834984s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-creat
program crashed: KASAN: use-after-free Read in tracing_open_file_tr
testing compiled C program (duration=1m34.252834984s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-creat
program crashed: KASAN: use-after-free Read in tracing_open_file_tr
testing program (duration=1m34.252834984s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-creat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)='e:my_read_msr1 msr/read_msr', 0x1b)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0)
creat(&(0x7f0000000300)='./tracing/dynamic_events\x00', 0x21)

program crashed: KASAN: use-after-free Read in tracing_open_file_tr
validation run: crashed=true
testing program (duration=1m34.252834984s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-creat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)='e:my_read_msr1 msr/read_msr', 0x1b)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0)
creat(&(0x7f0000000300)='./tracing/dynamic_events\x00', 0x21)

program crashed: KASAN: use-after-free Read in tracing_open_file_tr
validation run: crashed=true
testing program (duration=1m34.252834984s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-creat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)='e:my_read_msr1 msr/read_msr', 0x1b)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0)
creat(&(0x7f0000000300)='./tracing/dynamic_events\x00', 0x21)

program crashed: KASAN: use-after-free Read in tracing_open_file_tr
validation run: crashed=true
reproducing took 1h0m57.366119031s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: use-after-free in tracing_open_file_tr+0x63/0x2f0 kernel/trace/trace.c:4892
Read of size 8 at addr ffff88805ef1bfa8 by task syz.1.151/4686

CPU: 1 PID: 4686 Comm: syz.1.151 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0x188/0x24e lib/dump_stack.c:106
 print_address_description mm/kasan/report.c:316 [inline]
 print_report+0xa8/0x210 mm/kasan/report.c:420
 kasan_report+0x10b/0x140 mm/kasan/report.c:524
 tracing_open_file_tr+0x63/0x2f0 kernel/trace/trace.c:4892
 do_dentry_open+0x7dd/0x10b0 fs/open.c:882
 do_open fs/namei.c:3677 [inline]
 path_openat+0x2674/0x2f10 fs/namei.c:3834
 do_filp_open+0x1ee/0x420 fs/namei.c:3861
 do_sys_openat2+0x14b/0x4f0 fs/open.c:1320
 do_sys_open fs/open.c:1336 [inline]
 __do_sys_openat fs/open.c:1352 [inline]
 __se_sys_openat fs/open.c:1347 [inline]
 __x64_sys_openat+0x135/0x160 fs/open.c:1347
 do_syscall_x64 arch/x86/entry/common.c:46 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fe905d9e559
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffd322a7d58 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007fe906025fa0 RCX: 00007fe905d9e559
RDX: 0000000000000001 RSI: 00002000000002c0 RDI: ffffffffffffff9c
RBP: 00007fe905e35ab8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fe906025fac R14: 00007fe906025fa0 R15: 00007fe906025fa0
 </TASK>

Allocated by task 4686:
 kasan_save_stack mm/kasan/common.c:46 [inline]
 kasan_set_track+0x4b/0x70 mm/kasan/common.c:53
 __kasan_slab_alloc+0x6b/0x80 mm/kasan/common.c:329
 kasan_slab_alloc include/linux/kasan.h:201 [inline]
 slab_post_alloc_hook+0x4b/0x490 mm/slab.h:737
 slab_alloc_node mm/slub.c:3359 [inline]
 slab_alloc mm/slub.c:3367 [inline]
 __kmem_cache_alloc_lru mm/slub.c:3374 [inline]
 kmem_cache_alloc+0x18b/0x2f0 mm/slub.c:3383
 trace_create_new_event+0x84/0x500 kernel/trace/trace_events.c:3043
 __trace_add_new_event kernel/trace/trace_events.c:3073 [inline]
 __add_event_to_tracers kernel/trace/trace_events.c:3799 [inline]
 trace_add_event_call+0xed/0x1c0 kernel/trace/trace_events.c:3114
 trace_probe_register_event_call+0x393/0x460 kernel/trace/trace_probe.c:1183
 __trace_eprobe_create+0x14af/0x1680 kernel/trace/trace_eprobe.c:1063
 trace_probe_create+0xc4/0x130 kernel/trace/trace_probe.c:1290
 create_dyn_event+0xa9/0x140 kernel/trace/trace_dynevent.c:152
 trace_parse_run_command+0x1a8/0x2c0 kernel/trace/trace.c:10266
 vfs_write+0x2dc/0x9a0 fs/read_write.c:582
 ksys_write+0x14d/0x260 fs/read_write.c:637
 do_syscall_x64 arch/x86/entry/common.c:46 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76
 entry_SYSCALL_64_after_hwframe+0x68/0xd2

Freed by task 4687:
 kasan_save_stack mm/kasan/common.c:46 [inline]
 kasan_set_track+0x4b/0x70 mm/kasan/common.c:53
 kasan_save_free_info+0x27/0x40 mm/kasan/generic.c:516
 ____kasan_slab_free+0x126/0x1f0 mm/kasan/common.c:237
 kasan_slab_free include/linux/kasan.h:177 [inline]
 slab_free_hook mm/slub.c:1729 [inline]
 slab_free_freelist_hook+0x133/0x1b0 mm/slub.c:1755
 slab_free mm/slub.c:3687 [inline]
 kmem_cache_free+0xf7/0x2a0 mm/slub.c:3709
 tracing_release_file_tr+0xbd/0x100 kernel/trace/trace.c:4920
 __fput+0x20a/0x8b0 fs/file_table.c:320
 task_work_run+0x1d0/0x260 kernel/task_work.c:203
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 exit_to_user_mode_loop+0xe6/0x110 kernel/entry/common.c:180
 exit_to_user_mode_prepare+0xee/0x180 kernel/entry/common.c:213
 __syscall_exit_to_user_mode_work kernel/entry/common.c:295 [inline]
 syscall_exit_to_user_mode+0x16/0x40 kernel/entry/common.c:306
 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:82
 entry_SYSCALL_64_after_hwframe+0x68/0xd2

The buggy address belongs to the object at ffff88805ef1bf80
 which belongs to the cache trace_event_file of size 96
The buggy address is located 40 bytes inside of
 96-byte region [ffff88805ef1bf80, ffff88805ef1bfe0)

The buggy address belongs to the physical page:
page:ffffea00017bc6c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5ef1b
flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
raw: 00fff00000000200 0000000000000000 dead000000000122 ffff8880184c53c0
raw: 0000000000000000 0000000080200020 00000001ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4608, tgid 4608 (syz.1.80), ts 104897627623, free_ts 104827529925
 set_page_owner include/linux/page_owner.h:31 [inline]
 post_alloc_hook+0x173/0x1a0 mm/page_alloc.c:2560
 prep_new_page mm/page_alloc.c:2567 [inline]
 get_page_from_freelist+0x206b/0x2180 mm/page_alloc.c:4358
 __alloc_pages+0x1ec/0x4f0 mm/page_alloc.c:5658
 alloc_slab_page+0x5d/0x180 mm/slub.c:1799
 allocate_slab mm/slub.c:1944 [inline]
 new_slab+0x87/0x2d0 mm/slub.c:1997
 ___slab_alloc+0xbc5/0x1240 mm/slub.c:3154
 __slab_alloc mm/slub.c:3240 [inline]
 slab_alloc_node mm/slub.c:3325 [inline]
 slab_alloc mm/slub.c:3367 [inline]
 __kmem_cache_alloc_lru mm/slub.c:3374 [inline]
 kmem_cache_alloc+0x111/0x2f0 mm/slub.c:3383
 trace_create_new_event+0x84/0x500 kernel/trace/trace_events.c:3043
 __trace_add_new_event kernel/trace/trace_events.c:3073 [inline]
 __add_event_to_tracers kernel/trace/trace_events.c:3799 [inline]
 trace_add_event_call+0xed/0x1c0 kernel/trace/trace_events.c:3114
 trace_probe_register_event_call+0x393/0x460 kernel/trace/trace_probe.c:1183
 __trace_eprobe_create+0x14af/0x1680 kernel/trace/trace_eprobe.c:1063
 trace_probe_create+0xc4/0x130 kernel/trace/trace_probe.c:1290
 create_dyn_event+0xa9/0x140 kernel/trace/trace_dynevent.c:152
 trace_parse_run_command+0x1a8/0x2c0 kernel/trace/trace.c:10266
 vfs_write+0x2dc/0x9a0 fs/read_write.c:582
 ksys_write+0x14d/0x260 fs/read_write.c:637
page last free stack trace:
 reset_page_owner include/linux/page_owner.h:24 [inline]
 free_pages_prepare mm/page_alloc.c:1487 [inline]
 free_pcp_prepare mm/page_alloc.c:1537 [inline]
 free_unref_page_prepare+0x8e5/0x9e0 mm/page_alloc.c:3414
 free_unref_page_list+0xbb/0x8e0 mm/page_alloc.c:3555
 release_pages+0x20d1/0x2340 mm/swap.c:1035
 tlb_batch_pages_flush mm/mmu_gather.c:60 [inline]
 tlb_flush_mmu_free mm/mmu_gather.c:255 [inline]
 tlb_flush_mmu+0x105/0x220 mm/mmu_gather.c:262
 tlb_finish_mmu+0xf0/0x220 mm/mmu_gather.c:394
 exit_mmap+0x388/0x970 mm/mmap.c:3262
 __mmput+0x118/0x3a0 kernel/fork.c:1210
 exit_mm+0x24d/0x350 kernel/exit.c:572
 do_exit+0x958/0x2570 kernel/exit.c:874
 do_group_exit+0x229/0x2e0 kernel/exit.c:1030
 __do_sys_exit_group kernel/exit.c:1041 [inline]
 __se_sys_exit_group kernel/exit.c:1039 [inline]
 __x64_sys_exit_group+0x3b/0x40 kernel/exit.c:1039
 do_syscall_x64 arch/x86/entry/common.c:46 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76
 entry_SYSCALL_64_after_hwframe+0x68/0xd2

Memory state around the buggy address:
 ffff88805ef1be80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
 ffff88805ef1bf00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
>ffff88805ef1bf80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
                                  ^
 ffff88805ef1c000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
 ffff88805ef1c080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
==================================================================

final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: use-after-free in tracing_open_file_tr+0x63/0x2f0 kernel/trace/trace.c:4892
Read of size 8 at addr ffff88805ef1bfa8 by task syz.1.151/4686

CPU: 1 PID: 4686 Comm: syz.1.151 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0x188/0x24e lib/dump_stack.c:106
 print_address_description mm/kasan/report.c:316 [inline]
 print_report+0xa8/0x210 mm/kasan/report.c:420
 kasan_report+0x10b/0x140 mm/kasan/report.c:524
 tracing_open_file_tr+0x63/0x2f0 kernel/trace/trace.c:4892
 do_dentry_open+0x7dd/0x10b0 fs/open.c:882
 do_open fs/namei.c:3677 [inline]
 path_openat+0x2674/0x2f10 fs/namei.c:3834
 do_filp_open+0x1ee/0x420 fs/namei.c:3861
 do_sys_openat2+0x14b/0x4f0 fs/open.c:1320
 do_sys_open fs/open.c:1336 [inline]
 __do_sys_openat fs/open.c:1352 [inline]
 __se_sys_openat fs/open.c:1347 [inline]
 __x64_sys_openat+0x135/0x160 fs/open.c:1347
 do_syscall_x64 arch/x86/entry/common.c:46 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fe905d9e559
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffd322a7d58 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007fe906025fa0 RCX: 00007fe905d9e559
RDX: 0000000000000001 RSI: 00002000000002c0 RDI: ffffffffffffff9c
RBP: 00007fe905e35ab8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fe906025fac R14: 00007fe906025fa0 R15: 00007fe906025fa0
 </TASK>

Allocated by task 4686:
 kasan_save_stack mm/kasan/common.c:46 [inline]
 kasan_set_track+0x4b/0x70 mm/kasan/common.c:53
 __kasan_slab_alloc+0x6b/0x80 mm/kasan/common.c:329
 kasan_slab_alloc include/linux/kasan.h:201 [inline]
 slab_post_alloc_hook+0x4b/0x490 mm/slab.h:737
 slab_alloc_node mm/slub.c:3359 [inline]
 slab_alloc mm/slub.c:3367 [inline]
 __kmem_cache_alloc_lru mm/slub.c:3374 [inline]
 kmem_cache_alloc+0x18b/0x2f0 mm/slub.c:3383
 trace_create_new_event+0x84/0x500 kernel/trace/trace_events.c:3043
 __trace_add_new_event kernel/trace/trace_events.c:3073 [inline]
 __add_event_to_tracers kernel/trace/trace_events.c:3799 [inline]
 trace_add_event_call+0xed/0x1c0 kernel/trace/trace_events.c:3114
 trace_probe_register_event_call+0x393/0x460 kernel/trace/trace_probe.c:1183
 __trace_eprobe_create+0x14af/0x1680 kernel/trace/trace_eprobe.c:1063
 trace_probe_create+0xc4/0x130 kernel/trace/trace_probe.c:1290
 create_dyn_event+0xa9/0x140 kernel/trace/trace_dynevent.c:152
 trace_parse_run_command+0x1a8/0x2c0 kernel/trace/trace.c:10266
 vfs_write+0x2dc/0x9a0 fs/read_write.c:582
 ksys_write+0x14d/0x260 fs/read_write.c:637
 do_syscall_x64 arch/x86/entry/common.c:46 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76
 entry_SYSCALL_64_after_hwframe+0x68/0xd2

Freed by task 4687:
 kasan_save_stack mm/kasan/common.c:46 [inline]
 kasan_set_track+0x4b/0x70 mm/kasan/common.c:53
 kasan_save_free_info+0x27/0x40 mm/kasan/generic.c:516
 ____kasan_slab_free+0x126/0x1f0 mm/kasan/common.c:237
 kasan_slab_free include/linux/kasan.h:177 [inline]
 slab_free_hook mm/slub.c:1729 [inline]
 slab_free_freelist_hook+0x133/0x1b0 mm/slub.c:1755
 slab_free mm/slub.c:3687 [inline]
 kmem_cache_free+0xf7/0x2a0 mm/slub.c:3709
 tracing_release_file_tr+0xbd/0x100 kernel/trace/trace.c:4920
 __fput+0x20a/0x8b0 fs/file_table.c:320
 task_work_run+0x1d0/0x260 kernel/task_work.c:203
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 exit_to_user_mode_loop+0xe6/0x110 kernel/entry/common.c:180
 exit_to_user_mode_prepare+0xee/0x180 kernel/entry/common.c:213
 __syscall_exit_to_user_mode_work kernel/entry/common.c:295 [inline]
 syscall_exit_to_user_mode+0x16/0x40 kernel/entry/common.c:306
 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:82
 entry_SYSCALL_64_after_hwframe+0x68/0xd2

The buggy address belongs to the object at ffff88805ef1bf80
 which belongs to the cache trace_event_file of size 96
The buggy address is located 40 bytes inside of
 96-byte region [ffff88805ef1bf80, ffff88805ef1bfe0)

The buggy address belongs to the physical page:
page:ffffea00017bc6c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5ef1b
flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
raw: 00fff00000000200 0000000000000000 dead000000000122 ffff8880184c53c0
raw: 0000000000000000 0000000080200020 00000001ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4608, tgid 4608 (syz.1.80), ts 104897627623, free_ts 104827529925
 set_page_owner include/linux/page_owner.h:31 [inline]
 post_alloc_hook+0x173/0x1a0 mm/page_alloc.c:2560
 prep_new_page mm/page_alloc.c:2567 [inline]
 get_page_from_freelist+0x206b/0x2180 mm/page_alloc.c:4358
 __alloc_pages+0x1ec/0x4f0 mm/page_alloc.c:5658
 alloc_slab_page+0x5d/0x180 mm/slub.c:1799
 allocate_slab mm/slub.c:1944 [inline]
 new_slab+0x87/0x2d0 mm/slub.c:1997
 ___slab_alloc+0xbc5/0x1240 mm/slub.c:3154
 __slab_alloc mm/slub.c:3240 [inline]
 slab_alloc_node mm/slub.c:3325 [inline]
 slab_alloc mm/slub.c:3367 [inline]
 __kmem_cache_alloc_lru mm/slub.c:3374 [inline]
 kmem_cache_alloc+0x111/0x2f0 mm/slub.c:3383
 trace_create_new_event+0x84/0x500 kernel/trace/trace_events.c:3043
 __trace_add_new_event kernel/trace/trace_events.c:3073 [inline]
 __add_event_to_tracers kernel/trace/trace_events.c:3799 [inline]
 trace_add_event_call+0xed/0x1c0 kernel/trace/trace_events.c:3114
 trace_probe_register_event_call+0x393/0x460 kernel/trace/trace_probe.c:1183
 __trace_eprobe_create+0x14af/0x1680 kernel/trace/trace_eprobe.c:1063
 trace_probe_create+0xc4/0x130 kernel/trace/trace_probe.c:1290
 create_dyn_event+0xa9/0x140 kernel/trace/trace_dynevent.c:152
 trace_parse_run_command+0x1a8/0x2c0 kernel/trace/trace.c:10266
 vfs_write+0x2dc/0x9a0 fs/read_write.c:582
 ksys_write+0x14d/0x260 fs/read_write.c:637
page last free stack trace:
 reset_page_owner include/linux/page_owner.h:24 [inline]
 free_pages_prepare mm/page_alloc.c:1487 [inline]
 free_pcp_prepare mm/page_alloc.c:1537 [inline]
 free_unref_page_prepare+0x8e5/0x9e0 mm/page_alloc.c:3414
 free_unref_page_list+0xbb/0x8e0 mm/page_alloc.c:3555
 release_pages+0x20d1/0x2340 mm/swap.c:1035
 tlb_batch_pages_flush mm/mmu_gather.c:60 [inline]
 tlb_flush_mmu_free mm/mmu_gather.c:255 [inline]
 tlb_flush_mmu+0x105/0x220 mm/mmu_gather.c:262
 tlb_finish_mmu+0xf0/0x220 mm/mmu_gather.c:394
 exit_mmap+0x388/0x970 mm/mmap.c:3262
 __mmput+0x118/0x3a0 kernel/fork.c:1210
 exit_mm+0x24d/0x350 kernel/exit.c:572
 do_exit+0x958/0x2570 kernel/exit.c:874
 do_group_exit+0x229/0x2e0 kernel/exit.c:1030
 __do_sys_exit_group kernel/exit.c:1041 [inline]
 __se_sys_exit_group kernel/exit.c:1039 [inline]
 __x64_sys_exit_group+0x3b/0x40 kernel/exit.c:1039
 do_syscall_x64 arch/x86/entry/common.c:46 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76
 entry_SYSCALL_64_after_hwframe+0x68/0xd2

Memory state around the buggy address:
 ffff88805ef1be80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
 ffff88805ef1bf00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
>ffff88805ef1bf80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
                                  ^
 ffff88805ef1c000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
 ffff88805ef1c080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
==================================================================