last executing test programs: 28m37.237165503s ago: executing program 32 (id=4908): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0xfffffffd, 0xfffffffffffffe6b, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) 28m36.2690975s ago: executing program 33 (id=4939): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) 28m35.855917491s ago: executing program 34 (id=4956): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000040)={0x1e, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) 28m33.928456914s ago: executing program 35 (id=4995): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 28m30.165039371s ago: executing program 36 (id=5043): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) nanosleep(0x0, 0x0) 28m23.269991742s ago: executing program 37 (id=5142): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x14048041) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r6, @ANYRES64=r5], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b67, 0x10, r4, 0x38c15000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @remote, 0x1000000}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000240)="73fa5858d112c3a24feba2025930476fc7c3bbd1ea59ff17f3c4ed6e62740d069f9902f60435d671c7db3ac5c333054aa36a9b805dc329542e4f1241b546d286e712fce8472d4c440847253713d267f05a9324d8e499199c5dd38cfee393aaa66749c342283f9c76bc82d5f866bce9ea9dae1d496f8ae4d681303c2651b4323ce98c4163438a15ac775089e802b654d9c023d3e275b5b56cfce5cbd515ac7f6fa2f4984fefa6", 0xa6}, {&(0x7f0000000140)="3509c306533299", 0x7}, {&(0x7f0000000380)="c13e3e11c5b1980478b0f492f84d5f7261bf6aef564750491661206722a3248be903c2c0e6625ba5f558a79e66aa90e6d29b4bb3fd59c947e53d9c7fc7fabb746eda5f8dda7836ea9167a7eb41936177790c3baf476e82fb395e96ed0f36881cc55ccadf753b9cb829e618a3bcf475b4b1835530978d4b01230fa799703feee07ce69d616f6c9cd9c4cbabd7c39a03e90a7728c491b7757245305000fd4a50432bccb2942d79317a118c17479c41158b182fbfbb8d7dbe13009165eecd564c3b6583c6017c5ce7a99cd5794ef44b", 0xce}], 0x3, &(0x7f0000000540)=[@rthdrdstopts={{0xb8, 0x29, 0x37, {0x16, 0x13, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @generic={0x0, 0x38, "2a79cd7c63009dde0b842eca72ef3ee1d30468334bb00abc58ac8981f2f7b3c32a374fc48734a4e202977b3235a60fce6645b5ff4980e2a6"}, @calipso={0x7, 0x58, {0x1, 0x14, 0x0, 0xb35, [0x81, 0x6b, 0x3, 0xbed, 0xe, 0x7, 0x4, 0x1, 0x403, 0x5]}}]}}}, @hopopts={{0x30, 0x29, 0x36, {0x2f, 0x2, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x6}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9d0}}, @dstopts={{0x170, 0x29, 0x37, {0xd, 0x2b, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x0, 0xc, 0x8, 0x7, [0xf497, 0x2, 0xffff, 0x4, 0x8, 0xffffffffffffffff]}}, @pad1, @ra={0x5, 0x2, 0x2}, @ra={0x5, 0x2, 0x6927}, @generic={0x40, 0xf2, "5fe6d1d315b646e50215811efba789e777cd599095822560e35d628ca0e3545a3002e468c7e30f4c116dd2e8fbddf118547f9ad5c81d69b33599229e0bae72d153004c0705170c27400a8c976932866a6ee7a1937c903eac5ac8087e65cb0d131d8b0393fe9ff696b38e443adeccedcb7d56d6df5fa8427650daa321d8c46eebd4ea869dd94fc1d8779a719ea4649d633148fc127d3c7ea674dba3850d05f990cb6491da6685e90f5bd58f4c53b453bebc04b1598c92601a16478dfe73fefdff004abb5565bac816df2454cc9603c82364716dc5e50fe7bc6ba7080c649ab02cfc146805de1d059180d2451aece5907b8314"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}, @ra={0x5, 0x2, 0x6}]}}}, @dstopts_2292={{0x78, 0x29, 0x4, {0x5e, 0xb, '\x00', [@pad1, @calipso={0x7, 0x28, {0x1, 0x8, 0x8, 0x70, [0x0, 0x7fffffffffffffff, 0x9, 0xfffffffffffffefd]}}, @jumbo={0xc2, 0x4, 0x8}, @enc_lim={0x4, 0x1, 0x8a}, @ra={0x5, 0x2, 0x38}, @calipso={0x7, 0x20, {0x0, 0x6, 0xda, 0x0, [0xb2, 0x5016, 0xf22]}}]}}}, @hopopts_2292={{0x48, 0x29, 0x36, {0x3a, 0x5, '\x00', [@jumbo={0xc2, 0x4, 0x7fff}, @enc_lim, @calipso={0x7, 0x18, {0x0, 0x4, 0x7, 0x1, [0x29, 0xcbe9]}}, @ra={0x5, 0x2, 0x2}, @enc_lim={0x4, 0x1, 0x4}]}}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x89, 0x1, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x1}, @enc_lim={0x4, 0x1, 0x40}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x19}}], 0x370}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000008c0)="71acd59ebeb783baed443278498f95a6e2514088d3d3b82c088b1d352b747e5b060011af5a41", 0x26}, {&(0x7f0000000900)}, {&(0x7f0000000940)="0bbb2a0d722252e5f8f74d01177ba50368ca1f75ffa8aa9854aef351e849c2f3ce08430752656f9c76dfcf38b6990dcabac632b0c22af6e09357328d42fe32c3f7389ae201b97812a1a7cf8078d393f15e484b05d4dc4c03a4f49c688f40a1cc25e8c8ba09234f0f253448e45a99340fd43960366936c099ee030a80b1143aee453ca0f25577a62b28bfffa8753c0b919fc32635171bdfbb513a726bd0dfa69f9bcb54b8a26e8fb52a4214b607e15ea186cf6ef0e4c7751c3bb47cab195a97063ac3bbe5a9b7", 0xc6}, {&(0x7f0000000a80)="1b8c1ebdd573fd0a9e54a5e341761d034cfcbe49126510f9806b798a0e0f07e6bac901f76beaa654ec15a3acdce10bec64ad1fb1f29a790bbac0d11059bfcdb30c9be11f2da8070e98ba9e0c7022522fb34cb3bbe0928527bc96b578c7cc0e09c273d860cf062e9b", 0x68}], 0x4, &(0x7f0000000b40)=[@dontfrag={{0x14, 0x29, 0x3e, 0x50}}], 0x18}}, {{&(0x7f0000000b80)={0xa, 0x4e23, 0x1, @mcast2, 0xc}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000bc0)="f11064f55a76d1ad7c4177f822bac063ad733b424c953e9942d63efb41809a37b6aef686ca1e598b0d0a37c66e4227041ee9cc2f550917320323a04513b39feedd01bf0bbb0ede9a720f02a670d4bc3e8fbad90285a4136b279aee0d495b2dee2139c56b6d7a19898a345835751c5550554db294bef4828198f73101bf313b417480606de547735e751adb14863407fdb24c9264886805cf3ea8a3a3cc49f0539fd152b08920316cb33e29b296df06ce04ab8c92f499df1120059e19f912978a4e4d6b047971212eddcd5ea239dab88d295689e7b215ad9d3f543fa152fce307614e668ac58d7d611c93484fbe307ef6f8e28b6640690cec3973f055021a5ce61fa70201bb49cf8f8b20cf6de94193e7d944f55ceca878e8292244e0c2412fbf0c570c90f03fe727e205c90d038487ec9d264b6d6699560f251ad5f28ca0f2ea2f14c960878896593036e7987ead95a1a7551460b38b8e576d050060eebbda901adbbd7ef7210da2abc86613f6121637117048ea9fb65e7422be442c6fd653bf8615e6a098c8753496d3e5763d5f2491b81bac892de4f0e89a81ab7ad8ac691e199108e39ffbd3d5aee4473e6f210293c12e877df39ed6394e11e0af8205cfea9579c8c8467044f96bb70cd9ddb5f840419708d320058fdf0451cb69418d7f9ccfa0738d34afd3f6b0a4643921be756e1671564c458e8e75cd073a9d3cd3d32bd2daed78cbee88bedfd4ecfc10c3ec6c40de74b50e562befbd3428de05a3dfa058fb972510385b33c9bba86c9c59f7a887d9661652641847f7e93365e4172c28ef3092fb4d4b47accb4fa871f26cbf893dd68ebea24986c7629263fe1ef36487b10b4a6ed684390b98e5fe231baf1f8704561e091435ba5079eac4a893904acce508f71209f9426c7e5985b26f96db71a853453caaaffa79583719f92adc4d0292772768970c7e63f89d271b4f94eaf8d8f2938d88b267fb6f9df2919a9c0f23cc8699f5f70d27616da74756ccd7552438480d86bcc8f2ddf09db9cb0b18f66cc1a205ed1b936405f9df65519d488b32e86104fcf5397e119f534831821211153f6922e06c77fb42b3f6b9d17c42a2d8d65f6ce212aaffa9c37deee60ea74e3bb9abe3ed272f8509bd1cd762b8be3109f6e1e3493abed59b88095cfa68806058f7ed642ba4cfc635db3f39f295630e240a7b96d2655938811fbca5ab8c4e53de303fd84a0771d912e832ff4c3fb2da3ecba76837174e6d622dddc5c0654b6e2cde10e60f49fb5d9d5642f7c72d1a7ce7f230755eac60096786534c115362810b8672b3ccc441092baf3fcf97a7bf7ef557a6d7daf32663ec69f9fe16d7292504d495708baf965513c4d6b1e8a3b0d42094157039ab56814920b1d4b62d1f96dc3a1ee9a64f32fd88b1d614f62b30aaae886d2b33d20b7cfe86a5593dfd0666a4c3f045a3f7c90f2df6e692b85285a5d243c7e6157e43b0495394a63cd64b2d38519f27b35357a46b61cf57cb9b07e890d3c27e03f3b70f895a888518f0385a00a9696f17f80eb58540ed427eb9deee77c94e3aa9ba3244933d15dd75c5698ee1fef8f361c0ee1717550cb8b56f78ba93bda4f5e6a133619647101105f01f52323a62cc786f7382361ed54a62195cf4f60544263873624254878aa8dcdf59436c17852cc3a9f40cd4b62fc53e7e12ebbee2143056154b086cbd133eed8a0b472f00a215ae5f2d31fcd1671c1ac5f6b0295bf29f84c169e6cefd897f4478ed7cb9288b277932edc2ffa3a563434d09913f2f805b935549ab55bfcacf3ed378323c26afd6c240516f749caec1a9d1e7ff3f97577ece565fc57fcbe9782c5461a87158ddbcde22a5a51df19bea72132b7065805f25e47c453594081a9b62e49174a932d9b0999757bd0868bfd923617b6a4262ae666451772054d9891fc590caf42ee0ec2ea620b575f88af7e659b7684165406bdb060cc097db9444f2c75cbdb3743fa0921d15263c1eb31e72cac3212848141dac0637450f0b407bd0b3e27ab5ece46a70cb083a971e94c07c3e40ed7e4de7ae58921ce1752c915cdb518dd1f01bfeba5f38c8ee5ef09fbd607ea0654a12d769d92dfccc905fd99727816534238f394101e9801e073c11f550ac5ff5d56fea9ee9d4d93b544953f0b7b6a6ce1417b1e34c20d45e745a958f6276fe516d8ae3fd89cae8a33dd86d9ac498d2f7ecd3d508e32d64ac7289557cd21bdc28823c86c9176734a3efc5cec5521891aa07aa846a05741679cee66b1d11c6938e40fc175d0c82a5135644adc2fdd729c81f2e33a8525e2e60a5163b6b41724a359c37f5c701acead1ffc88c3033bca5e4a09304681e2e5db02bf9aaec108ecf454e8736bda385d524af97a7383662021d22d2b28335a415ecca4ff883f98992d1f27f3b1e142bfe4dcdd533713541a7cecf7d46db0f198034f8cb3849114aca4864aec0f4a0006b2985a500b0c2509df2988475a3e149a07f03ae3523f941dd5a2b29d4607a754bc2728fc6b9d23005a261ecf4176193c8e6100b78192e35c9918df72ce239626bdccb326ed37ded8245816e2df9ace9f71a9f0f408ab48a8f832047c6748da4974b7b6f12d4c14b0858e2abc7ae434954f7a3936a32099f2122e9372adffd5bbec2ce8db13b5be43ec5cb66abed204cd41488f2f26f6bcfbf2907b786b176a9bdf4df7000b39796d4f3a7f515b2a623528feef06477a247e8154921f22a4c9a7492453413464ff42043ee8060e7573bdc922d1857815b98de6d60848019e8861c3540a3d917498a5486ffd36b69c535e1734657cc1acbeda9e93410e821e11cda180f8d0f2b116e087ebca34e5211b626a84839c4737a8672c63bada121aa188eaf8a442a06d6dcbc93460f93452b83b0e3e1064f43f7121e83f0499b4da97e743d13a167536bbc06baad8bb18b1a0151cacd6aefce511d53cd5858d70726a8b6877a78a7680c1abeb2135a89c85e0dc29f888c6563812041ddc8cd49b1821d85a940f78322e9af6e363a9b1b77ffd2ba331d631c13b25936ac50af6435b809f012edf68db7073ec6acfcdcbf69dedb552f7d35edd3ce73bf562f2ebf2c19dbc74155bdb6b68f33f1efc0cd8bf79e63134378b151250ce283603f06de6c69fd4e32d6dbdb54588560fd9c932cd37717e6c14c7b0f1a8a93c0f1bdf59a6c16af06e03bd28700d770d14a7c387806503fcd0611ba791fb9e0b35605f361f2d7e6dbd63fef71fbd67da39599ee31d7c6bf0559ff82c7249068adae12822ea77029d07db9147885849fe1ed003725aa662ab26d094beb799e35046a686e7f528c862bd670ce1ab11fef0feb51cdfcb950c727b936af9ca1a9ea75eadbe7bb043eaad0352e4f46379486c3a2cabde5ab444a0395b4b910b257b241fc2d677d54d96bae85658b369a00359eb81b7da9101eaf238f222d80424197c2e6f4c3514c0d7626d09f9009ae1ed7cca201f7dc02766ed26bd5bff0bf56b156da27ebad88535d25e2d129ecad0a4ba84ec7ebf3feb93d12d725c84a472318ae67b52245a37c340bc5324c2fa6b15e8767e6d3a74190693ff4d1a04a2a47bf861b6b6e62c5a1c5d1123a2500c914d924a2d665dab92db47909ef9670cd93b4ea041a19071a5de2f545fdd89a10aee4eead817decf3dc519c16d5852f43722e8815fee95906c74042c1fb1877fde8a6b4c10eb6c09109b22e73103441943891b64b99f3efa7d2df76b1fe60b6737d657dbcf96f2ce787ee8eb13b7d923e49b20ab4ec650a8f29b98817371c0d7b6e5d6cef88def398562a357cef555988b75302f611f284cfb9d4379e08c9958d5d0049d5417d8cb059d015af5d04f48bcf5fb4956f4ba85f1ffb17126258e2d96ec4e791764262ac5b0d904245ed3d9e0641f7f8fe2b20ab08a950ffcdb27f5286e9c4ab44748c247ed16489fb1f20fd1a70b4b695a500c11c57ab94b28756da5d38af46e9f7660129b5084ac48c4a0cab973a64a8b5d244b67ce74fe4caeac953f3b2879747ed7e3143a441c10cf324a46ed6aca21ce902a2e232d8e95d8506b34479054d77f0a9459447537b753831de9cfcbab470a99878e4896d63822f1812db274f39cbcab566d7397534c58546db2b138f3e27179c11586c47c5b30217de2ba00bec111071b9db2691622395abb173c8d55d08317f1e8201a54a0a077877c73f54c40eacd596e18e6e4da46a3e77d2ea25bcfc81ca5a290543fea33b891192027e5254f6eda92391cccb730a398cafc014f8f3973c180a92f6ce7c873ed4a5f91275a73c3e5b2b39722c4ef5c1e948d0b86f95c0999aa5a1031a05ce3ed4e712b6ad72a87730eec28054a246ac8bb413d631977fb95e4e97d974b039545753e6014f9cb48c82c8530c182f110ee1025b67a9ddea69b33d09d78ef0b3a4822bd6bc804a5d796ce1d704783487ccc53960e473b03c916f17a781797b3e4d0a023ed3208f29d64df1ee7804d44fc2cdfcdf416941e527985c1d364ecfd6332bcad8950c2a1af3eeae6e42cdf4f7754567409ef54518d7b2fc9d21aada217e516534d68b1d993a324df511da8c9f3f0a2d12d947b3b57eb50d928ccf0417e8a4f48ee494e9e308b9e8da41c190e2853b1c47efe45ce41fa7323ac9e8d9ee7896f99f48f3eb8ced674d86824c27053f92d69c0b05fa77f61393c9413bc2db52c2321d1135fb45196aaf54ff080f909d9e897c810156d1c772480125d8367bb571734689189444dbc6ef91ddc7b14f40954f4be52d7048bc36d2c820bf988197f8a5ae9fdb3501693a18c604f7aeeecd1437e26c62800c79d11775898ccf0ee50575804adbdab1664777616b0ec388e9e54567e788f2d3df523441d242ef9da3b67f83778856c0176b3c9ddf4241f37aa201777bb1f52dbdd6218758a053fbaab9bf6c8e15e5ef5e6bf94f1897e30bff1a4d1fe94635b6111fbbbb599309a5b11a317c4ca412691c56ee83c752544bf313b884cc0cab86f4602530a0f5c4a7c0b0dc283300f4ce9dfbcdc49ded7e849feb5ecefc51246bab6f69f3d08c53a07c06d12a6019b1d00ed7a10117e6a6015224ac58d90eb7c6a04370f252a24498a130a008ced6f7447bea0414cd98e26f086531873e7cafd05ce559e65f594fef23e68f62c18c6aafa3e86f44f46eb45a6be0c95e1d359ccf9b0edc1be009c5edc3b426ed8fde0af73c689497ca2cd37b9a9a184bb2e15b9310b5de51d51c4818e03dcc46b7833c7f56a8a641590254fd7ea611e72d5473bf745475132ccff6e576a678bef7c50e6f999fae25008c281fc0e41aa3df3e52775e75127bc994d530160259213f79700b03030d34bf2de3cc72aefa73e58e893a01787324d196288876beeb4d90f7279f74a2cf68fd95ec39ed27f17b1d7819cb809998ef6e770efcd50520355a1aea5f9df8657acd5d2b92abaa18ab7214ce30851b6a2dd01cfe8ea547b291edc3f1c07f891eb1b3e384cad3be7790ec2bbb17ebad25cefda6875b0601047a7b2a099d37aa6bdb32875f8e81fa829b67bc0360c237b2b180b749071c9efddb94197ab6394b62db24f09a638b4d31a8eee6afd26a856ab97000a888ec0de0a1634625365a0046bb18876b89ae2f89b17427ccf9b52870c601f284ecf62454b1c36356dcf98c1b7a0bdabec3faae88e52178d28840b01538b2cf9b0d253565647fb9f0b8bed6d77d8a8d1cbe155b6940a9324d505e3844e076afca8782f23272fb3b4ea1a53e165267138aa22a783566fe8624e47696292808509097f3ac937f910268", 0x1000}, {&(0x7f0000001bc0)="e9b18651820d1723250a7c8fd0fc7e59b4bf0ed702dcaddd27654f857deb86739f317f2467f2a25ecb7f9d9949e621a5b9bea7788b457bb0e6ab90e1f95913b971c2bc7c2b274764cf00cca096b40da19d3c688528db955325e3b4198c12376338ca9727b89c2bc8f6d7e94bdf1bf9a93db57e68883c932c55", 0x79}, {&(0x7f0000002cc0)="2a2bbd6f993852526fb0ed1e951f1e1317811bb4e6a61568768f6f3e924a3eded770e1256d6535b64cefccbf8372e65f32f1ead6a8fc84d0c88278219b17c32b6f0ff0d448df64854b36a83d811745db4d016e9c28ac99d2a5fcfbe1a220c4e6b2a3f8047a9ee2cbac492d94d95fc66efac2f51b5242225df90048a3372c2c0cf5bd8424bc2ab43070517c0d5073bde379c7ec49f5b3455b82991070446583ec9bd3ff8c8d73ecf2a3748aa8500cf3d9bf7f63fa9870c7a7acdeb08eab5b76c439be89f00db65493b1786c6c2b0324aaac79f3aca8e03aca79002c689a291ab6ff33ac721b6b", 0xe6}], 0x3, &(0x7f0000001d80)}}, {{&(0x7f0000001dc0)={0xa, 0x4e22, 0x7fffffff, @dev={0xfe, 0x80, '\x00', 0x39}, 0x7fffffff}, 0x1c, &(0x7f0000002100)=[{&(0x7f0000001e00)="fa0bbc422b3bfd16d8e23e97ded9ae75b1f199104a27b04f2c8790192e74f7f88af2d9f907423f99a793d7ed1c7fbd688dca9a178b61166c3c4db2ccec1e3353cfa9ca8afe73fdda945b8eb8df0c0d384389dee55e6b12a801b45841", 0x5c}, {&(0x7f0000001e80)="542c8593164890e068cc69cb7b9067b8a26e82459dc31c4bf44e10955d1de121f3aed08858a4fe94366e995d6ef9503e9587e171d02cae9c389dc3c67f40611a97f479b1ee98d03cf90c436c0423b77a2667bc1a4c48427b65bd794d", 0x5c}, {&(0x7f0000001f00)="4ad757e5f4aae29aa9af54b3181507e52ba42500ebbc068c21e3f3dc5d2f32bdd89024527217b8eab37e8c60312a429c70c5b1ad134e1d756ed185ccd2112d4e8858bcaf5ef77de3c12d045dd702692348", 0x51}, {&(0x7f0000001f80)="b74d23259411cf4aa5fa130a00f5da80f165b0e0dbbdf0c9c3f89e56508c4cafd58d13945477fddf5d6e14d51be93184a183636b7c10167a023135745ac78024aa4a70299ebb4a2d93e00b4fbcfa56d8a8fdf876ed2e5de85b6ea9ab94cb92becfd1f51f00c18e39cf0032dd568561f1f42bfdf50e36cbf60c192ee56399154ae84b84140d850bb679c1f34486e6d209f9b7ac7aaf0ad5c5706052e55e1679969a75d54a7435fe86e24fcfcf01a8ba401ce1bb430470800fbb705d7d52937a8e1121b6d7582ed410ddcd467736a7b27673a9a080530e2de98fa28bb456e80169b7", 0xe1}, {&(0x7f0000002080)="beb20b1ad41e1de611fb6d01b90728ddf4d2cb1d3d9ab9da2c38e6670bd5bcb6a24b1e12142b961b9cb51a37e4dbf7d09f87bd782bdfc48d0a2d5e75aa0c1cb01388300c355d8cb62ad63a4b48cd115da68218", 0x53}], 0x5, &(0x7f0000002200)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\r\x00\x00\x00'], 0x1d0}}, {{&(0x7f0000002400)={0xa, 0x4e21, 0x7, @remote, 0x8}, 0x1c, &(0x7f0000002ac0)=[{&(0x7f0000002440)="623778fafd7bdb834d9a65427f2f2c4eeba016928d23efaf2683e620209ccf7fff74d6be7d17dc358a8a8afa197f0ec14282d97cbaaf9fefde5699d20067b5e379e6a0e0332df0ce93facb6b67acb787b3d43cc19cd97768f17f6cec092379c685aff86d9129b957ed2a44105c3d38cf747a7aa88bfbd3a318afe7ce10ed809a1b9bb050fa79cc496bdda3030777407a6ecb34500d0ed4611f2bdbd50c3c04498e2f9bbeb518874b4c4f6bca2dd1197d41f3711ba46be0c782dbf41a07488db74254bbb563bdc5e1fd282d9a3b764c50d9c7eec7d640c6b9d56808454d14c3c207897a403f972d122f", 0xe9}, {&(0x7f0000002540)="c8943a07dc046e944768723929af946bbc27e17cf4bd3311f2851f9837c690b6b5823ababe81555e0cf9e9dc3d55c3423751fa4a8c865af1bfc50956bafb409cc26cbae1942b0af15a3331141a66825a99a03d87ed22476687e70d1499ea7249e68998c218d773570b09673c16600b2912e9c54670f7d907f49ba203d12ededbb72a4ceb3220e3613de6fdf6bec3afb34fd3dac194e633346df9e7c38c0ad4909329a36d9ba57e51f41937390143f1d8bdafcca6a15a4b2496f15ed06aa0b8ee3858bf820d", 0xc5}, {&(0x7f0000002640)="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", 0xfd}, {&(0x7f0000002740)="fe0e5a5050d68cc112b11e453105f4f827b140499165446a2af29e262d66434d6d6b12f3419ca90ea0be5323576e37b4e3bc37c4b032e4355a8ef684e2879c8a850ea78bf1738a734b82ea2409ca9f9011398c477f64af49e5ed0b9e5ff7cfc75e82cd747275e40e1ab1653b299f792597231ee5f91d21c84750d05278c77d2d2e313e87d93385ec7b49aba59de28fb1f5d05512e1316c333b3cc047f678448334255612e79c708bc2f0a8f915625db16aa24e9ea431b296c4b241307c4eefde6abcc3ca0a9abfdbdd5389c5374178492c343a05c4c753116b33683d776afa3994aa2e36ef03a4", 0xe7}, {&(0x7f0000003c40)="e6833f8bd4ead5f22282b08c6fc35e900b25f5c79390bce520ff2b3ef6c1424abaa77853e50f83a0122b7e2eb143ec5e9c5165156731df24a8ff0d4018943e05b3330c619bb147552f9efe152d3d37432cefc8d6c02bce1af53808a10ba1e4273497df2dab327ce3de112baa62c2cc0b05f7ab70c897796da0ac7b8d51691897a0f739216967363a14834f702822c7226c2323e3096913f0f5aec628006e445d66239ef63eb77399f8d63b4042048d1123db8578db41f2f0004ef7fe4540c298a845fb196be68a25bbd7dcee6e9439bbc58dbdd83cbbef52743e253202b6163e641ae6d23b5a631c2dee0aa80144c47b67f014aa9f1b8c0f19a2ad2f6e56cad62571eeb336ad577de2363bbe9fb3846fc815cefe7057a03cd0c37f92cee84ad08a05b6c7386777499af77bcfca4f007bfba22e02ba10f3ce6899e2cd2d2aca95aafc5a4477e04bfaad2a48cb094bf2d423f7a16f4f7fbe301b49c4dcea25864461802b4e883e10b6e52905b7fa91151ba7ae76fa15a941d6332ee8b86b7473ea5037fd9f69ef48b9b73112bff87c5bb7becd5e7d6ed7d3492e5520f87ec8e11b45c3925b98ec264ab5a5e0aa5d5bfd3ae249aa3b81c3c51b24ea49c5b48d8778362ca62508ec7a7e3780b2a7482b2dce37073ccae1ca68579a2e4dc0fd89459ef7ef2d37fdd3de0e376e5b46fb4a06e791dde26300698ba1a3062190957d8e702004d2a35c95ece121fbd41963aa938a1d1cea32376ad2ad90cad3ab4961a32d68de772bb0dafaeeda75f43129939b8c010654a6a5a3233b14a5923baaa7a2894033e3a64be6442dd42d6136de985d32d32166557e0b8b79309c2eed2373bcd957638375592571e0b3ccd634a048b5926a5648bfdf442431b61167fb783ddbd0c21f025b0a99495301b15d9afb58d30f3bb64c65d14814f1b8c4722a5337810eebca2ff92eb52c03e82d6a4d35b60c0d0a0e99528667071c83bd47ec4c428231d2c177566efda6a32d5094ac8880988c70e19d6ebc81591b2bb20e041060c2cec57029a63218057cdbe99e75e3c5abb2c11ad337a011c3d4bcfe965cb53fa76d0b30d4201a73038378df476394238fb14ba67dade54e85ec2f19f9195a25423bd019365619c1908e856cb94240821c69bb25b6b3e69f2d6f2cffa8f6e83fd1ffa7e8d98f0008c051291f4e947f6f220a7955dd83c1d7f55ed0815dcf8ca86e82a4c1d49c02d5896db06c5acda0a8e384ee2661f3cdfa6142a3325ea41dea194098211d8026578ebf2932e1324b78b8d772f122bc6cfd68b2ece37e8bc4c5ee7d0b96fac4451c43c11b01907b76460ba4058c3a7f79ede5484cad095473bcfa6d8e355d2291971ded458874417d625e2ae048bb8dffafd3dad215080021fb6ae9c36e80075e053b114c3d7206806b18819c24ed977d056233d1fce21c3ec5e0f17554756c23c75c787a9ca8f3b7b27a8ab6b66b55e4e08f286dc1a5fbf11b9bc5def1cb859a60cdbd6de2c1414588f479430ce3182182192abcd22db7cb85211358e95db386c4ae65dd8846a340ee2763dc8a4cd9f98baa64574aafe3120ddf430e4cf93a18adb9165aa49bc0791f338c9e8ef40c07d58319388417a32e43d64b62655112cec8e83cb897638738b8771a47ecc7c3244a92a364bb6d8bdaed02f80b56976da2b12b3ce04e1a5d2422f8c19f72eb79d0d196745d49eeb4ef321f6307880294a4ebcd981422e1a99c284f64c4d6f53c66b5c8d4fead84ec7e5933214ae2a4c6264902d48b30b00458f40aa69f10d3525073f6f4d6be68c53d017a034ccb1e1c4ca9084a613c4918d24bd2eb000fa6fcd32be3df35c189f53639e34c4b2e0cd9528b84bc78016e2d7b89a80ba77c608707f47bf9707be6d1a20856b9ea6cb2153026fef5145b48107c7738e32e2c20fec54a996a6373e4fbe2e85c3393b1aa664dfd0f22439eae4406a1bf2be98bfade889e9ae93054bef5e6bc5b03a5d5e50ecd97630886f1c658264aac9171181937b2fb37153c608e4cc70ab71f03207cc7cce49bbbc2b250ecfafcf77c4ee9da5845970ffbbe3d1da60593a49c83740eed4e593e46e0b8168f5cd3b60d89697ccf8f062d71ca73c7fe94b568e786e1561b93f574f106dfdfcf653730a5126c9e10c48ffcefb80abc74c94672163c9ad4196e933412f6663adf0b49a68090864a970932f155f76b90bdd5cdb960205d313794f1182868aa0306579464c49507bb0c88266556d280028f29e6736b7a2883bf8d4305c837e281673dbb89f2ded8042f1b935ad0f1f67787d65d69ad37a49844c522c213070b679bae5d7212e9fe068f46dc257de4e99a9f60a2679d1cb511943e565b08cbf196037dda369f1089ed0690e7c220dbb3a892dd485e057bcecc9ffc6060149d8203cf3aef6d94a94ffa76537649f306729562fada4006c84723f306ffae6aa059fd97c6381f432b788015c2d17377caf85c45d2321e1972db7c4a977742e6092efaffb70cd0afd34da47b662599d8ad736bb9bc67303cfca9da41c1efccdc3dd367e096c20811882713a4ea0508925be51b2a112badae09921bef82d7cb0678d9152de524327d36159998ec5cc517d5ec96825f8ab5aea639cde1558bfbf08782845a83348c137b4d7ad4328337db879fa7bf69b8bed5bdfcf450d924ddbb0d3b0f4ad2a84869bddda16c70a801f8d590019dd592a9be41f5d7591acb999d7f5217152908ad0e197d3d1988ba4fcb83b2c2380bd394210bc29f1e2c8fdcd67b24c4250a152b8c329ccc91ea96cbc387817ee6b79622004553b6487363988d92b5b69c03b9052a92c225ab91a0e8debe5e4fe454223cc51810864ead26daf968915082907fc490318b132e45ce8c7e46977ac2096e2bd4d04f14706001e15c8bfd6066b6b4e37e25d70220d8d1ea8a195b7a6d733b5e8c85971562fd294be84a727477fdc83837178561aaf5b04896793fd8a9e34e0cb85f8d312d8e614eccf7b5bbfcb99030c71b454a9171527ab4fb43f74ea1f64ac9ae5067e86867952d42c17eb3090f384e5c0893fe83cb79d5269df8e4188b0969c7ee15355d88d169a2d897583139563fc5fc01607f7f216b1e81e240fb9c7328369d3cca5c8d8286ae051a00f494c672f90ff2bab18760cdcdf3ab9a8373c36231cae092b3ada9d2cfee1d2c432aa90bff4ce3fd2599e07d762c54173e6b5722dfa4566401eda9b4cf5462ccbe8ac14c4e061617356f46b6ac11242ecbee853f5ffe2b0f8fa6e32a004966b5b17603d423cbc568e7a9f5e8ce215f5b40f6bbacc548ca081f873b8be417f340a6937f890405add83371a016e0a6b747aa1ce2ab1293cff922379652c5743f8fb6b3fee00504099752273afc3f626e7864e9cd2d70f5860b813d2fb88762248d10a907d3f0c1f451ed70f9f1135dec90deb6be41e177f716d54ed1f1ae3ccade094a09407f6086029222a0a755395bf7e2e7e8fd7993de57eb7a70a9eda3dc667487b0ef75b0716e4d9469092556c583b9b369846fee60ccde8f436d08dc3e7d42cbdd803fd236503ab5a57f63d08cf2beede8ea00d6a5fdc8be3760cf8e427d1fec79709f1cbdde1e50b92c66928d6da053abcc0fed2443a61246c1da70362e44f67bb7db2c9015a65a696aac7e301e4cd3774828d91339cb7f36889d85bd631545204d6eebf35ca90765fae933fb4763e258989a8b545afe0e6a09a8312947c66eac133725c215c8afb5dcea3f3648fee188cf2f1a7469993483c5f9a0c8242c4868f20472155fdd6bc8481301d097c96f358d6a0624f27b3959446387d5ea5917edd5c74222ecc71ee44b3187e5ad2c150368ceb08d1563e0ee975c1135158713ae0342c3254fa9652f6bede4f17d5cbf515e3fdd99d9d6e3c2abcba409ce93f102c58c03ece49758646a0a01c156094c35a46f550794d90c1f4858fa29bd2c152caee70236247cea2a55e1b1ce3d1a9314b00ddce61a6ca0d767328193810266c5a5dc02a8d6cb06e013b5860ab9a10858ac82bcbe44c34f2d3959c9ab7348f6df76940bd639d2abfcadb4f29cfcce6c67fff1c54ff54a52bb354e4c00bad1242ea79eb0a28aca45c4171acc5ff4364cae0c12633551bbabd9b62651f5e7bf01b6ab9af5825c138f1d52e659fb081be7f42d3ace7b35e619f6ac600742762a48f93a9218df58631c503aeb1bce7f063bc20069973c44245d70a9bf70169c612af5096cd748e03c9ddc2efacb899afe55401ff8c8cfa68dd81eb6ce1172022763924220342f874acfd4d509b735e8845133e33d841ac232694a13a6d5dfcaa1138cb404f65799b779b47581b3f10ba51512a642c559229fec9318f8be1743c5ca828a607f4a34afd5aafcbdf7044c346cea35933dce87650e74e9f0f3044d857e88987eb90df9f968cf900ae5bc6a6131e1df4d3a089ff7090ccc3bf66fbce848dc071cafa46e46037f22c7dcbaa10d7df13e95c3f4489c10079f8751faa4eab1038938a278dbac25168635566f41bb374ade84ae2f4ddc4917bad7a4bc104e3b3563182e2b243d4c13e0df5c4ea55983e093c5e773de66ce25f86b156395eeb34ff9252cad04f4da3a5be9f5b9147de9fa2523e140e215c063d6cec3f0b5e2674744920e28ad12552132b89ea83c715cf0fd484427aac0a314385ddea18eff7227fa256070e1e017b47b9a8c830be0a47b5a64920bba79a5111086b7c8791f5318546967150288ce5880fcea3b73021629c267f9592117728175a1c7c6973e363277387f2166dfc9787feab1490d9aba22f8ed854de60519b1278a33a3e97f8ee0c8e1845f8589215fee7e09348a4ffdf8eae302c9100f1d6bb1a35b5ebc08d322ce403d99bf4f7d24bc25920a9cac435e8646f6e63c2bd95f6f50e1cab8389aaddfea5be702f9d9f6cbac74a08b7cb53b262868247576f981622ce0161fca882b7f4468713e232be540c5cb0999e19cbf615c5b7d69afce9160acdfdd78153395941ba63d537132124a2fcacc0b9dd69481130d430ec609018139fb15d3846a978316279c8ac711ddff542b5ea8cac172909261a4953e51c173ebb028e536d6ade831ac73475856d40cdc0f51c7ce5f73111d390ea2dba68526926fec62d7945849f69680a4f0ec478b2dd7af4ae9711a6ffb524154cf29dc1e54c97cea21276e27ee441f0460b98e33db7c3f48fe9134228d3aa6fe721c3957ac964cf955d288596a2e3679e5b91a29a9a8a79329f208b50b0ec4fecdc36614af29e0901a35dcdd4053efe0a4fa6969550c4b2cea197afb19f3fade0b05a532c21c3189d459bc57d5ccd66a79f61b493fe781239dbbc6c04238b10e4e2bca6d92bf6ff44be526f804d5372a8ec554c6b71c2198b060121a424bf3199d88eceaeeecdb1a47d239adb03e32815bd9eae1de87a06e5765fe5d6a89060359ed094915b7c14c5c1abb98bc3f66996f78acab68a5c5a6cf30fcd1c9728e8907bb2ca3cfccc5332e16a3052045e621f7fcd83dc53bac5ebfc892a18d1d4141470524a56acf66afbd106c3fcf6c33226b84a476abd8d45d8f9c81d3baf9ff99aa72ca14eba3f65e9c17e69e89a23d2ecdca9d3642e7094f107e95ef53c34f4eeb672fbcf16f40e5ca5b6a41352d74a4c7464350c6f8377b4a3d2dc9638d3af5f95622f49cf9f6cbbacae15c7f787883006bf4243bf6a78087cd44a05a9fdce588e5a7bfa49da389f7bf8906fedcf8018b73e7f0009c5c1b38aa6c6cefea116203ee35a4a882d459335e3ffc762a4dedf29454995e8f7857d083f862", 0x1000}, {&(0x7f0000002840)="a97adc3c17c1f4a76af682e542c5dcc72a2e3e2dcf141f51a2e81c7b18f33aa8156700d9588a461edada64c5187707c600bb1a055c6d9cd7620ac397b7136454ac2af87e1138da0f30c9574ca8c92aa80852250578d0c87730702fa0fea1740172732df79026d3bd0b343d85b3802d4157ef7f7ea6243d6bc4bd0f2804d7984418d553f02fa62e4ae1e468c88b86d468403a33f25c93a0ba2957e4cb6694778144cda365971943e358a2b9651b0e82929baf8789", 0xb4}, {&(0x7f0000002900)="42f55deeec6f972677eaa03ac3a0ba88f0fd530f27aece9118c29fa20e50684b30cd7c00749514c2dac5c5f187971ae02d77501487acc0decab65d6d578bb1f3aebf72ad5958f0700959f398c617b68f194db18ddbce2fec3e2d9f96267bfe43184426bd43287b76ea1655f9acbf8f83149c880f1480ee2a6436dbbbc79075acdfce3bec7f07636b206488a804f44848b61e35447048f645e5b08614da5c99d9496696c7b4b731cf2d02f55c6e1a2f9114d44a2cc75d3d070e71ea20d86036eb798d3c300e4e260fb649131c224e73e9719ada6115494abdb93c15", 0xdb}, {&(0x7f0000002a00)="6a528d0aaa760a55a9c816af455fd85c2bf94f7739c3249bd2c899edc8721a1070eea072f5238c1f150d1b3d0d7a9b74a16739de0c438c7612d45545b53e710588c4d7007ce8ff7a721de0032ace5e00c0a831fa28e641aac28966a20c08414e90525c77b47ddeea39fbd4c30c7f62f485a8bf6889540ad9d169f409c4e7bc020e5d10a01af52d356e0bd2c6124756ca18a2cc0f03afc34104737775893ceaac5ceb9e4c46f47c036a008d682511606f134a05122c", 0xb5}], 0x8}}], 0x6, 0x4) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./bus/file0\x00', 0x0) 28m19.502963349s ago: executing program 38 (id=5214): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000040)={0x1e, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r8, @ANYRES64=r7], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r8, 0x0) 28m17.023513618s ago: executing program 39 (id=5250): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r7}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 28m14.763923155s ago: executing program 40 (id=5305): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e22, 0x4, @local, 0x3}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000001c0)="985114060bd6f1f564029c0b6bedac213a18597bfc8109a56fa359ee2644", 0x1e}, {&(0x7f0000000540)="3c0cca8c6e90957cc36c5cc638825efbe1bb0ee199a2a71d2240757df5c201b7200106b004067a8e14209799b050190c4f690be8e9370d65b08e1769db1d859187641fbf437fd545ec76ede9012aa6de57c4995b812f93cbda95e90096908ff99f2f9f59ded981861cb6c3ed1dfd2980db6e16976c4493062946baa75575f2fb8a1e26a79a1a9a877b748e4b2ec8887520b5b64ede1fa838ec5bfc71cde1f789a355f7e8da7f6d2a6f0cc15276ffaac319441214acf27e37bfc502dc1c124f30afdbd0", 0xc3}, {&(0x7f0000000200)="e4dff8ce84bd102d914c0f35728425727abf2567f53b1cc829470e4b", 0x1c}, {&(0x7f0000000380)="6a2f81c938a8a4bbb041eb27c67a4268a6af491004e89d66cccfd184f48dd5070f91a1887a134525f551ab81c7cf4691a96d0029b200666c2276e1e76f05493944e40c2d3be9bc51e50b888f093a28b255fb6ce900155e99da4b6d5ad3aeae39832870e9e633777ab633d4206b5dce1ce855785eac34c8526e1a6358a4dbe73d7770c797fbefa9dc16d8b0bf752cc69785ccabc3d785dff559e45039c96dd283189c3d0d48bcdd12ddf72db11a6b731a417827", 0xb3}, {&(0x7f0000000640)="31ae1ac225550a24765849b2bda7f3700f09a7a8a02a40f7baf905f1a5b0b366bcb964ff42d54ebf2a2f935aca07f2b7090de54154df6d367037ec003324fd444205bd8d2c06470bd37fa57f8fabcc40094f9c82766df3887fa6874c674f5cf4759582ecf07e2369d4a65b8ebc4c69bdb9a3f522fa00c3bdef33cc480d1592924d226feb5c59222bf377f67e089f05053f8ced53100f5999ff55114b06e6eddc74e9707d5c9d96141119a7bafe09f46c020aba1463c6d5d030b7def2cbcad70c785ca77a6fe1ebf7cc5fb26419e5ba726c4ab16afc1e67857489e49492080d79e46bddcdf9b1c62631cc12", 0xeb}], 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="880000000000000029000000360000002b0d00000000000000010007100000000002f910006f00000000000000c910fe8000000000000000000000000000aac204000fffe00740000000030e0449000500000000000000a03900000000000005000000000000000300000000000000078c00000000000000000000000000c0c9bab82000000000001400000000000000290000003e0000000f00000000000000380000000000000029000000360000006703000000000000c910fc0200000000000000000000000000010502d35ec204000000ff00000000140000000000000029000000080000007d03000000000000200000000000000029000000360000000100001c15b3ac8742390000000000050200060000000090000000000000002900000004000000890e000000000000c910ff010000000000000000000000000001000100c910fe8000000000000000000000000000aac20400000002050200010738000000020c05001005000000000000000000800100000000050000000000000007000000000000000a0700000000000000000000000000000502000500010000000000000030000000000000002900000037000000ff02000000000000c91000000000000000000000000000000001000000000000500000000000000029000000370000003c06000000000000010200000502ffff0502000405020007c910200100000000000000000000000000020106000000000000040107c204000000090000000000"], 0x220}}], 0x2, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 28m8.229536629s ago: executing program 41 (id=5432): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 28m7.488075364s ago: executing program 42 (id=5440): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) unshare(0x24020400) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000940000005a871513944bb83b8bf9a3b3e6004699d859cf12bf323a2912621d3c034fa6cab4ca124417b4ab988cd09c5b0c5f90ed6c7cf504b1af4cf6696a675d5782460c37a61d2d1217be5d7bad896de20e523c2e0dc126c3ed466321bc4f518ed65ab4a8a399cca6194f43b63070da3921b75a0469839017f48ddb1bca0465e6209293818f2391dbbb3e6863d9087387e22dd6ad8cbbe6"], &(0x7f0000000040)=0xb8) 27m53.166558848s ago: executing program 43 (id=5807): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x3000000, {0x0, 0x1, 0x4}}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x80000000}]}}, 0xffffffffffffffff, 0x3e, 0x0, 0x2}, 0x28) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6f, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 27m52.130804592s ago: executing program 44 (id=5825): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000140)) 27m51.893049406s ago: executing program 45 (id=5827): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x14, 0x0, 0x501, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008044}, 0x44) 27m47.791396947s ago: executing program 46 (id=5871): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000040)={0x1e, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) 27m46.547034212s ago: executing program 47 (id=5892): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xfd, 0x5529, &(0x7f0000000600)="$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") r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 27m24.076240644s ago: executing program 48 (id=6341): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) 27m23.767602014s ago: executing program 49 (id=6349): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) socket$inet6_tcp(0xa, 0x1, 0x0) 27m22.582628893s ago: executing program 2 (id=6367): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x3000000, {0x0, 0x1, 0x4}}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x80000000}]}}, 0xffffffffffffffff, 0x3e, 0x0, 0x2}, 0x28) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6f, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r5, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 27m22.567925604s ago: executing program 2 (id=6369): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) rt_sigaction(0x7, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r3) socket(0x80000000000000a, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 27m22.50797752s ago: executing program 2 (id=6370): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00), 0x0, 0x4) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64], 0x118) 27m22.420318699s ago: executing program 2 (id=6372): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) eventfd2(0x1, 0x1) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x414, &(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRESDEC, @ANYRESOCT, @ANYRES8, @ANYRESHEX], 0x1, 0x2ca, &(0x7f0000000b80)="$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") mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) 27m22.40431157s ago: executing program 2 (id=6373): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) flistxattr(r5, 0x0, 0x0) 27m22.272674104s ago: executing program 2 (id=6377): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x14, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004d0000009500000000000000d61f0ca8bebfa56307f8d791b4a0c1da049983b90a6698b02221323e40e6551fb39126fa9035476d2d60056d7c358d71a3d9472a54dd9cd07e525875ebb2c123c8671111a17cd60cd8c86dfd869ba2a4e99f1f2bf689654551511074a2f377f82ad7dfae7c5a7878a9723d2f9992658b097eadda1ef722f0696b7e5017a4fce7a8bf723518762dec0331679e46924b33e356d4120fd1eb2ed22dabef4c3099"], &(0x7f0000000000)='GPL\x00', 0x4, 0xaf, &(0x7f00000000c0)=""/175}, 0x78) 27m22.240809997s ago: executing program 50 (id=6377): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x14, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004d0000009500000000000000d61f0ca8bebfa56307f8d791b4a0c1da049983b90a6698b02221323e40e6551fb39126fa9035476d2d60056d7c358d71a3d9472a54dd9cd07e525875ebb2c123c8671111a17cd60cd8c86dfd869ba2a4e99f1f2bf689654551511074a2f377f82ad7dfae7c5a7878a9723d2f9992658b097eadda1ef722f0696b7e5017a4fce7a8bf723518762dec0331679e46924b33e356d4120fd1eb2ed22dabef4c3099"], &(0x7f0000000000)='GPL\x00', 0x4, 0xaf, &(0x7f00000000c0)=""/175}, 0x78) 27m15.03124748s ago: executing program 4 (id=6434): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) socket$inet6_tcp(0xa, 0x1, 0x0) 27m14.981460634s ago: executing program 4 (id=6435): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00), 0x0, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}, 0x1, 0x0, 0x0, 0x40000000}, 0x4008000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 27m14.835085009s ago: executing program 4 (id=6437): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x3000000, {0x0, 0x1, 0x4}}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x80000000}]}}, 0xffffffffffffffff, 0x3e, 0x0, 0x2}, 0x28) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6f, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 27m14.804568282s ago: executing program 4 (id=6438): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) eventfd2(0x1, 0x1) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x414, &(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRESDEC, @ANYRESOCT, @ANYRES8, @ANYRESHEX], 0x1, 0x2ca, &(0x7f0000000b80)="$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") mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) 27m14.704771732s ago: executing program 4 (id=6439): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x3000000, {0x0, 0x1, 0x4}}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x80000000}]}}, 0xffffffffffffffff, 0x3e, 0x0, 0x2}, 0x28) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6f, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r3, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) 27m14.535354529s ago: executing program 4 (id=6442): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) 27m14.452873907s ago: executing program 51 (id=6442): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) 26m55.884174608s ago: executing program 5 (id=6584): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500), 0x0, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 26m55.826665574s ago: executing program 5 (id=6586): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000001100a200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffdc}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 26m55.76273711s ago: executing program 5 (id=6587): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) 26m55.712525985s ago: executing program 5 (id=6588): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) eventfd2(0x1, 0x1) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x414, &(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRESDEC, @ANYRESOCT, @ANYRES8, @ANYRESHEX], 0x1, 0x2ca, &(0x7f0000000b80)="$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") mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) 26m55.498694246s ago: executing program 5 (id=6590): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 26m55.346357622s ago: executing program 5 (id=6593): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00), 0x0, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}, 0x1, 0x0, 0x0, 0x40000000}, 0x4008000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 26m55.295634107s ago: executing program 52 (id=6593): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00), 0x0, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}, 0x1, 0x0, 0x0, 0x40000000}, 0x4008000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 26m52.023522335s ago: executing program 1 (id=6624): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, 0x0, 0x0, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) 26m51.993020188s ago: executing program 1 (id=6625): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) flistxattr(r6, 0x0, 0x0) 26m51.954429711s ago: executing program 1 (id=6626): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000005800), 0x0, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) 26m51.595474268s ago: executing program 1 (id=6627): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x414, &(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRESDEC, @ANYRESOCT, @ANYRES8, @ANYRESHEX], 0x1, 0x2ca, &(0x7f0000000b80)="$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") mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) 26m51.086521578s ago: executing program 1 (id=6630): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6f, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 26m50.895939638s ago: executing program 1 (id=6631): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r5}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 26m50.892101968s ago: executing program 53 (id=6631): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r5}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 26m45.58664916s ago: executing program 6 (id=6673): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) 26m45.507885637s ago: executing program 6 (id=6675): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 26m45.507750587s ago: executing program 6 (id=6676): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 26m45.492487879s ago: executing program 6 (id=6677): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) eventfd2(0x1, 0x1) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x414, &(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRESDEC, @ANYRESOCT, @ANYRES8, @ANYRESHEX], 0x1, 0x2ca, &(0x7f0000000b80)="$eJzs3FFLU3EYx/EnZ25OdAtCKKge6iZvhq4XUCMUokFlTqqL4JhnNXba5JxhTCJ3E932OqRL74LqDXgT3XQb3UkgdZEX0Yl2dvRMj3OWs5nfD8h5tv//tz0iG8+E/VfvvHxczDupvFGRnphKj0hN1kWSv6uGY41rT73uk6CajAx8+3jm9t171zPZbHRSdSIzdSmtqkPn3jx5+ur8u8rA9PLQ66isJO+vrqU/rwyvnFr9OfWo4GjB0VK5oobOlMsVY8YydbbgFFOqNy3TcEwtlBzTblrPW+W5uaoapdnB+JxtOo4apaoWzapWylqxq2o8NAolTaVSOhiXo623jT25pclJIxO+1v9pvztCx/WH3WnbmZqI9G1fzC0dRFMAAKC7tJ7/vVm/ef6Xtc10dtq7+vP/+P7M/yLM/x1Sa7rVav7H/8K2M0a88fptxvwPAAAAAAAAAAAAAAAAAAAAAMBhsO66Cdd1E/7V/4mKSExE/Nv/uk90xm5//6/hscsH3Sc6I/DFvZiI9WI+N5/zrt56Ji8FscSUUUnIj/r7QYNXT1zLjo9q3XfXdRcb+cX5XESift6XDMufPTHm5VXeWoH8cYkHnz8tCTkZ/vzp0HzfrYsXAvmUJOT9AymLJbP197XN/LMx1as3slvy/fV9Owo9aQEAAAAAgO6U0g3J5s+/EW+9viEm29e9/B7+P7Dl83WvnG7niEoAAAAAAPDXnOpC0bAs0w4plkVkh6V6ERWRFvGjWkSkK9rYUlwRkS5oo2UxuH8dxkTEu0f/ID78ZSPeVsptY0/vLq+mjhYx2XMq9MBgAAAAAIfY5tC/h9CH5x3sCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAo6flMWAjA96m6kLR39+0J/hALR4nsCtycL8ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0H1+BQAA//8wyhaW") mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) 26m45.262463142s ago: executing program 6 (id=6678): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) waitid(0x0, 0x0, &(0x7f00000001c0), 0x8, 0x0) 26m44.988281879s ago: executing program 6 (id=6679): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) 26m44.851664983s ago: executing program 54 (id=6679): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) 1.181935232s ago: executing program 0 (id=46205): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) close_range(r0, 0xffffffffffffffff, 0x2) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r3, @ANYRES64=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000940)=""/263, 0x107}, {0x0}, {&(0x7f0000002180)=""/205, 0xcd}], 0x3}, 0x1009}], 0x2, 0x40012160, 0x0) 1.141440956s ago: executing program 0 (id=46207): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r7, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r8, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount$fuseblk(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x3818000, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=']) 1.141210576s ago: executing program 7 (id=46208): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x40042, 0x1, 0x3}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x0) 1.113906898s ago: executing program 3 (id=46210): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write$FUSE_ATTR(r0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="240000002800010023bd700000000000050000000c000000000000f7"], 0x24}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1.112612349s ago: executing program 0 (id=46211): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) 1.095384311s ago: executing program 9 (id=46212): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00), 0x0, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1.094716581s ago: executing program 0 (id=46213): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000340)={@remote, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6, 0x6, 0x0, 0x100, 0xffffffffffffffff, 0x2480187, r7}) 1.052487405s ago: executing program 9 (id=46214): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0xfffffffffffffec0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, 0x0) 1.039888246s ago: executing program 0 (id=46215): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{0x0, 0x16, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r5, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r7, 0x0, 0x20, 0x0, 0x0) 948.230675ms ago: executing program 9 (id=46216): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r2, 0x0, 0x0) memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x40, &(0x7f00000001c0)=ANY=[], 0xd0060) 943.685636ms ago: executing program 9 (id=46217): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='+', 0x1}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}}], 0x1, 0x11) 908.757109ms ago: executing program 9 (id=46218): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 853.859865ms ago: executing program 9 (id=46219): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14, {0x2, 0x4e23, @broadcast}, 'bond_slave_0\x00'}) 772.109723ms ago: executing program 7 (id=46221): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) 711.555039ms ago: executing program 7 (id=46222): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r7, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r8, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount$fuseblk(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x3818000, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=']) 711.375989ms ago: executing program 3 (id=46223): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) 710.306959ms ago: executing program 7 (id=46224): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) 668.617103ms ago: executing program 3 (id=46225): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = dup(r3) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r4, 0x0, 0x10000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r5, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1c, 0x0, &(0x7f00000000c0)) 667.330974ms ago: executing program 7 (id=46226): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = userfaultfd(0x80801) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x18, 0x31, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) 604.21678ms ago: executing program 3 (id=46227): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r2, 0x0, 0x0) memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x40, &(0x7f00000001c0)=ANY=[], 0xd0060) 603.88302ms ago: executing program 3 (id=46228): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r2, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x80, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r7, 0x0) 576.559723ms ago: executing program 3 (id=46229): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0xfffffffffffffec0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 565.189554ms ago: executing program 7 (id=46230): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 333.077847ms ago: executing program 8 (id=46234): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write$FUSE_ATTR(r0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="240000002800010023bd700000000000050000000c000000000000f7"], 0x24}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 249.703165ms ago: executing program 8 (id=46235): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket(0x10, 0x803, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x4000172, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000008bc0)={0x1e6c, 0x24, 0x1, 0x8070bd2a, 0x25dfdbfe, {0x1}, [@nested={0x1e55, 0x2f, 0x0, 0x1, [@typed={0x8, 0x3e, 0x0, 0x0, @u32=0x10}, @generic="4987cb719049a5e30359a76481b68deed5d3ebbc945255a72093d766ef0860a6f6d92a2527688da184517ebc35b755064fc4e6ec1cba432c6a60168379c501557fc80e9f51a5af363f134c1a02202ae77ab0802c584550b22fa1550070f226be867a804cb4aa7e226de3e7f8483ab88a947ce3fa0886e9c604ee1668e57ed94e3c4e99906b18d4db4fc20814d04deb52d096de2b1449b87bc15a2786b9e51db7b9f69d4dd7429e59a7089e680b4fd9626e3f780866a8a77087960270b9702d44fc6c3917cb79308ebcccce60930d99cf47c3cd82a8da3de7cd86aca79b417095016ad7981c21d3ae84b9df298b5125af49743b7f0a4a48275062", @nested={0x167b, 0x5c, 0x0, 0x1, [@typed={0x8, 0x11, 0x0, 0x0, @u32=0x1}, @generic="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", @nested={0x1f1, 0x8a, 0x0, 0x1, [@nested={0x4, 0xcf}, @nested={0x4, 0xee}, @generic="42375e5e1a7f229414eb126d5fd16aed30788b5e24c10466bf8fa4ec285de0fa79da2e410cb55fe71a64c2542e323c2d0cbf910a561aedfa7bac4d49", @generic="b707ff998a1423991ac670a90d2d2efa64a11949f2d6068781c4c354842313496e36f8517149a220824f0202a83886ffb4c1bc79136b15a250fd5989fd46df6f50512a69e24a3c1989623f842bb9d72379e786cf659d38b5110e7888d0e022bbfff5e8d07c46f68ac0ebcca9bbb3c825a5dac8a6706a5bfe1ec1221b5e6c92c9913a1979805c91bfb4338930192ff53b0bd80dc53debf3d6965f5be9a5549b1e5905971e47b5b81220dbf6a5e467e7392ecf41fc91ad3d6b52abd3be8630b1d92ff40470dba9300e86348bf6aaa3b221d96bd6b93c498157018440f8194728ac07b80d40f1c63987a590496289", @typed={0xb1, 0x85, 0x0, 0x0, @binary="5aa35d267fd147e21d734c90068eb77f6e4e2fd13b05acbed6c331749a0b71f2b5425aace39e238c33a13b40275532caefd738ba7147cc5d150391ff6d20a57c8b85efdc5fd94f9578de070d5d8f36bd288ce8e8a4d54182de83e4f65af10d684231cb18052aa0de7883db9f5f8d8cab16d736760f680ca77a636b74c1fabed446df41f04e2cd187efff605253fe20cfa1bdaadaa03a3f229be961bb419458fcd8a1578d1482222a8cc59b18b5"}, @typed={0x8, 0xf3, 0x0, 0x0, @u32=0x8000}]}, @generic="4b6fdbb714c7464bf045193ea4a4eef31a596bb9dcd8ea6a2b2177a46636b5f2f3b9d0aaa63e8e3bd8ff93ceb7988d8ff390a294a672ab180ca631d83b87f04c32f6d58497025513788ce8f0212fd26842ccd67b610a23ce33273dd16c1372630ad855e5c589861dde5187ad48dd5c2a82b0f4a5a100b7fa1ef24db832334c750e6acb62781ad1e3f9aabec11ce81e6b5aeb93cb01890add8022bc7ca0f0a46fcc96021cfebccb9a1a95702b30ba1e7392b47e0b5d6423e110cf", @generic="ad08ba7ef11c83eec3c3fc670dcddef5b10ba6e5f204a1b14fad881d16812dfb2ccba3216cd702eb1d811984b5b0c4d0749b5288c8c47bac262d2efc34e794ca55f56c53229757628c524f01ba94bad67cf43b2bb5cadad5d5e962a95cd7e2cfdebe677377eb2b6d0f611b845b17b3b03e437b30dfaca740059a77e12c9bb228bc2facd6a948b4b4826850fd748d6b060ac8eddedf3341d743d51399a83dc21f15344344eb", @generic, @typed={0x4, 0x27}, @nested={0x2f9, 0x1a, 0x0, 0x1, [@typed={0x8, 0x5e, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x3d, 0x0, 0x0, @uid}, @generic="8f40894bce528eb8a59c62458fc877b7092dbd505df01c0ecedeaba633f0bf32b296edd1e807e492ec7966cf81831cf10f694087ecfca93ecf01a01fc3fa12ff41866bb0aaff6ad1d06e4d82a551cd5ddc2ae95bb580c8cafb1579ca0ba463da3ab2d945d36a5ea433619de6b78e0b185c4a2696e1fc8509034e7b2a2a161c2ed4f5b9036607b283091de0025dd9a66d02685df425b3a4c732616e07f57ac55ce531ee3cbaf7fbbfc3940b4da24be93a5ac8701c92a530979bc5145cb99747081d8ec659b2e6e2670d084f9db0a4d9bdec", @generic="f07b3f9560cadde570fe00eb7585a17ecbf431cb428fde2dbedd8feef64956bfb5dfeaf3507338aff18d239487dbbc0b268e2914145772cc5f4899", @generic="73b088a0bea12a09a73b9b758d003d270c0fd70a38f96bf9615b9bd991c0e9adb4df1ea03a18de6188d09be4fc36c3f263eb46ae19925c3a5b8bb28efb9b091e078d6d269f5a753f3ae484c24f892977457fcce1b083e86ea82e491601", @generic="854bc6c5c97eab606a3c19f99633d25c6b3b2a27bbd601c8c236d489d5051b0d60c2e69b7a7e50d456466f1e7fc19da0", @typed={0x79, 0x14b, 0x0, 0x0, @binary="a2946db47e2fdc4ef5db2e4a629e6459018d82f3f6b253169fbbf01209c0b340aa2736567ffb07011ae144c24012ab839e2ae318bfde0677daa02e4914517dfdaacff76b5ddf47e2ef3757732437742a21c5153cdf82063c08d360aceddac864d96f7db881bbd0990baf2a3b82f530f4274b2b50bb"}, @generic="c86cdb5c13cf859403de4ead3f4dda60c4c3ee1bed13a4ea83196384e937cb7027eb8a142d23244ec250b52fe82de4f9ad768caac92bb14c7cad8cd6f0ca27946c1df27f37233195b5c025757cc688dc12e91f08851c52a32b7ed9dbfabd92173e0685ed67cd1a7d1ceefbee658776729212574746ca4c20e6f5bc3d5118e23365666a9b746449e9ae3f48579b5ec9444a2fc40fd64a89e84a968c57a9fb95475cd7c9bc5f32890abf38e40815ab451624c30a0330bc8f8a00611e977d915b2d16c47b423000f32a", @nested={0x4, 0x53}, @nested={0x4, 0x82}]}, @nested={0x19, 0x127, 0x0, 0x1, [@nested={0x4, 0x135}, @generic="1f2c8b381ce09e300cfec138b5c8f76841"]}]}, @generic="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"]}]}, 0x1e6c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 197.924951ms ago: executing program 8 (id=46236): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) 144.710676ms ago: executing program 0 (id=46237): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x4, 0x2}, 0x10) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) 143.927806ms ago: executing program 8 (id=46238): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_clone(0x88002100, 0x0, 0x0, 0x0, 0x0, 0x0) 83.377402ms ago: executing program 8 (id=46239): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r2, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x80, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r7, 0x0) 0s ago: executing program 8 (id=46240): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = userfaultfd(0x80801) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x18, 0x31, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): 5475][T27404] ? load_elf_binary+0x2890/0x2890 [ 2077.290632][T27404] ? kvmalloc_node+0x88/0x130 [ 2077.295347][T27404] ? _raw_spin_unlock+0x4d/0x70 [ 2077.300229][T27404] ? __kasan_check_write+0x14/0x20 [ 2077.305363][T27404] ? put_files_struct+0x23b/0x330 [ 2077.310420][T27404] do_coredump+0x1ac9/0x27f0 [ 2077.315048][T27404] ? simple_acl_create+0x1c0/0x1c0 [ 2077.320165][T27404] ? debug_smp_processor_id+0x17/0x20 [ 2077.325542][T27404] ? kmem_cache_free+0x100/0x2d0 [ 2077.330476][T27404] ? ____kasan_slab_free+0x130/0x160 [ 2077.335763][T27404] ? get_signal+0xb98/0x12e0 [ 2077.340354][T27404] ? kmem_cache_free+0x100/0x2d0 [ 2077.345387][T27404] get_signal+0xf23/0x12e0 [ 2077.349818][T27404] ? asm_exc_invalid_op+0xa/0x20 [ 2077.354756][T27404] arch_do_signal_or_restart+0xbf/0x10f0 [ 2077.360387][T27404] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 2077.366197][T27404] ? force_sig_info_to_task+0x26d/0x2e0 [ 2077.371775][T27404] ? __ia32_sys_rt_sigreturn+0x6c0/0x6c0 [ 2077.377413][T27404] ? force_sig_fault_to_task+0x110/0x110 [ 2077.383049][T27404] ? do_trap+0x117/0x2f0 [ 2077.387327][T27404] ? asm_exc_invalid_op+0xa/0x20 [ 2077.392264][T27404] exit_to_user_mode_loop+0xa2/0xe0 [ 2077.397469][T27404] exit_to_user_mode_prepare+0x76/0xa0 [ 2077.402992][T27404] irqentry_exit_to_user_mode+0x9/0x10 [ 2077.408469][T27404] irqentry_exit+0x12/0x60 [ 2077.412897][T27404] exc_invalid_op+0x3e/0x50 [ 2077.417401][T27404] asm_exc_invalid_op+0x12/0x20 [ 2077.422251][T27404] RIP: 0033:0x200000000004 [ 2077.426666][T27404] Code: Unable to access opcode bytes at RIP 0x1fffffffffda. [ 2077.434028][T27404] RSP: 002b:00007f076f633a78 EFLAGS: 00010282 [ 2077.440099][T27404] RAX: 00000000000000da RBX: 00007f0770e22fa0 RCX: 00007f0770bcc6c9 [ 2077.448072][T27404] RDX: 00007f076f633a80 RSI: 00007f076f633bb0 RDI: 000000000000000d [ 2077.456048][T27404] RBP: 00007f0770c4ef91 R08: 0000000000000000 R09: 0000000000000000 [ 2077.464106][T27404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2077.472078][T27404] R13: 00007f0770e23038 R14: 00007f0770e22fa0 R15: 00007fff3303b148 [ 2077.494880][T27404] memory: usage 307200kB, limit 307200kB, failcnt 9279 [ 2077.508359][T27404] memory+swap: usage 383940kB, limit 9007199254740988kB, failcnt 0 [ 2077.524317][T27404] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2077.541757][T27404] Memory cgroup stats for /syz0: [ 2077.541900][T27404] anon 753664 [ 2077.541900][T27404] file 312373248 [ 2077.541900][T27404] kernel_stack 0 [ 2077.541900][T27404] percpu 0 [ 2077.541900][T27404] sock 0 [ 2077.541900][T27404] shmem 312238080 [ 2077.541900][T27404] file_mapped 0 [ 2077.541900][T27404] file_dirty 0 [ 2077.541900][T27404] file_writeback 0 [ 2077.541900][T27404] anon_thp 0 [ 2077.541900][T27404] inactive_anon 314208256 [ 2077.541900][T27404] active_anon 135168 [ 2077.541900][T27404] inactive_file 163840 [ 2077.541900][T27404] active_file 0 [ 2077.541900][T27404] unevictable 0 [ 2077.541900][T27404] slab_reclaimable 0 [ 2077.541900][T27404] slab_unreclaimable 0 [ 2077.541900][T27404] slab 0 [ 2077.541900][T27404] workingset_refault_anon 0 [ 2077.541900][T27404] workingset_refault_file 0 [ 2077.541900][T27404] workingset_activate_anon 0 [ 2077.541900][T27404] workingset_activate_file 0 [ 2077.541900][T27404] workingset_restore_anon 0 [ 2077.541900][T27404] workingset_restore_file 0 [ 2077.713338][T27404] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.42763,pid=27403,uid=0 [ 2077.774809][T27404] Memory cgroup out of memory: Killed process 27403 (syz.0.42763) total-vm:93812kB, anon-rss:1308kB, file-rss:60448kB, shmem-rss:4kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 2077.829573][ T27] oom_reaper: reaped process 27403 (syz.0.42763), now anon-rss:0kB, file-rss:59316kB, shmem-rss:4kB [ 2079.169645][T27541] 9pnet: Insufficient options for proto=fd [ 2079.750871][T27592] tipc: Trying to set illegal importance in message [ 2079.802344][T27582] bridge0: port 1(bridge_slave_0) entered blocking state [ 2079.810912][T27600] overlayfs: missing 'lowerdir' [ 2079.826469][T27582] bridge0: port 1(bridge_slave_0) entered disabled state [ 2079.834179][T27582] device bridge_slave_0 entered promiscuous mode [ 2079.843529][T27582] bridge0: port 2(bridge_slave_1) entered blocking state [ 2079.850795][T27582] bridge0: port 2(bridge_slave_1) entered disabled state [ 2079.858498][T27582] device bridge_slave_1 entered promiscuous mode [ 2079.916361][T27582] bridge0: port 2(bridge_slave_1) entered blocking state [ 2079.923495][T27582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2079.930880][T27582] bridge0: port 1(bridge_slave_0) entered blocking state [ 2079.937967][T27582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2079.985131][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2080.013753][ T8507] bridge0: port 1(bridge_slave_0) entered disabled state [ 2080.053822][ T8507] bridge0: port 2(bridge_slave_1) entered disabled state [ 2080.066381][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2080.094792][ T8507] bridge0: port 1(bridge_slave_0) entered blocking state [ 2080.101881][ T8507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2080.137610][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2080.174668][ T8507] bridge0: port 2(bridge_slave_1) entered blocking state [ 2080.181761][ T8507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2080.231670][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2080.246257][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2080.271382][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2080.297093][T27582] device veth0_vlan entered promiscuous mode [ 2080.303686][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2080.324058][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2080.332230][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2080.358906][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2080.376643][T27582] device veth1_macvtap entered promiscuous mode [ 2080.399945][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2080.428787][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2080.541305][T17097] device bridge_slave_1 left promiscuous mode [ 2080.564368][T17097] bridge0: port 2(bridge_slave_1) entered disabled state [ 2080.594747][T17097] device bridge_slave_0 left promiscuous mode [ 2080.600946][T17097] bridge0: port 1(bridge_slave_0) entered disabled state [ 2080.634402][T17097] device veth1_macvtap left promiscuous mode [ 2080.640488][T17097] device veth0_vlan left promiscuous mode [ 2080.785482][T27604] syz.0.42858 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2080.814314][T27604] CPU: 0 PID: 27604 Comm: syz.0.42858 Not tainted syzkaller #0 [ 2080.821905][T27604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2080.831982][T27604] Call Trace: [ 2080.835286][T27604] __dump_stack+0x21/0x24 [ 2080.839616][T27604] dump_stack_lvl+0x169/0x1d8 [ 2080.844294][T27604] ? show_regs_print_info+0x18/0x18 [ 2080.849538][T27604] ? ___ratelimit+0x3d1/0x560 [ 2080.854215][T27604] ? __kasan_check_write+0x14/0x20 [ 2080.859329][T27604] ? _raw_spin_lock+0x8e/0xe0 [ 2080.864010][T27604] dump_stack+0x15/0x1c [ 2080.868163][T27604] dump_header+0xdd/0x650 [ 2080.872490][T27604] oom_kill_process+0x1fa/0x2c0 [ 2080.877337][T27604] out_of_memory+0x94a/0xd70 [ 2080.881924][T27604] ? unregister_oom_notifier+0x20/0x20 [ 2080.887380][T27604] ? mutex_lock_killable+0x8c/0xe0 [ 2080.892490][T27604] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 2080.898997][T27604] mem_cgroup_out_of_memory+0x260/0x310 [ 2080.904542][T27604] ? mem_cgroup_oom_trylock+0x350/0x350 [ 2080.910084][T27604] ? _raw_spin_lock+0x8e/0xe0 [ 2080.914895][T27604] ? _raw_spin_trylock_bh+0x130/0x130 [ 2080.920283][T27604] ? _raw_spin_unlock+0x4d/0x70 [ 2080.925143][T27604] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 2080.930686][T27604] ? _raw_spin_unlock_irq+0x4e/0x70 [ 2080.935890][T27604] try_charge+0xf61/0x14e0 [ 2080.940402][T27604] ? __memcg_kmem_charge+0x140/0x140 [ 2080.945721][T27604] ? percpu_counter_add_batch+0x13c/0x160 [ 2080.951471][T27604] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 2080.957018][T27604] __mem_cgroup_charge+0x14c/0x6d0 [ 2080.962134][T27604] shmem_add_to_page_cache+0x55e/0xe10 [ 2080.967603][T27604] ? shmem_alloc_page+0x300/0x300 [ 2080.972626][T27604] ? _raw_spin_lock_irqsave+0x110/0x110 [ 2080.978212][T27604] ? find_lock_entry+0x4b/0x200 [ 2080.983062][T27604] ? lru_cache_add+0x164/0x380 [ 2080.987827][T27604] ? shmem_getpage_gfp+0x8f3/0x2110 [ 2080.993024][T27604] shmem_getpage_gfp+0x8e8/0x2110 [ 2080.998069][T27604] shmem_write_begin+0xce/0x1b0 [ 2081.002917][T27604] generic_perform_write+0x2be/0x510 [ 2081.008247][T27604] ? atime_needs_update+0x5b0/0x5b0 [ 2081.013537][T27604] ? grab_cache_page_write_begin+0xb0/0xb0 [ 2081.019362][T27604] ? file_remove_privs+0x580/0x580 [ 2081.024474][T27604] ? __kasan_check_write+0x14/0x20 [ 2081.029594][T27604] ? down_write+0xac/0x110 [ 2081.034039][T27604] __generic_file_write_iter+0x24b/0x480 [ 2081.040326][T27604] ? generic_write_checks+0x3d4/0x480 [ 2081.045711][T27604] generic_file_write_iter+0xa9/0x1d0 [ 2081.051084][T27604] __kernel_write+0x55a/0x910 [ 2081.055769][T27604] ? vfs_read+0xa10/0xa10 [ 2081.060128][T27604] ? sysvec_apic_timer_interrupt+0xcb/0xe0 [ 2081.065943][T27604] ? populate_vma_page_range+0xf0/0xf0 [ 2081.071403][T27604] ? __kasan_check_write+0x14/0x20 [ 2081.076535][T27604] ? get_dump_page+0x46b/0x5b0 [ 2081.081308][T27604] dump_emit+0x240/0x360 [ 2081.085554][T27604] ? wait_for_dump_helpers+0x390/0x390 [ 2081.091138][T27604] dump_user_range+0x6a/0x1a0 [ 2081.095844][T27604] elf_core_dump+0x278a/0x2bc0 [ 2081.100624][T27604] ? load_elf_binary+0x2890/0x2890 [ 2081.105895][T27604] ? kvmalloc_node+0x88/0x130 [ 2081.110599][T27604] ? _raw_spin_unlock+0x4d/0x70 [ 2081.115460][T27604] ? __kasan_check_write+0x14/0x20 [ 2081.120601][T27604] ? put_files_struct+0x23b/0x330 [ 2081.125648][T27604] do_coredump+0x1ac9/0x27f0 [ 2081.130380][T27604] ? simple_acl_create+0x1c0/0x1c0 [ 2081.135493][T27604] ? debug_smp_processor_id+0x17/0x20 [ 2081.140867][T27604] ? kmem_cache_free+0x100/0x2d0 [ 2081.145827][T27604] ? ____kasan_slab_free+0x130/0x160 [ 2081.151147][T27604] ? get_signal+0xb98/0x12e0 [ 2081.155746][T27604] ? kmem_cache_free+0x100/0x2d0 [ 2081.160686][T27604] get_signal+0xf23/0x12e0 [ 2081.165122][T27604] ? asm_exc_invalid_op+0xa/0x20 [ 2081.170162][T27604] arch_do_signal_or_restart+0xbf/0x10f0 [ 2081.176201][T27604] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 2081.182534][T27604] ? force_sig_info_to_task+0x26d/0x2e0 [ 2081.188084][T27604] ? __ia32_sys_rt_sigreturn+0x6c0/0x6c0 [ 2081.193716][T27604] ? force_sig_fault_to_task+0x110/0x110 [ 2081.199353][T27604] ? do_trap+0x117/0x2f0 [ 2081.203597][T27604] ? asm_exc_invalid_op+0xa/0x20 [ 2081.208538][T27604] exit_to_user_mode_loop+0xa2/0xe0 [ 2081.213736][T27604] exit_to_user_mode_prepare+0x76/0xa0 [ 2081.219203][T27604] irqentry_exit_to_user_mode+0x9/0x10 [ 2081.224665][T27604] irqentry_exit+0x12/0x60 [ 2081.229078][T27604] exc_invalid_op+0x3e/0x50 [ 2081.233604][T27604] asm_exc_invalid_op+0x12/0x20 [ 2081.238450][T27604] RIP: 0033:0x200000000006 [ 2081.242872][T27604] Code: Unable to access opcode bytes at RIP 0x1fffffffffdc. [ 2081.250236][T27604] RSP: 002b:00007f076f633a78 EFLAGS: 00010202 [ 2081.256316][T27604] RAX: 00000000000000db RBX: 00007f0770e22fa0 RCX: 00007f0770bcc6c9 [ 2081.264290][T27604] RDX: 00007f076f633a80 RSI: 00007f076f633bb0 RDI: 000000000000000d [ 2081.272269][T27604] RBP: 00007f0770c4ef91 R08: 0000000000000000 R09: 0000000000000000 [ 2081.280237][T27604] R10: 0000000000000805 R11: 0000000000000246 R12: 0000000000000000 [ 2081.288205][T27604] R13: 00007f0770e23038 R14: 00007f0770e22fa0 R15: 00007fff3303b148 [ 2081.322841][T27604] memory: usage 307200kB, limit 307200kB, failcnt 9311 [ 2081.331108][T27604] memory+swap: usage 383940kB, limit 9007199254740988kB, failcnt 0 [ 2081.339264][T27604] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2081.350359][T27604] Memory cgroup stats for /syz0: [ 2081.350510][T27604] anon 888832 [ 2081.350510][T27604] file 312102912 [ 2081.350510][T27604] kernel_stack 0 [ 2081.350510][T27604] percpu 0 [ 2081.350510][T27604] sock 0 [ 2081.350510][T27604] shmem 312102912 [ 2081.350510][T27604] file_mapped 0 [ 2081.350510][T27604] file_dirty 0 [ 2081.350510][T27604] file_writeback 0 [ 2081.350510][T27604] anon_thp 0 [ 2081.350510][T27604] inactive_anon 314208256 [ 2081.350510][T27604] active_anon 135168 [ 2081.350510][T27604] inactive_file 163840 [ 2081.350510][T27604] active_file 0 [ 2081.350510][T27604] unevictable 0 [ 2081.350510][T27604] slab_reclaimable 0 [ 2081.350510][T27604] slab_unreclaimable 0 [ 2081.350510][T27604] slab 0 [ 2081.350510][T27604] workingset_refault_anon 0 [ 2081.350510][T27604] workingset_refault_file 0 [ 2081.350510][T27604] workingset_activate_anon 0 [ 2081.350510][T27604] workingset_activate_file 0 [ 2081.350510][T27604] workingset_restore_anon 0 [ 2081.350510][T27604] workingset_restore_file 0 [ 2081.453521][T27604] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.42858,pid=27603,uid=0 [ 2081.484572][T27604] Memory cgroup out of memory: Killed process 27603 (syz.0.42858) total-vm:93812kB, anon-rss:1304kB, file-rss:60384kB, shmem-rss:4kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 2081.526023][ T27] oom_reaper: reaped process 27603 (syz.0.42858), now anon-rss:0kB, file-rss:59252kB, shmem-rss:4kB [ 2081.785736][T27635] overlayfs: missing 'lowerdir' [ 2082.764023][T27659] syz.0.42884 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2082.784519][T27659] CPU: 1 PID: 27659 Comm: syz.0.42884 Not tainted syzkaller #0 [ 2082.792141][T27659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2082.802313][T27659] Call Trace: [ 2082.805629][T27659] __dump_stack+0x21/0x24 [ 2082.810079][T27659] dump_stack_lvl+0x169/0x1d8 [ 2082.814778][T27659] ? show_regs_print_info+0x18/0x18 [ 2082.819997][T27659] ? ___ratelimit+0x3d1/0x560 [ 2082.824706][T27659] ? _raw_spin_lock+0x8e/0xe0 [ 2082.829400][T27659] dump_stack+0x15/0x1c [ 2082.833571][T27659] dump_header+0xdd/0x650 [ 2082.837926][T27659] oom_kill_process+0x1fa/0x2c0 [ 2082.842794][T27659] out_of_memory+0x94a/0xd70 [ 2082.847413][T27659] ? unregister_oom_notifier+0x20/0x20 [ 2082.853127][T27659] ? mutex_lock_killable+0x8c/0xe0 [ 2082.858258][T27659] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 2082.865135][T27659] mem_cgroup_out_of_memory+0x260/0x310 [ 2082.870701][T27659] ? mem_cgroup_oom_trylock+0x350/0x350 [ 2082.876353][T27659] ? _raw_spin_lock+0x8e/0xe0 [ 2082.881148][T27659] ? _raw_spin_trylock_bh+0x130/0x130 [ 2082.886553][T27659] ? _raw_spin_unlock+0x4d/0x70 [ 2082.891428][T27659] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 2082.896998][T27659] ? _raw_spin_unlock_irq+0x4e/0x70 [ 2082.902302][T27659] try_charge+0xf61/0x14e0 [ 2082.906751][T27659] ? __memcg_kmem_charge+0x140/0x140 [ 2082.912064][T27659] ? percpu_counter_add_batch+0x13c/0x160 [ 2082.917829][T27659] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 2082.923389][T27659] __mem_cgroup_charge+0x14c/0x6d0 [ 2082.928794][T27659] shmem_add_to_page_cache+0x55e/0xe10 [ 2082.934281][T27659] ? shmem_alloc_page+0x300/0x300 [ 2082.939332][T27659] ? _raw_spin_lock_irqsave+0x110/0x110 [ 2082.944904][T27659] ? find_lock_entry+0x4b/0x200 [ 2082.949767][T27659] ? lru_cache_add+0x164/0x380 [ 2082.954542][T27659] ? shmem_getpage_gfp+0x8f3/0x2110 [ 2082.959761][T27659] shmem_getpage_gfp+0x8e8/0x2110 [ 2082.964826][T27659] shmem_write_begin+0xce/0x1b0 [ 2082.969801][T27659] generic_perform_write+0x2be/0x510 [ 2082.975120][T27659] ? atime_needs_update+0x5b0/0x5b0 [ 2082.980343][T27659] ? grab_cache_page_write_begin+0xb0/0xb0 [ 2082.986167][T27659] ? file_remove_privs+0x580/0x580 [ 2082.991326][T27659] ? __kasan_check_write+0x14/0x20 [ 2082.996458][T27659] ? down_write+0xac/0x110 [ 2083.000901][T27659] __generic_file_write_iter+0x24b/0x480 [ 2083.006556][T27659] ? generic_write_checks+0x3d4/0x480 [ 2083.011945][T27659] generic_file_write_iter+0xa9/0x1d0 [ 2083.017339][T27659] __kernel_write+0x55a/0x910 [ 2083.022119][T27659] ? vfs_read+0xa10/0xa10 [ 2083.026471][T27659] ? populate_vma_page_range+0xf0/0xf0 [ 2083.031961][T27659] ? __kasan_check_write+0x14/0x20 [ 2083.037189][T27659] ? get_dump_page+0x46b/0x5b0 [ 2083.041982][T27659] dump_emit+0x240/0x360 [ 2083.046247][T27659] ? wait_for_dump_helpers+0x390/0x390 [ 2083.051808][T27659] dump_user_range+0x6a/0x1a0 [ 2083.056501][T27659] elf_core_dump+0x278a/0x2bc0 [ 2083.061333][T27659] ? load_elf_binary+0x2890/0x2890 [ 2083.066654][T27659] ? kvmalloc_node+0x88/0x130 [ 2083.071370][T27659] ? _raw_spin_unlock+0x4d/0x70 [ 2083.076342][T27659] ? __kasan_check_write+0x14/0x20 [ 2083.081462][T27659] ? put_files_struct+0x23b/0x330 [ 2083.086623][T27659] do_coredump+0x1ac9/0x27f0 [ 2083.091257][T27659] ? simple_acl_create+0x1c0/0x1c0 [ 2083.096398][T27659] ? debug_smp_processor_id+0x17/0x20 [ 2083.101815][T27659] ? kmem_cache_free+0x100/0x2d0 [ 2083.106807][T27659] ? ____kasan_slab_free+0x130/0x160 [ 2083.112126][T27659] ? get_signal+0xb98/0x12e0 [ 2083.116737][T27659] ? kmem_cache_free+0x100/0x2d0 [ 2083.121707][T27659] get_signal+0xf23/0x12e0 [ 2083.126158][T27659] ? asm_exc_invalid_op+0xa/0x20 [ 2083.131269][T27659] arch_do_signal_or_restart+0xbf/0x10f0 [ 2083.136924][T27659] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 2083.142753][T27659] ? force_sig_info_to_task+0x26d/0x2e0 [ 2083.148329][T27659] ? __ia32_sys_rt_sigreturn+0x6c0/0x6c0 [ 2083.154205][T27659] ? force_sig_fault_to_task+0x110/0x110 [ 2083.160042][T27659] ? do_trap+0x117/0x2f0 [ 2083.164393][T27659] ? asm_exc_invalid_op+0xa/0x20 [ 2083.169348][T27659] exit_to_user_mode_loop+0xa2/0xe0 [ 2083.174563][T27659] exit_to_user_mode_prepare+0x76/0xa0 [ 2083.180149][T27659] irqentry_exit_to_user_mode+0x9/0x10 [ 2083.185639][T27659] irqentry_exit+0x12/0x60 [ 2083.190071][T27659] exc_invalid_op+0x3e/0x50 [ 2083.194597][T27659] asm_exc_invalid_op+0x12/0x20 [ 2083.199464][T27659] RIP: 0033:0x200000000000 [ 2083.204219][T27659] Code: Unable to access opcode bytes at RIP 0x1fffffffffd6. [ 2083.211618][T27659] RSP: 002b:00007f076f633a78 EFLAGS: 00010246 [ 2083.217720][T27659] RAX: 0000000000000000 RBX: 00007f0770e22fa0 RCX: 00007f0770bcc6c9 [ 2083.225717][T27659] RDX: 00007f076f633a80 RSI: 00007f076f633bb0 RDI: 000000000000000d [ 2083.233829][T27659] RBP: 00007f0770c4ef91 R08: 0000000000000000 R09: 0000000000000000 [ 2083.241820][T27659] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 2083.249890][T27659] R13: 00007f0770e23038 R14: 00007f0770e22fa0 R15: 00007fff3303b148 [ 2083.297035][T27659] memory: usage 307200kB, limit 307200kB, failcnt 9334 [ 2083.304488][T27659] memory+swap: usage 383940kB, limit 9007199254740988kB, failcnt 0 [ 2083.312594][T27659] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2083.334529][T27659] Memory cgroup stats for /syz0: [ 2083.334750][T27659] anon 753664 [ 2083.334750][T27659] file 312102912 [ 2083.334750][T27659] kernel_stack 0 [ 2083.334750][T27659] percpu 0 [ 2083.334750][T27659] sock 0 [ 2083.334750][T27659] shmem 312238080 [ 2083.334750][T27659] file_mapped 0 [ 2083.334750][T27659] file_dirty 0 [ 2083.334750][T27659] file_writeback 0 [ 2083.334750][T27659] anon_thp 0 [ 2083.334750][T27659] inactive_anon 314208256 [ 2083.334750][T27659] active_anon 135168 [ 2083.334750][T27659] inactive_file 163840 [ 2083.334750][T27659] active_file 0 [ 2083.334750][T27659] unevictable 0 [ 2083.334750][T27659] slab_reclaimable 0 [ 2083.334750][T27659] slab_unreclaimable 0 [ 2083.334750][T27659] slab 0 [ 2083.334750][T27659] workingset_refault_anon 0 [ 2083.334750][T27659] workingset_refault_file 0 [ 2083.334750][T27659] workingset_activate_anon 0 [ 2083.334750][T27659] workingset_activate_file 0 [ 2083.334750][T27659] workingset_restore_anon 0 [ 2083.334750][T27659] workingset_restore_file 0 [ 2083.566042][T27659] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.42884,pid=27658,uid=0 [ 2083.604357][T27659] Memory cgroup out of memory: Killed process 27658 (syz.0.42884) total-vm:93812kB, anon-rss:1308kB, file-rss:60320kB, shmem-rss:4kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 2083.648079][ T27] oom_reaper: reaped process 27658 (syz.0.42884), now anon-rss:0kB, file-rss:59188kB, shmem-rss:4kB [ 2084.145638][T27699] overlayfs: unrecognized mount option "verity=require:/" or missing value [ 2084.558687][T27717] overlayfs: unrecognized mount option "verity=require:/" or missing value [ 2084.609587][ T24] audit: type=1326 audit(1930993904.387:6216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27718 comm="syz.3.42916" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb21c82e6c9 code=0x0 [ 2084.821227][T27695] syz.0.42902 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2084.841404][T27695] CPU: 1 PID: 27695 Comm: syz.0.42902 Not tainted syzkaller #0 [ 2084.849176][T27695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2084.859973][T27695] Call Trace: [ 2084.863287][T27695] __dump_stack+0x21/0x24 [ 2084.867647][T27695] dump_stack_lvl+0x169/0x1d8 [ 2084.872457][T27695] ? show_regs_print_info+0x18/0x18 [ 2084.877763][T27695] ? ___ratelimit+0x3d1/0x560 [ 2084.882459][T27695] ? __kasan_check_write+0x14/0x20 [ 2084.887674][T27695] ? _raw_spin_lock+0x8e/0xe0 [ 2084.892453][T27695] dump_stack+0x15/0x1c [ 2084.896632][T27695] dump_header+0xdd/0x650 [ 2084.901030][T27695] oom_kill_process+0x1fa/0x2c0 [ 2084.905901][T27695] out_of_memory+0x94a/0xd70 [ 2084.910513][T27695] ? unregister_oom_notifier+0x20/0x20 [ 2084.916030][T27695] ? mutex_lock_killable+0x8c/0xe0 [ 2084.921245][T27695] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 2084.927770][T27695] mem_cgroup_out_of_memory+0x260/0x310 [ 2084.933333][T27695] ? mem_cgroup_oom_trylock+0x350/0x350 [ 2084.938895][T27695] ? _raw_spin_lock+0x8e/0xe0 [ 2084.943591][T27695] ? _raw_spin_trylock_bh+0x130/0x130 [ 2084.948987][T27695] ? _raw_spin_unlock+0x4d/0x70 [ 2084.953868][T27695] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 2084.959440][T27695] ? _raw_spin_unlock_irq+0x4e/0x70 [ 2084.964667][T27695] try_charge+0xf61/0x14e0 [ 2084.969128][T27695] ? __memcg_kmem_charge+0x140/0x140 [ 2084.974448][T27695] ? percpu_counter_add_batch+0x13c/0x160 [ 2084.980211][T27695] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 2084.985792][T27695] __mem_cgroup_charge+0x14c/0x6d0 [ 2084.990935][T27695] shmem_add_to_page_cache+0x55e/0xe10 [ 2084.996617][T27695] ? shmem_alloc_page+0x300/0x300 [ 2085.001678][T27695] ? _raw_spin_lock_irqsave+0x110/0x110 [ 2085.007257][T27695] ? find_lock_entry+0x4b/0x200 [ 2085.012139][T27695] ? lru_cache_add+0x164/0x380 [ 2085.016934][T27695] ? shmem_getpage_gfp+0x8f3/0x2110 [ 2085.022160][T27695] shmem_getpage_gfp+0x8e8/0x2110 [ 2085.027224][T27695] shmem_write_begin+0xce/0x1b0 [ 2085.032114][T27695] generic_perform_write+0x2be/0x510 [ 2085.037437][T27695] ? atime_needs_update+0x5b0/0x5b0 [ 2085.042670][T27695] ? grab_cache_page_write_begin+0xb0/0xb0 [ 2085.043447][T27743] netlink: 7776 bytes leftover after parsing attributes in process `syz.8.42927'. [ 2085.048496][T27695] ? file_remove_privs+0x580/0x580 [ 2085.048511][T27695] ? __kasan_check_write+0x14/0x20 [ 2085.048524][T27695] ? down_write+0xac/0x110 [ 2085.048541][T27695] __generic_file_write_iter+0x24b/0x480 [ 2085.048563][T27695] ? generic_write_checks+0x3d4/0x480 [ 2085.083539][T27695] generic_file_write_iter+0xa9/0x1d0 [ 2085.088952][T27695] __kernel_write+0x55a/0x910 [ 2085.093660][T27695] ? vfs_read+0xa10/0xa10 [ 2085.098024][T27695] ? populate_vma_page_range+0xf0/0xf0 [ 2085.103527][T27695] ? __kasan_check_write+0x14/0x20 [ 2085.108791][T27695] ? get_dump_page+0x46b/0x5b0 [ 2085.113601][T27695] dump_emit+0x240/0x360 [ 2085.117875][T27695] ? wait_for_dump_helpers+0x390/0x390 [ 2085.123366][T27695] dump_user_range+0x6a/0x1a0 [ 2085.128081][T27695] elf_core_dump+0x278a/0x2bc0 [ 2085.132882][T27695] ? load_elf_binary+0x2890/0x2890 [ 2085.138033][T27695] ? kvmalloc_node+0x88/0x130 [ 2085.142761][T27695] ? _raw_spin_unlock+0x4d/0x70 [ 2085.147641][T27695] ? __kasan_check_write+0x14/0x20 [ 2085.152773][T27695] ? put_files_struct+0x23b/0x330 [ 2085.157824][T27695] do_coredump+0x1ac9/0x27f0 [ 2085.162455][T27695] ? simple_acl_create+0x1c0/0x1c0 [ 2085.167597][T27695] ? debug_smp_processor_id+0x17/0x20 [ 2085.173008][T27695] ? kmem_cache_free+0x100/0x2d0 [ 2085.177975][T27695] ? ____kasan_slab_free+0x130/0x160 [ 2085.183295][T27695] ? get_signal+0xb98/0x12e0 [ 2085.187908][T27695] ? kmem_cache_free+0x100/0x2d0 [ 2085.192874][T27695] get_signal+0xf23/0x12e0 [ 2085.197327][T27695] ? asm_exc_invalid_op+0xa/0x20 [ 2085.202290][T27695] arch_do_signal_or_restart+0xbf/0x10f0 [ 2085.207956][T27695] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 2085.214133][T27695] ? force_sig_info_to_task+0x26d/0x2e0 [ 2085.219717][T27695] ? __ia32_sys_rt_sigreturn+0x6c0/0x6c0 [ 2085.225393][T27695] ? force_sig_fault_to_task+0x110/0x110 [ 2085.231071][T27695] ? do_trap+0x117/0x2f0 [ 2085.235345][T27695] ? asm_exc_invalid_op+0xa/0x20 [ 2085.240314][T27695] exit_to_user_mode_loop+0xa2/0xe0 [ 2085.245565][T27695] exit_to_user_mode_prepare+0x76/0xa0 [ 2085.251058][T27695] irqentry_exit_to_user_mode+0x9/0x10 [ 2085.256730][T27695] irqentry_exit+0x12/0x60 [ 2085.261175][T27695] exc_invalid_op+0x3e/0x50 [ 2085.265705][T27695] asm_exc_invalid_op+0x12/0x20 [ 2085.270576][T27695] RIP: 0033:0x200000000000 [ 2085.275028][T27695] Code: Unable to access opcode bytes at RIP 0x1fffffffffd6. [ 2085.282417][T27695] RSP: 002b:00007f076f633a78 EFLAGS: 00010246 [ 2085.288517][T27695] RAX: 0000000000000000 RBX: 00007f0770e22fa0 RCX: 00007f0770bcc6c9 [ 2085.296516][T27695] RDX: 00007f076f633a80 RSI: 00007f076f633bb0 RDI: 000000000000000d [ 2085.304510][T27695] RBP: 00007f0770c4ef91 R08: 0000000000000000 R09: 0000000000000000 [ 2085.312508][T27695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2085.320507][T27695] R13: 00007f0770e23038 R14: 00007f0770e22fa0 R15: 00007fff3303b148 [ 2085.339657][T27695] memory: usage 307200kB, limit 307200kB, failcnt 9380 [ 2085.346743][T27695] memory+swap: usage 383940kB, limit 9007199254740988kB, failcnt 0 [ 2085.356417][T27695] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2085.364096][T27695] Memory cgroup stats for /syz0: [ 2085.372035][T27695] anon 753664 [ 2085.372035][T27695] file 312102912 [ 2085.372035][T27695] kernel_stack 0 [ 2085.372035][T27695] percpu 0 [ 2085.372035][T27695] sock 0 [ 2085.372035][T27695] shmem 312238080 [ 2085.372035][T27695] file_mapped 0 [ 2085.372035][T27695] file_dirty 0 [ 2085.372035][T27695] file_writeback 0 [ 2085.372035][T27695] anon_thp 0 [ 2085.372035][T27695] inactive_anon 314208256 [ 2085.372035][T27695] active_anon 135168 [ 2085.372035][T27695] inactive_file 163840 [ 2085.372035][T27695] active_file 0 [ 2085.372035][T27695] unevictable 0 [ 2085.372035][T27695] slab_reclaimable 0 [ 2085.372035][T27695] slab_unreclaimable 0 [ 2085.372035][T27695] slab 0 [ 2085.372035][T27695] workingset_refault_anon 0 [ 2085.372035][T27695] workingset_refault_file 0 [ 2085.372035][T27695] workingset_activate_anon 0 [ 2085.372035][T27695] workingset_activate_file 0 [ 2085.372035][T27695] workingset_restore_anon 0 [ 2085.372035][T27695] workingset_restore_file 0 [ 2085.467739][T27695] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.42902,pid=27694,uid=0 [ 2085.484524][T27695] Memory cgroup out of memory: Killed process 27694 (syz.0.42902) total-vm:93812kB, anon-rss:1308kB, file-rss:60320kB, shmem-rss:4kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 2085.503438][ T27] oom_reaper: reaped process 27694 (syz.0.42902), now anon-rss:0kB, file-rss:61440kB, shmem-rss:4kB [ 2085.655709][T27781] input: syz1 as /devices/virtual/input/input10 [ 2085.692414][ T24] audit: type=1400 audit(1930993905.467:6217): avc: denied { read } for pid=80 comm="acpid" name="event3" dev="devtmpfs" ino=10065 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2085.723648][ T24] audit: type=1400 audit(1930993905.467:6218): avc: denied { open } for pid=80 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=10065 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2085.784537][ T24] audit: type=1400 audit(1930993905.467:6219): avc: denied { ioctl } for pid=80 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=10065 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2085.986644][ T24] audit: type=1326 audit(1930993905.767:6220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27810 comm="syz.3.42960" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb21c82e6c9 code=0x0 [ 2086.024813][T18602] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 2086.085908][T27817] input: syz1 as /devices/virtual/input/input11 [ 2086.274296][T18602] usb 10-1: Using ep0 maxpacket: 16 [ 2086.281597][ T24] audit: type=1326 audit(1930993906.057:6221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27836 comm="syz.0.42973" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0770bcc6c9 code=0x0 [ 2086.404431][T18602] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 2086.422844][T18602] usb 10-1: config 0 has no interface number 0 [ 2086.442300][T18602] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2086.472723][T18602] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2086.503382][T18602] usb 10-1: config 0 interface 41 has no altsetting 0 [ 2086.674626][T18602] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2086.693982][T18602] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2086.722007][T18602] usb 10-1: Product: syz [ 2086.726510][T18602] usb 10-1: Manufacturer: syz [ 2086.731214][T18602] usb 10-1: SerialNumber: syz [ 2086.757196][T18602] usb 10-1: config 0 descriptor?? [ 2086.774352][T27791] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2086.804381][T27791] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2086.865772][ T24] audit: type=1326 audit(1930993906.647:6222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27856 comm="syz.0.42984" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0770bcc6c9 code=0x0 [ 2086.896779][T27859] input: syz1 as /devices/virtual/input/input12 [ 2086.981009][T27863] overlayfs: unrecognized mount option "verity=require:/" or missing value [ 2087.020191][T27791] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2087.038126][T27791] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2087.138128][T27877] overlayfs: missing 'lowerdir' [ 2087.227112][T27884] input: syz1 as /devices/virtual/input/input13 [ 2087.246210][T27886] netlink: 20 bytes leftover after parsing attributes in process `syz.3.42998'. [ 2087.304340][T18602] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 2087.314073][T18602] CoreChips: probe of 10-1:0.41 failed with error -71 [ 2087.341171][T18602] usb 10-1: USB disconnect, device number 56 [ 2087.473586][T27904] overlayfs: missing 'lowerdir' [ 2087.576465][T27914] netlink: 20 bytes leftover after parsing attributes in process `syz.3.43011'. [ 2087.871236][T27890] syz.0.43000 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2087.890023][T27890] CPU: 1 PID: 27890 Comm: syz.0.43000 Not tainted syzkaller #0 [ 2087.897628][T27890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2087.907718][T27890] Call Trace: [ 2087.911029][T27890] __dump_stack+0x21/0x24 [ 2087.915379][T27890] dump_stack_lvl+0x169/0x1d8 [ 2087.920094][T27890] ? show_regs_print_info+0x18/0x18 [ 2087.925319][T27890] ? ___ratelimit+0x3d1/0x560 [ 2087.930014][T27890] ? _raw_spin_lock+0x8e/0xe0 [ 2087.934724][T27890] dump_stack+0x15/0x1c [ 2087.938905][T27890] dump_header+0xdd/0x650 [ 2087.943271][T27890] oom_kill_process+0x1fa/0x2c0 [ 2087.948152][T27890] out_of_memory+0x94a/0xd70 [ 2087.952783][T27890] ? unregister_oom_notifier+0x20/0x20 [ 2087.958280][T27890] ? mutex_lock_killable+0x8c/0xe0 [ 2087.963426][T27890] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 2087.970054][T27890] mem_cgroup_out_of_memory+0x260/0x310 [ 2087.975636][T27890] ? mem_cgroup_oom_trylock+0x350/0x350 [ 2087.981214][T27890] ? _raw_spin_lock+0x8e/0xe0 [ 2087.985930][T27890] ? _raw_spin_trylock_bh+0x130/0x130 [ 2087.991319][T27890] ? _raw_spin_unlock+0x4d/0x70 [ 2087.996188][T27890] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 2088.001760][T27890] ? _raw_spin_unlock_irq+0x4e/0x70 [ 2088.007019][T27890] try_charge+0xf61/0x14e0 [ 2088.011463][T27890] ? __memcg_kmem_charge+0x140/0x140 [ 2088.016888][T27890] ? percpu_counter_add_batch+0x13c/0x160 [ 2088.022651][T27890] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 2088.028230][T27890] __mem_cgroup_charge+0x14c/0x6d0 [ 2088.033377][T27890] shmem_add_to_page_cache+0x55e/0xe10 [ 2088.038865][T27890] ? shmem_alloc_page+0x300/0x300 [ 2088.044007][T27890] ? _raw_spin_lock_irqsave+0x110/0x110 [ 2088.049592][T27890] ? find_lock_entry+0x4b/0x200 [ 2088.054461][T27890] ? lru_cache_add+0x164/0x380 [ 2088.059246][T27890] ? shmem_getpage_gfp+0x8f3/0x2110 [ 2088.064474][T27890] shmem_getpage_gfp+0x8e8/0x2110 [ 2088.069530][T27890] shmem_write_begin+0xce/0x1b0 [ 2088.074405][T27890] generic_perform_write+0x2be/0x510 [ 2088.079715][T27890] ? atime_needs_update+0x5b0/0x5b0 [ 2088.084944][T27890] ? grab_cache_page_write_begin+0xb0/0xb0 [ 2088.090773][T27890] ? file_remove_privs+0x580/0x580 [ 2088.095907][T27890] ? __kasan_check_write+0x14/0x20 [ 2088.101043][T27890] ? down_write+0xac/0x110 [ 2088.105485][T27890] __generic_file_write_iter+0x24b/0x480 [ 2088.111129][T27890] ? generic_write_checks+0x3d4/0x480 [ 2088.116527][T27890] generic_file_write_iter+0xa9/0x1d0 [ 2088.121933][T27890] __kernel_write+0x55a/0x910 [ 2088.126637][T27890] ? vfs_read+0xa10/0xa10 [ 2088.130987][T27890] ? populate_vma_page_range+0xf0/0xf0 [ 2088.136468][T27890] ? __kasan_check_write+0x14/0x20 [ 2088.141604][T27890] ? get_dump_page+0x46b/0x5b0 [ 2088.146392][T27890] dump_emit+0x240/0x360 [ 2088.150653][T27890] ? wait_for_dump_helpers+0x390/0x390 [ 2088.156136][T27890] dump_user_range+0x6a/0x1a0 [ 2088.160842][T27890] elf_core_dump+0x278a/0x2bc0 [ 2088.165642][T27890] ? load_elf_binary+0x2890/0x2890 [ 2088.170780][T27890] ? kvmalloc_node+0x88/0x130 [ 2088.175495][T27890] ? _raw_spin_unlock+0x4d/0x70 [ 2088.180384][T27890] ? __kasan_check_write+0x14/0x20 [ 2088.185533][T27890] ? put_files_struct+0x23b/0x330 [ 2088.190603][T27890] do_coredump+0x1ac9/0x27f0 [ 2088.195232][T27890] ? simple_acl_create+0x1c0/0x1c0 [ 2088.200379][T27890] ? debug_smp_processor_id+0x17/0x20 [ 2088.205787][T27890] ? kmem_cache_free+0x100/0x2d0 [ 2088.210751][T27890] ? ____kasan_slab_free+0x130/0x160 [ 2088.216152][T27890] ? get_signal+0xb98/0x12e0 [ 2088.220769][T27890] ? kmem_cache_free+0x100/0x2d0 [ 2088.225732][T27890] get_signal+0xf23/0x12e0 [ 2088.230173][T27890] ? asm_exc_invalid_op+0xa/0x20 [ 2088.235124][T27890] arch_do_signal_or_restart+0xbf/0x10f0 [ 2088.240774][T27890] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 2088.246604][T27890] ? force_sig_info_to_task+0x26d/0x2e0 [ 2088.252181][T27890] ? __ia32_sys_rt_sigreturn+0x6c0/0x6c0 [ 2088.257853][T27890] ? force_sig_fault_to_task+0x110/0x110 [ 2088.263517][T27890] ? do_trap+0x117/0x2f0 [ 2088.267781][T27890] ? asm_exc_invalid_op+0xa/0x20 [ 2088.270239][T27938] input: syz1 as /devices/virtual/input/input14 [ 2088.272867][T27890] exit_to_user_mode_loop+0xa2/0xe0 [ 2088.284310][T27890] exit_to_user_mode_prepare+0x76/0xa0 [ 2088.289801][T27890] irqentry_exit_to_user_mode+0x9/0x10 [ 2088.295287][T27890] irqentry_exit+0x12/0x60 [ 2088.299735][T27890] exc_invalid_op+0x3e/0x50 [ 2088.304266][T27890] asm_exc_invalid_op+0x12/0x20 [ 2088.309135][T27890] RIP: 0033:0x200000000000 [ 2088.313568][T27890] Code: Unable to access opcode bytes at RIP 0x1fffffffffd6. [ 2088.320946][T27890] RSP: 002b:00007f076f633a78 EFLAGS: 00010246 [ 2088.327036][T27890] RAX: 0000000000000000 RBX: 00007f0770e22fa0 RCX: 00007f0770bcc6c9 [ 2088.335044][T27890] RDX: 00007f076f633a80 RSI: 00007f076f633bb0 RDI: 000000000000000d [ 2088.343046][T27890] RBP: 00007f0770c4ef91 R08: 0000000000000000 R09: 0000000000000000 [ 2088.351048][T27890] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 2088.359145][T27890] R13: 00007f0770e23038 R14: 00007f0770e22fa0 R15: 00007fff3303b148 [ 2088.368815][T27934] netlink: 20 bytes leftover after parsing attributes in process `syz.9.43022'. [ 2088.378440][T27890] memory: usage 307200kB, limit 307200kB, failcnt 9421 [ 2088.389852][T27890] memory+swap: usage 383940kB, limit 9007199254740988kB, failcnt 0 [ 2088.399073][T27890] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2088.414325][T27890] Memory cgroup stats for /syz0: [ 2088.414466][T27890] anon 888832 [ 2088.414466][T27890] file 312238080 [ 2088.414466][T27890] kernel_stack 0 [ 2088.414466][T27890] percpu 0 [ 2088.414466][T27890] sock 0 [ 2088.414466][T27890] shmem 312238080 [ 2088.414466][T27890] file_mapped 0 [ 2088.414466][T27890] file_dirty 0 [ 2088.414466][T27890] file_writeback 0 [ 2088.414466][T27890] anon_thp 0 [ 2088.414466][T27890] inactive_anon 314343424 [ 2088.414466][T27890] active_anon 135168 [ 2088.414466][T27890] inactive_file 28672 [ 2088.414466][T27890] active_file 0 [ 2088.414466][T27890] unevictable 0 [ 2088.414466][T27890] slab_reclaimable 0 [ 2088.414466][T27890] slab_unreclaimable 0 [ 2088.414466][T27890] slab 0 [ 2088.414466][T27890] workingset_refault_anon 0 [ 2088.414466][T27890] workingset_refault_file 0 [ 2088.414466][T27890] workingset_activate_anon 0 [ 2088.414466][T27890] workingset_activate_file 0 [ 2088.414466][T27890] workingset_restore_anon 0 [ 2088.414466][T27890] workingset_restore_file 0 [ 2088.523308][T27890] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.43000,pid=27889,uid=0 [ 2088.540793][T27890] Memory cgroup out of memory: Killed process 27889 (syz.0.43000) total-vm:93812kB, anon-rss:1308kB, file-rss:60256kB, shmem-rss:4kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 2088.571777][ T27] oom_reaper: reaped process 27889 (syz.0.43000), now anon-rss:0kB, file-rss:61440kB, shmem-rss:4kB [ 2088.914070][T27969] netlink: 20 bytes leftover after parsing attributes in process `syz.8.43039'. [ 2090.220586][ T24] audit: type=1326 audit(1930993909.997:6223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28006 comm="syz.8.43057" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06b17a56c9 code=0x0 [ 2090.635553][T28001] syz.0.43055 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2090.655691][T28001] CPU: 0 PID: 28001 Comm: syz.0.43055 Not tainted syzkaller #0 [ 2090.663287][T28001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2090.673367][T28001] Call Trace: [ 2090.676686][T28001] __dump_stack+0x21/0x24 [ 2090.681039][T28001] dump_stack_lvl+0x169/0x1d8 [ 2090.685846][T28001] ? show_regs_print_info+0x18/0x18 [ 2090.691077][T28001] ? ___ratelimit+0x3d1/0x560 [ 2090.695780][T28001] ? __kasan_check_write+0x14/0x20 [ 2090.700911][T28001] ? _raw_spin_lock+0x8e/0xe0 [ 2090.705614][T28001] dump_stack+0x15/0x1c [ 2090.709792][T28001] dump_header+0xdd/0x650 [ 2090.714148][T28001] oom_kill_process+0x1fa/0x2c0 [ 2090.719114][T28001] out_of_memory+0x94a/0xd70 [ 2090.723731][T28001] ? unregister_oom_notifier+0x20/0x20 [ 2090.729230][T28001] ? mutex_lock_killable+0x8c/0xe0 [ 2090.734364][T28001] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 2090.740915][T28001] mem_cgroup_out_of_memory+0x260/0x310 [ 2090.746497][T28001] ? mem_cgroup_oom_trylock+0x350/0x350 [ 2090.752063][T28001] ? _raw_spin_lock+0x8e/0xe0 [ 2090.756772][T28001] ? _raw_spin_trylock_bh+0x130/0x130 [ 2090.762698][T28001] ? _raw_spin_unlock+0x4d/0x70 [ 2090.767588][T28001] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 2090.773159][T28001] ? _raw_spin_unlock_irq+0x4e/0x70 [ 2090.778401][T28001] try_charge+0xf61/0x14e0 [ 2090.782932][T28001] ? __memcg_kmem_charge+0x140/0x140 [ 2090.788249][T28001] ? percpu_counter_add_batch+0x13c/0x160 [ 2090.793998][T28001] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 2090.799582][T28001] __mem_cgroup_charge+0x14c/0x6d0 [ 2090.805005][T28001] shmem_add_to_page_cache+0x55e/0xe10 [ 2090.810494][T28001] ? shmem_alloc_page+0x300/0x300 [ 2090.815545][T28001] ? _raw_spin_lock_irqsave+0x110/0x110 [ 2090.821117][T28001] ? find_lock_entry+0x4b/0x200 [ 2090.825997][T28001] ? lru_cache_add+0x164/0x380 [ 2090.830787][T28001] ? shmem_getpage_gfp+0x8f3/0x2110 [ 2090.836016][T28001] shmem_getpage_gfp+0x8e8/0x2110 [ 2090.841073][T28001] shmem_write_begin+0xce/0x1b0 [ 2090.846033][T28001] generic_perform_write+0x2be/0x510 [ 2090.851455][T28001] ? atime_needs_update+0x5b0/0x5b0 [ 2090.856691][T28001] ? grab_cache_page_write_begin+0xb0/0xb0 [ 2090.862718][T28001] ? file_remove_privs+0x580/0x580 [ 2090.868206][T28001] ? __kasan_check_write+0x14/0x20 [ 2090.873436][T28001] ? down_write+0xac/0x110 [ 2090.877883][T28001] __generic_file_write_iter+0x24b/0x480 [ 2090.883532][T28001] ? generic_write_checks+0x3d4/0x480 [ 2090.889035][T28001] generic_file_write_iter+0xa9/0x1d0 [ 2090.894440][T28001] __kernel_write+0x55a/0x910 [ 2090.899144][T28001] ? vfs_read+0xa10/0xa10 [ 2090.903511][T28001] ? populate_vma_page_range+0xf0/0xf0 [ 2090.908998][T28001] ? __kasan_check_write+0x14/0x20 [ 2090.914144][T28001] ? get_dump_page+0x46b/0x5b0 [ 2090.918932][T28001] dump_emit+0x240/0x360 [ 2090.923191][T28001] ? wait_for_dump_helpers+0x390/0x390 [ 2090.928660][T28001] ? dump_user_range+0xa0/0x1a0 [ 2090.933513][T28001] dump_user_range+0x6a/0x1a0 [ 2090.938222][T28001] elf_core_dump+0x278a/0x2bc0 [ 2090.942992][T28001] ? load_elf_binary+0x2890/0x2890 [ 2090.948107][T28001] ? kvmalloc_node+0x88/0x130 [ 2090.952973][T28001] ? _raw_spin_unlock+0x4d/0x70 [ 2090.957831][T28001] ? __kasan_check_write+0x14/0x20 [ 2090.963095][T28001] ? put_files_struct+0x23b/0x330 [ 2090.968138][T28001] do_coredump+0x1ac9/0x27f0 [ 2090.972775][T28001] ? simple_acl_create+0x1c0/0x1c0 [ 2090.977889][T28001] ? debug_smp_processor_id+0x17/0x20 [ 2090.983280][T28001] ? kmem_cache_free+0x100/0x2d0 [ 2090.988214][T28001] ? ____kasan_slab_free+0x130/0x160 [ 2090.993504][T28001] ? get_signal+0xb98/0x12e0 [ 2090.998184][T28001] ? kmem_cache_free+0x100/0x2d0 [ 2091.003127][T28001] get_signal+0xf23/0x12e0 [ 2091.007549][T28001] ? asm_exc_invalid_op+0xa/0x20 [ 2091.012495][T28001] arch_do_signal_or_restart+0xbf/0x10f0 [ 2091.018123][T28001] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 2091.024287][T28001] ? force_sig_info_to_task+0x26d/0x2e0 [ 2091.029833][T28001] ? __ia32_sys_rt_sigreturn+0x6c0/0x6c0 [ 2091.035466][T28001] ? force_sig_fault_to_task+0x110/0x110 [ 2091.041191][T28001] ? do_trap+0x117/0x2f0 [ 2091.045437][T28001] ? asm_exc_invalid_op+0xa/0x20 [ 2091.050373][T28001] exit_to_user_mode_loop+0xa2/0xe0 [ 2091.055589][T28001] exit_to_user_mode_prepare+0x76/0xa0 [ 2091.061134][T28001] irqentry_exit_to_user_mode+0x9/0x10 [ 2091.066594][T28001] irqentry_exit+0x12/0x60 [ 2091.071004][T28001] exc_invalid_op+0x3e/0x50 [ 2091.075511][T28001] asm_exc_invalid_op+0x12/0x20 [ 2091.080387][T28001] RIP: 0033:0x200000000000 [ 2091.084815][T28001] Code: Unable to access opcode bytes at RIP 0x1fffffffffd6. [ 2091.092339][T28001] RSP: 002b:00007f076f633a78 EFLAGS: 00010246 [ 2091.098417][T28001] RAX: 0000000000000000 RBX: 00007f0770e22fa0 RCX: 00007f0770bcc6c9 [ 2091.106387][T28001] RDX: 00007f076f633a80 RSI: 00007f076f633bb0 RDI: 000000000000000d [ 2091.114383][T28001] RBP: 00007f0770c4ef91 R08: 0000000000000000 R09: 0000000000000000 [ 2091.122356][T28001] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 2091.130330][T28001] R13: 00007f0770e23038 R14: 00007f0770e22fa0 R15: 00007fff3303b148 [ 2091.354304][T28001] memory: usage 307200kB, limit 307200kB, failcnt 9471 [ 2091.371444][T28001] memory+swap: usage 383940kB, limit 9007199254740988kB, failcnt 0 [ 2091.379596][T28001] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2091.394320][T28001] Memory cgroup stats for /syz0: [ 2091.394452][T28001] anon 888832 [ 2091.394452][T28001] file 312238080 [ 2091.394452][T28001] kernel_stack 0 [ 2091.394452][T28001] percpu 0 [ 2091.394452][T28001] sock 0 [ 2091.394452][T28001] shmem 312238080 [ 2091.394452][T28001] file_mapped 0 [ 2091.394452][T28001] file_dirty 0 [ 2091.394452][T28001] file_writeback 0 [ 2091.394452][T28001] anon_thp 0 [ 2091.394452][T28001] inactive_anon 314343424 [ 2091.394452][T28001] active_anon 135168 [ 2091.394452][T28001] inactive_file 28672 [ 2091.394452][T28001] active_file 0 [ 2091.394452][T28001] unevictable 0 [ 2091.394452][T28001] slab_reclaimable 0 [ 2091.394452][T28001] slab_unreclaimable 0 [ 2091.394452][T28001] slab 0 [ 2091.394452][T28001] workingset_refault_anon 0 [ 2091.394452][T28001] workingset_refault_file 0 [ 2091.394452][T28001] workingset_activate_anon 0 [ 2091.394452][T28001] workingset_activate_file 0 [ 2091.394452][T28001] workingset_restore_anon 0 [ 2091.394452][T28001] workingset_restore_file 0 [ 2091.415916][T28029] overlayfs: unrecognized mount option "verity=require:/" or missing value [ 2091.546556][T28001] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.43055,pid=28000,uid=0 [ 2091.573859][T28001] Memory cgroup out of memory: Killed process 28000 (syz.0.43055) total-vm:93812kB, anon-rss:1308kB, file-rss:60320kB, shmem-rss:4kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 2091.608720][ T27] oom_reaper: reaped process 28000 (syz.0.43055), now anon-rss:0kB, file-rss:59188kB, shmem-rss:4kB [ 2092.874406][T28053] syz.0.43069 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2092.894493][T28053] CPU: 1 PID: 28053 Comm: syz.0.43069 Not tainted syzkaller #0 [ 2092.902103][T28053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2092.912193][T28053] Call Trace: [ 2092.915513][T28053] __dump_stack+0x21/0x24 [ 2092.919872][T28053] dump_stack_lvl+0x169/0x1d8 [ 2092.924579][T28053] ? show_regs_print_info+0x18/0x18 [ 2092.929806][T28053] ? ___ratelimit+0x3d1/0x560 [ 2092.934509][T28053] ? _raw_spin_lock+0x8e/0xe0 [ 2092.939214][T28053] dump_stack+0x15/0x1c [ 2092.943395][T28053] dump_header+0xdd/0x650 [ 2092.947756][T28053] oom_kill_process+0x1fa/0x2c0 [ 2092.952646][T28053] out_of_memory+0x94a/0xd70 [ 2092.957278][T28053] ? unregister_oom_notifier+0x20/0x20 [ 2092.962766][T28053] ? mutex_lock_killable+0x8c/0xe0 [ 2092.967909][T28053] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 2092.974442][T28053] mem_cgroup_out_of_memory+0x260/0x310 [ 2092.980021][T28053] ? mem_cgroup_oom_trylock+0x350/0x350 [ 2092.985594][T28053] ? _raw_spin_lock+0x8e/0xe0 [ 2092.990306][T28053] ? _raw_spin_trylock_bh+0x130/0x130 [ 2092.995719][T28053] ? _raw_spin_unlock+0x4d/0x70 [ 2093.000603][T28053] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 2093.006177][T28053] ? _raw_spin_unlock_irq+0x4e/0x70 [ 2093.011408][T28053] try_charge+0xf61/0x14e0 [ 2093.015867][T28053] ? __memcg_kmem_charge+0x140/0x140 [ 2093.021186][T28053] ? percpu_counter_add_batch+0x13c/0x160 [ 2093.026947][T28053] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 2093.032536][T28053] __mem_cgroup_charge+0x14c/0x6d0 [ 2093.037693][T28053] shmem_add_to_page_cache+0x55e/0xe10 [ 2093.043192][T28053] ? shmem_alloc_page+0x300/0x300 [ 2093.048273][T28053] ? _raw_spin_lock_irqsave+0x110/0x110 [ 2093.053862][T28053] ? find_lock_entry+0x4b/0x200 [ 2093.058747][T28053] ? lru_cache_add+0x164/0x380 [ 2093.063548][T28053] ? shmem_getpage_gfp+0x8f3/0x2110 [ 2093.068782][T28053] shmem_getpage_gfp+0x8e8/0x2110 [ 2093.074127][T28053] shmem_write_begin+0xce/0x1b0 [ 2093.079013][T28053] generic_perform_write+0x2be/0x510 [ 2093.084539][T28053] ? atime_needs_update+0x5b0/0x5b0 [ 2093.089778][T28053] ? grab_cache_page_write_begin+0xb0/0xb0 [ 2093.095611][T28053] ? file_remove_privs+0x580/0x580 [ 2093.100755][T28053] ? __kasan_check_write+0x14/0x20 [ 2093.105893][T28053] ? down_write+0xac/0x110 [ 2093.110345][T28053] __generic_file_write_iter+0x24b/0x480 [ 2093.116003][T28053] ? generic_write_checks+0x3d4/0x480 [ 2093.121412][T28053] generic_file_write_iter+0xa9/0x1d0 [ 2093.126976][T28053] __kernel_write+0x55a/0x910 [ 2093.131689][T28053] ? vfs_read+0xa10/0xa10 [ 2093.136041][T28053] ? sysvec_apic_timer_interrupt+0xcb/0xe0 [ 2093.141882][T28053] ? populate_vma_page_range+0xf0/0xf0 [ 2093.147375][T28053] ? __kasan_check_write+0x14/0x20 [ 2093.152513][T28053] ? get_dump_page+0x46b/0x5b0 [ 2093.157303][T28053] dump_emit+0x240/0x360 [ 2093.161576][T28053] ? wait_for_dump_helpers+0x390/0x390 [ 2093.167183][T28053] dump_user_range+0x6a/0x1a0 [ 2093.171893][T28053] elf_core_dump+0x278a/0x2bc0 [ 2093.176795][T28053] ? load_elf_binary+0x2890/0x2890 [ 2093.181942][T28053] ? kvmalloc_node+0x88/0x130 [ 2093.186665][T28053] ? _raw_spin_unlock+0x4d/0x70 [ 2093.191550][T28053] ? __kasan_check_write+0x14/0x20 [ 2093.196683][T28053] ? put_files_struct+0x23b/0x330 [ 2093.201947][T28053] do_coredump+0x1ac9/0x27f0 [ 2093.206580][T28053] ? simple_acl_create+0x1c0/0x1c0 [ 2093.211724][T28053] ? debug_smp_processor_id+0x17/0x20 [ 2093.217217][T28053] ? kmem_cache_free+0x100/0x2d0 [ 2093.222182][T28053] ? ____kasan_slab_free+0x130/0x160 [ 2093.227502][T28053] ? get_signal+0xb98/0x12e0 [ 2093.232128][T28053] ? kmem_cache_free+0x100/0x2d0 [ 2093.237103][T28053] get_signal+0xf23/0x12e0 [ 2093.241560][T28053] ? asm_exc_invalid_op+0xa/0x20 [ 2093.246528][T28053] arch_do_signal_or_restart+0xbf/0x10f0 [ 2093.252197][T28053] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 2093.258048][T28053] ? force_sig_info_to_task+0x26d/0x2e0 [ 2093.263634][T28053] ? __ia32_sys_rt_sigreturn+0x6c0/0x6c0 [ 2093.269300][T28053] ? force_sig_fault_to_task+0x110/0x110 [ 2093.274971][T28053] ? do_trap+0x117/0x2f0 [ 2093.279244][T28053] ? asm_exc_invalid_op+0xa/0x20 [ 2093.284207][T28053] exit_to_user_mode_loop+0xa2/0xe0 [ 2093.289519][T28053] exit_to_user_mode_prepare+0x76/0xa0 [ 2093.295009][T28053] irqentry_exit_to_user_mode+0x9/0x10 [ 2093.300492][T28053] irqentry_exit+0x12/0x60 [ 2093.304933][T28053] exc_invalid_op+0x3e/0x50 [ 2093.309465][T28053] asm_exc_invalid_op+0x12/0x20 [ 2093.314425][T28053] RIP: 0033:0x200000000000 [ 2093.318868][T28053] Code: Unable to access opcode bytes at RIP 0x1fffffffffd6. [ 2093.326257][T28053] RSP: 002b:00007f076f633a78 EFLAGS: 00010246 [ 2093.332436][T28053] RAX: 0000000000000000 RBX: 00007f0770e22fa0 RCX: 00007f0770bcc6c9 [ 2093.340428][T28053] RDX: 00007f076f633a80 RSI: 00007f076f633bb0 RDI: 000000000000000d [ 2093.348426][T28053] RBP: 00007f0770c4ef91 R08: 0000000000000000 R09: 0000000000000000 [ 2093.356423][T28053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2093.364418][T28053] R13: 00007f0770e23038 R14: 00007f0770e22fa0 R15: 00007fff3303b148 [ 2093.373123][T28053] memory: usage 307200kB, limit 307200kB, failcnt 9498 [ 2093.394352][T28053] memory+swap: usage 383940kB, limit 9007199254740988kB, failcnt 0 [ 2093.411857][T28053] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2093.425521][T28053] Memory cgroup stats for /syz0: [ 2093.425661][T28053] anon 888832 [ 2093.425661][T28053] file 312238080 [ 2093.425661][T28053] kernel_stack 0 [ 2093.425661][T28053] percpu 0 [ 2093.425661][T28053] sock 0 [ 2093.425661][T28053] shmem 312373248 [ 2093.425661][T28053] file_mapped 0 [ 2093.425661][T28053] file_dirty 0 [ 2093.425661][T28053] file_writeback 0 [ 2093.425661][T28053] anon_thp 0 [ 2093.425661][T28053] inactive_anon 314343424 [ 2093.425661][T28053] active_anon 135168 [ 2093.425661][T28053] inactive_file 28672 [ 2093.425661][T28053] active_file 0 [ 2093.425661][T28053] unevictable 0 [ 2093.425661][T28053] slab_reclaimable 0 [ 2093.425661][T28053] slab_unreclaimable 0 [ 2093.425661][T28053] slab 0 [ 2093.425661][T28053] workingset_refault_anon 0 [ 2093.425661][T28053] workingset_refault_file 0 [ 2093.425661][T28053] workingset_activate_anon 0 [ 2093.425661][T28053] workingset_activate_file 0 [ 2093.425661][T28053] workingset_restore_anon 0 [ 2093.425661][T28053] workingset_restore_file 0 [ 2093.519783][T28053] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.43069,pid=28050,uid=0 [ 2093.535478][T28053] Memory cgroup out of memory: Killed process 28050 (syz.0.43069) total-vm:93812kB, anon-rss:1304kB, file-rss:60512kB, shmem-rss:4kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 2093.555813][ T27] oom_reaper: reaped process 28050 (syz.0.43069), now anon-rss:0kB, file-rss:61440kB, shmem-rss:4kB [ 2093.830989][T14579] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 2094.084353][T14579] usb 10-1: Using ep0 maxpacket: 16 [ 2094.204653][T14579] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 2094.216526][T14579] usb 10-1: config 0 has no interface number 0 [ 2094.238568][T14579] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2094.253247][T14579] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2094.273093][T14579] usb 10-1: config 0 interface 41 has no altsetting 0 [ 2094.444406][T14579] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2094.473940][T14579] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2094.494137][T14579] usb 10-1: Product: syz [ 2094.504299][T14579] usb 10-1: Manufacturer: syz [ 2094.509039][T14579] usb 10-1: SerialNumber: syz [ 2094.528301][T14579] usb 10-1: config 0 descriptor?? [ 2094.544346][T28107] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2094.551536][T28107] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2094.784876][T28107] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2094.792096][T28107] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2094.842612][T28169] syz.0.43136 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2094.861514][T28169] CPU: 0 PID: 28169 Comm: syz.0.43136 Not tainted syzkaller #0 [ 2094.869110][T28169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2094.879186][T28169] Call Trace: [ 2094.882523][T28169] __dump_stack+0x21/0x24 [ 2094.886978][T28169] dump_stack_lvl+0x169/0x1d8 [ 2094.891859][T28169] ? show_regs_print_info+0x18/0x18 [ 2094.897080][T28169] ? ___ratelimit+0x3d1/0x560 [ 2094.901852][T28169] ? __kasan_check_write+0x14/0x20 [ 2094.907000][T28169] ? _raw_spin_lock+0x8e/0xe0 [ 2094.911678][T28169] dump_stack+0x15/0x1c [ 2094.915858][T28169] dump_header+0xdd/0x650 [ 2094.920190][T28169] oom_kill_process+0x1fa/0x2c0 [ 2094.925153][T28169] out_of_memory+0x94a/0xd70 [ 2094.929775][T28169] ? unregister_oom_notifier+0x20/0x20 [ 2094.935246][T28169] ? mutex_lock_killable+0x8c/0xe0 [ 2094.940362][T28169] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 2094.946870][T28169] mem_cgroup_out_of_memory+0x260/0x310 [ 2094.952418][T28169] ? mem_cgroup_oom_trylock+0x350/0x350 [ 2094.957971][T28169] ? _raw_spin_lock+0x8e/0xe0 [ 2094.962646][T28169] ? _raw_spin_trylock_bh+0x130/0x130 [ 2094.968012][T28169] ? _raw_spin_unlock+0x4d/0x70 [ 2094.972868][T28169] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 2094.978542][T28169] ? _raw_spin_unlock_irq+0x4e/0x70 [ 2094.983839][T28169] try_charge+0xf61/0x14e0 [ 2094.988263][T28169] ? __memcg_kmem_charge+0x140/0x140 [ 2094.993546][T28169] ? percpu_counter_add_batch+0x13c/0x160 [ 2094.999394][T28169] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 2095.004940][T28169] __mem_cgroup_charge+0x14c/0x6d0 [ 2095.010081][T28169] shmem_add_to_page_cache+0x55e/0xe10 [ 2095.015549][T28169] ? shmem_alloc_page+0x300/0x300 [ 2095.020574][T28169] ? _raw_spin_lock_irqsave+0x110/0x110 [ 2095.026139][T28169] ? find_lock_entry+0x4b/0x200 [ 2095.030989][T28169] ? lru_cache_add+0x164/0x380 [ 2095.035856][T28169] ? shmem_getpage_gfp+0x8f3/0x2110 [ 2095.041056][T28169] shmem_getpage_gfp+0x8e8/0x2110 [ 2095.046089][T28169] shmem_write_begin+0xce/0x1b0 [ 2095.050939][T28169] generic_perform_write+0x2be/0x510 [ 2095.056227][T28169] ? atime_needs_update+0x5b0/0x5b0 [ 2095.061427][T28169] ? grab_cache_page_write_begin+0xb0/0xb0 [ 2095.067322][T28169] ? file_remove_privs+0x580/0x580 [ 2095.072432][T28169] ? __kasan_check_write+0x14/0x20 [ 2095.077571][T28169] ? down_write+0xac/0x110 [ 2095.082005][T28169] __generic_file_write_iter+0x24b/0x480 [ 2095.087632][T28169] ? generic_write_checks+0x3d4/0x480 [ 2095.093000][T28169] generic_file_write_iter+0xa9/0x1d0 [ 2095.098373][T28169] __kernel_write+0x55a/0x910 [ 2095.103049][T28169] ? vfs_read+0xa10/0xa10 [ 2095.107408][T28169] ? populate_vma_page_range+0xf0/0xf0 [ 2095.112864][T28169] ? __kasan_check_write+0x14/0x20 [ 2095.118013][T28169] ? get_dump_page+0x46b/0x5b0 [ 2095.122797][T28169] dump_emit+0x240/0x360 [ 2095.127059][T28169] ? wait_for_dump_helpers+0x390/0x390 [ 2095.132519][T28169] dump_user_range+0x6a/0x1a0 [ 2095.137199][T28169] elf_core_dump+0x278a/0x2bc0 [ 2095.141973][T28169] ? load_elf_binary+0x2890/0x2890 [ 2095.147100][T28169] ? kvmalloc_node+0x88/0x130 [ 2095.151822][T28169] ? _raw_spin_unlock+0x4d/0x70 [ 2095.156696][T28169] ? __kasan_check_write+0x14/0x20 [ 2095.161811][T28169] ? put_files_struct+0x23b/0x330 [ 2095.166838][T28169] do_coredump+0x1ac9/0x27f0 [ 2095.171585][T28169] ? simple_acl_create+0x1c0/0x1c0 [ 2095.176721][T28169] ? debug_smp_processor_id+0x17/0x20 [ 2095.182131][T28169] ? kmem_cache_free+0x100/0x2d0 [ 2095.187069][T28169] ? ____kasan_slab_free+0x130/0x160 [ 2095.192446][T28169] ? get_signal+0xb98/0x12e0 [ 2095.197055][T28169] ? kmem_cache_free+0x100/0x2d0 [ 2095.202013][T28169] get_signal+0xf23/0x12e0 [ 2095.206444][T28169] ? asm_exc_invalid_op+0xa/0x20 [ 2095.211384][T28169] arch_do_signal_or_restart+0xbf/0x10f0 [ 2095.217018][T28169] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 2095.222819][T28169] ? force_sig_info_to_task+0x26d/0x2e0 [ 2095.228501][T28169] ? __ia32_sys_rt_sigreturn+0x6c0/0x6c0 [ 2095.234157][T28169] ? force_sig_fault_to_task+0x110/0x110 [ 2095.239811][T28169] ? do_trap+0x117/0x2f0 [ 2095.244067][T28169] ? asm_exc_invalid_op+0xa/0x20 [ 2095.249032][T28169] exit_to_user_mode_loop+0xa2/0xe0 [ 2095.254242][T28169] exit_to_user_mode_prepare+0x76/0xa0 [ 2095.259709][T28169] irqentry_exit_to_user_mode+0x9/0x10 [ 2095.265252][T28169] irqentry_exit+0x12/0x60 [ 2095.269667][T28169] exc_invalid_op+0x3e/0x50 [ 2095.274167][T28169] asm_exc_invalid_op+0x12/0x20 [ 2095.279109][T28169] RIP: 0033:0x200000000006 [ 2095.283541][T28169] Code: Unable to access opcode bytes at RIP 0x1fffffffffdc. [ 2095.290903][T28169] RSP: 002b:00007f076f633a78 EFLAGS: 00010202 [ 2095.296966][T28169] RAX: 00000000000000db RBX: 00007f0770e22fa0 RCX: 00007f0770bcc6c9 [ 2095.304950][T28169] RDX: 00007f076f633a80 RSI: 00007f076f633bb0 RDI: 000000000000000d [ 2095.312920][T28169] RBP: 00007f0770c4ef91 R08: 0000000000000000 R09: 0000000000000000 [ 2095.320984][T28169] R10: 0000000000000805 R11: 0000000000000246 R12: 0000000000000000 [ 2095.328961][T28169] R13: 00007f0770e23038 R14: 00007f0770e22fa0 R15: 00007fff3303b148 [ 2095.364340][T14579] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 2095.384662][T14579] CoreChips: probe of 10-1:0.41 failed with error -71 [ 2095.404645][T14579] usb 10-1: USB disconnect, device number 57 [ 2095.514404][T28169] memory: usage 307200kB, limit 307200kB, failcnt 9520 [ 2095.521580][T28169] memory+swap: usage 383940kB, limit 9007199254740988kB, failcnt 0 [ 2095.546252][T28169] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2095.555365][T28169] Memory cgroup stats for /syz0: [ 2095.555504][T28169] anon 753664 [ 2095.555504][T28169] file 312238080 [ 2095.555504][T28169] kernel_stack 0 [ 2095.555504][T28169] percpu 0 [ 2095.555504][T28169] sock 0 [ 2095.555504][T28169] shmem 312373248 [ 2095.555504][T28169] file_mapped 0 [ 2095.555504][T28169] file_dirty 0 [ 2095.555504][T28169] file_writeback 0 [ 2095.555504][T28169] anon_thp 0 [ 2095.555504][T28169] inactive_anon 314208256 [ 2095.555504][T28169] active_anon 135168 [ 2095.555504][T28169] inactive_file 28672 [ 2095.555504][T28169] active_file 0 [ 2095.555504][T28169] unevictable 0 [ 2095.555504][T28169] slab_reclaimable 0 [ 2095.555504][T28169] slab_unreclaimable 0 [ 2095.555504][T28169] slab 0 [ 2095.555504][T28169] workingset_refault_anon 0 [ 2095.555504][T28169] workingset_refault_file 0 [ 2095.555504][T28169] workingset_activate_anon 0 [ 2095.555504][T28169] workingset_activate_file 0 [ 2095.555504][T28169] workingset_restore_anon 0 [ 2095.555504][T28169] workingset_restore_file 0 [ 2095.648853][T28169] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.43136,pid=28168,uid=0 [ 2095.669952][T28169] Memory cgroup out of memory: Killed process 28168 (syz.0.43136) total-vm:93812kB, anon-rss:1308kB, file-rss:60384kB, shmem-rss:4kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 2095.693601][ T27] oom_reaper: reaped process 28168 (syz.0.43136), now anon-rss:0kB, file-rss:61440kB, shmem-rss:4kB [ 2096.484316][T28183] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 2096.724622][T28183] usb 4-1: Using ep0 maxpacket: 16 [ 2096.844382][T28183] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 2096.853980][T28183] usb 4-1: config 0 has no interface number 0 [ 2096.860931][T28183] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2096.871538][T28183] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2096.881934][T28183] usb 4-1: config 0 interface 41 has no altsetting 0 [ 2097.044393][T28183] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2097.059131][T28183] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2097.076984][T28183] usb 4-1: Product: syz [ 2097.085623][T28183] usb 4-1: Manufacturer: syz [ 2097.095763][T28183] usb 4-1: SerialNumber: syz [ 2097.110438][T28183] usb 4-1: config 0 descriptor?? [ 2097.134358][T28223] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2097.148749][T28223] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2097.374862][T28223] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2097.392957][T28299] overlayfs: missing 'lowerdir' [ 2097.400677][T28223] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2097.593479][T28327] overlayfs: missing 'lowerdir' [ 2097.634356][T28183] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 2097.654491][T28183] CoreChips: probe of 4-1:0.41 failed with error -71 [ 2097.676154][T28183] usb 4-1: USB disconnect, device number 35 [ 2097.742067][T28283] syz.0.43191 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2097.760292][T28283] CPU: 0 PID: 28283 Comm: syz.0.43191 Not tainted syzkaller #0 [ 2097.768016][T28283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2097.778095][T28283] Call Trace: [ 2097.781423][T28283] __dump_stack+0x21/0x24 [ 2097.785872][T28283] dump_stack_lvl+0x169/0x1d8 [ 2097.790583][T28283] ? show_regs_print_info+0x18/0x18 [ 2097.795814][T28283] ? ___ratelimit+0x3d1/0x560 [ 2097.800520][T28283] ? __kasan_check_write+0x14/0x20 [ 2097.805662][T28283] ? _raw_spin_lock+0x8e/0xe0 [ 2097.810456][T28283] dump_stack+0x15/0x1c [ 2097.814641][T28283] dump_header+0xdd/0x650 [ 2097.818998][T28283] oom_kill_process+0x1fa/0x2c0 [ 2097.823876][T28283] out_of_memory+0x94a/0xd70 [ 2097.828515][T28283] ? unregister_oom_notifier+0x20/0x20 [ 2097.833998][T28283] ? mutex_lock_killable+0x8c/0xe0 [ 2097.839144][T28283] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 2097.845680][T28283] mem_cgroup_out_of_memory+0x260/0x310 [ 2097.851261][T28283] ? mem_cgroup_oom_trylock+0x350/0x350 [ 2097.856836][T28283] ? _raw_spin_lock+0x8e/0xe0 [ 2097.861565][T28283] ? _raw_spin_trylock_bh+0x130/0x130 [ 2097.866993][T28283] ? _raw_spin_unlock+0x4d/0x70 [ 2097.871899][T28283] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 2097.877484][T28283] ? _raw_spin_unlock_irq+0x4e/0x70 [ 2097.882715][T28283] try_charge+0xf61/0x14e0 [ 2097.887173][T28283] ? __memcg_kmem_charge+0x140/0x140 [ 2097.892492][T28283] ? percpu_counter_add_batch+0x13c/0x160 [ 2097.898253][T28283] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 2097.903831][T28283] __mem_cgroup_charge+0x14c/0x6d0 [ 2097.908992][T28283] shmem_add_to_page_cache+0x55e/0xe10 [ 2097.910754][T28352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28352 comm=syz.7.43223 [ 2097.914483][T28283] ? shmem_alloc_page+0x300/0x300 [ 2097.914502][T28283] ? _raw_spin_lock_irqsave+0x110/0x110 [ 2097.914526][T28283] ? find_lock_entry+0x4b/0x200 [ 2097.942492][T28283] ? lru_cache_add+0x164/0x380 [ 2097.947285][T28283] ? shmem_getpage_gfp+0x8f3/0x2110 [ 2097.952518][T28283] shmem_getpage_gfp+0x8e8/0x2110 [ 2097.957589][T28283] shmem_write_begin+0xce/0x1b0 [ 2097.962474][T28283] generic_perform_write+0x2be/0x510 [ 2097.967787][T28283] ? atime_needs_update+0x5b0/0x5b0 [ 2097.973027][T28283] ? grab_cache_page_write_begin+0xb0/0xb0 [ 2097.978856][T28283] ? file_remove_privs+0x580/0x580 [ 2097.984002][T28283] ? __kasan_check_write+0x14/0x20 [ 2097.989137][T28283] ? down_write+0xac/0x110 [ 2097.993582][T28283] __generic_file_write_iter+0x24b/0x480 [ 2097.999325][T28283] ? generic_write_checks+0x3d4/0x480 [ 2098.004816][T28283] generic_file_write_iter+0xa9/0x1d0 [ 2098.010216][T28283] __kernel_write+0x55a/0x910 [ 2098.014918][T28283] ? vfs_read+0xa10/0xa10 [ 2098.019275][T28283] ? populate_vma_page_range+0xf0/0xf0 [ 2098.024856][T28283] ? __kasan_check_write+0x14/0x20 [ 2098.030084][T28283] ? get_dump_page+0x46b/0x5b0 [ 2098.034880][T28283] dump_emit+0x240/0x360 [ 2098.039168][T28283] ? wait_for_dump_helpers+0x390/0x390 [ 2098.044660][T28283] dump_user_range+0x6a/0x1a0 [ 2098.049365][T28283] elf_core_dump+0x278a/0x2bc0 [ 2098.054166][T28283] ? load_elf_binary+0x2890/0x2890 [ 2098.059313][T28283] ? kvmalloc_node+0x88/0x130 [ 2098.064033][T28283] ? _raw_spin_unlock+0x4d/0x70 [ 2098.068921][T28283] ? __kasan_check_write+0x14/0x20 [ 2098.074140][T28283] ? put_files_struct+0x23b/0x330 [ 2098.079196][T28283] do_coredump+0x1ac9/0x27f0 [ 2098.083826][T28283] ? simple_acl_create+0x1c0/0x1c0 [ 2098.089138][T28283] ? debug_smp_processor_id+0x17/0x20 [ 2098.094535][T28283] ? kmem_cache_free+0x100/0x2d0 [ 2098.099492][T28283] ? ____kasan_slab_free+0x130/0x160 [ 2098.104936][T28283] ? get_signal+0xb98/0x12e0 [ 2098.109559][T28283] ? kmem_cache_free+0x100/0x2d0 [ 2098.114528][T28283] get_signal+0xf23/0x12e0 [ 2098.118973][T28283] ? asm_exc_invalid_op+0xa/0x20 [ 2098.123969][T28283] arch_do_signal_or_restart+0xbf/0x10f0 [ 2098.129637][T28283] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 2098.135467][T28283] ? force_sig_info_to_task+0x26d/0x2e0 [ 2098.141045][T28283] ? __ia32_sys_rt_sigreturn+0x6c0/0x6c0 [ 2098.146710][T28283] ? force_sig_fault_to_task+0x110/0x110 [ 2098.152370][T28283] ? do_trap+0x117/0x2f0 [ 2098.156650][T28283] ? asm_exc_invalid_op+0xa/0x20 [ 2098.161607][T28283] exit_to_user_mode_loop+0xa2/0xe0 [ 2098.166826][T28283] exit_to_user_mode_prepare+0x76/0xa0 [ 2098.172306][T28283] irqentry_exit_to_user_mode+0x9/0x10 [ 2098.177784][T28283] irqentry_exit+0x12/0x60 [ 2098.182299][T28283] exc_invalid_op+0x3e/0x50 [ 2098.186818][T28283] asm_exc_invalid_op+0x12/0x20 [ 2098.191685][T28283] RIP: 0033:0x200000000000 [ 2098.196168][T28283] Code: Unable to access opcode bytes at RIP 0x1fffffffffd6. [ 2098.203547][T28283] RSP: 002b:00007f076f633a78 EFLAGS: 00010246 [ 2098.209628][T28283] RAX: 0000000000000000 RBX: 00007f0770e22fa0 RCX: 00007f0770bcc6c9 [ 2098.217616][T28283] RDX: 00007f076f633a80 RSI: 00007f076f633bb0 RDI: 000000000000000d [ 2098.225688][T28283] RBP: 00007f0770c4ef91 R08: 0000000000000000 R09: 0000000000000000 [ 2098.233686][T28283] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 2098.241673][T28283] R13: 00007f0770e23038 R14: 00007f0770e22fa0 R15: 00007fff3303b148 [ 2098.257830][T28283] memory: usage 307200kB, limit 307200kB, failcnt 9542 [ 2098.265908][T28283] memory+swap: usage 383940kB, limit 9007199254740988kB, failcnt 0 [ 2098.274448][T28283] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2098.282110][T28283] Memory cgroup stats for /syz0: [ 2098.282445][T28283] anon 888832 [ 2098.282445][T28283] file 312238080 [ 2098.282445][T28283] kernel_stack 0 [ 2098.282445][T28283] percpu 0 [ 2098.282445][T28283] sock 0 [ 2098.282445][T28283] shmem 312238080 [ 2098.282445][T28283] file_mapped 0 [ 2098.282445][T28283] file_dirty 0 [ 2098.282445][T28283] file_writeback 0 [ 2098.282445][T28283] anon_thp 0 [ 2098.282445][T28283] inactive_anon 314208256 [ 2098.282445][T28283] active_anon 135168 [ 2098.282445][T28283] inactive_file 28672 [ 2098.282445][T28283] active_file 0 [ 2098.282445][T28283] unevictable 0 [ 2098.282445][T28283] slab_reclaimable 0 [ 2098.282445][T28283] slab_unreclaimable 0 [ 2098.282445][T28283] slab 0 [ 2098.282445][T28283] workingset_refault_anon 0 [ 2098.282445][T28283] workingset_refault_file 0 [ 2098.282445][T28283] workingset_activate_anon 0 [ 2098.282445][T28283] workingset_activate_file 0 [ 2098.282445][T28283] workingset_restore_anon 0 [ 2098.282445][T28283] workingset_restore_file 0 [ 2098.381248][T28283] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.43191,pid=28282,uid=0 [ 2098.397969][T28283] Memory cgroup out of memory: Killed process 28282 (syz.0.43191) total-vm:93812kB, anon-rss:1308kB, file-rss:60384kB, shmem-rss:4kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 2098.417244][ T27] oom_reaper: reaped process 28282 (syz.0.43191), now anon-rss:0kB, file-rss:59252kB, shmem-rss:4kB [ 2098.564931][T28375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28375 comm=syz.8.43235 [ 2098.844394][T28183] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 2099.084330][T28183] usb 4-1: Using ep0 maxpacket: 16 [ 2099.204364][T28183] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 2099.222652][T28183] usb 4-1: config 0 has no interface number 0 [ 2099.232771][T28183] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2099.263165][T28183] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2099.283437][T28183] usb 4-1: config 0 interface 41 has no altsetting 0 [ 2099.426019][T28391] syz.0.43242 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2099.446346][T28391] CPU: 0 PID: 28391 Comm: syz.0.43242 Not tainted syzkaller #0 [ 2099.453957][T28391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2099.454419][T28183] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2099.464026][T28391] Call Trace: [ 2099.464057][T28391] __dump_stack+0x21/0x24 [ 2099.464079][T28391] dump_stack_lvl+0x169/0x1d8 [ 2099.485400][T28391] ? show_regs_print_info+0x18/0x18 [ 2099.490656][T28391] ? ___ratelimit+0x3d1/0x560 [ 2099.495354][T28391] ? _raw_spin_lock+0x8e/0xe0 [ 2099.500072][T28391] dump_stack+0x15/0x1c [ 2099.503597][T28183] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2099.504239][T28391] dump_header+0xdd/0x650 [ 2099.504255][T28391] oom_kill_process+0x1fa/0x2c0 [ 2099.504267][T28391] out_of_memory+0x94a/0xd70 [ 2099.504281][T28391] ? unregister_oom_notifier+0x20/0x20 [ 2099.504293][T28391] ? mutex_lock_killable+0x8c/0xe0 [ 2099.504313][T28391] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 2099.513692][T28183] usb 4-1: Product: syz [ 2099.516710][T28391] mem_cgroup_out_of_memory+0x260/0x310 [ 2099.516725][T28391] ? mem_cgroup_oom_trylock+0x350/0x350 [ 2099.516747][T28391] ? _raw_spin_lock+0x8e/0xe0 [ 2099.525420][T28183] usb 4-1: Manufacturer: syz [ 2099.526239][T28391] ? _raw_spin_trylock_bh+0x130/0x130 [ 2099.531687][T28183] usb 4-1: SerialNumber: syz [ 2099.536795][T28391] ? _raw_spin_unlock+0x4d/0x70 [ 2099.536811][T28391] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 2099.536823][T28391] ? _raw_spin_unlock_irq+0x4e/0x70 [ 2099.536837][T28391] try_charge+0xf61/0x14e0 [ 2099.536858][T28391] ? __memcg_kmem_charge+0x140/0x140 [ 2099.536873][T28391] ? percpu_counter_add_batch+0x13c/0x160 [ 2099.536892][T28391] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 2099.536905][T28391] __mem_cgroup_charge+0x14c/0x6d0 [ 2099.536921][T28391] shmem_add_to_page_cache+0x55e/0xe10 [ 2099.536938][T28391] ? shmem_alloc_page+0x300/0x300 [ 2099.536952][T28391] ? _raw_spin_lock_irqsave+0x110/0x110 [ 2099.536966][T28391] ? find_lock_entry+0x4b/0x200 [ 2099.536978][T28391] ? lru_cache_add+0x164/0x380 [ 2099.536989][T28391] ? shmem_getpage_gfp+0x8f3/0x2110 [ 2099.537001][T28391] shmem_getpage_gfp+0x8e8/0x2110 [ 2099.537027][T28391] shmem_write_begin+0xce/0x1b0 [ 2099.569305][T28183] usb 4-1: config 0 descriptor?? [ 2099.573406][T28391] generic_perform_write+0x2be/0x510 [ 2099.604388][T28377] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2099.609465][T28391] ? atime_needs_update+0x5b0/0x5b0 [ 2099.624365][T28377] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2099.625575][T28391] ? grab_cache_page_write_begin+0xb0/0xb0 [ 2099.696745][T28391] ? file_remove_privs+0x580/0x580 [ 2099.701975][T28391] ? __kasan_check_write+0x14/0x20 [ 2099.707118][T28391] ? down_write+0xac/0x110 [ 2099.711831][T28391] __generic_file_write_iter+0x24b/0x480 [ 2099.717586][T28391] ? generic_write_checks+0x3d4/0x480 [ 2099.723002][T28391] generic_file_write_iter+0xa9/0x1d0 [ 2099.728613][T28391] __kernel_write+0x55a/0x910 [ 2099.733408][T28391] ? vfs_read+0xa10/0xa10 [ 2099.737852][T28391] ? populate_vma_page_range+0xf0/0xf0 [ 2099.743533][T28391] ? __kasan_check_write+0x14/0x20 [ 2099.748762][T28391] ? get_dump_page+0x46b/0x5b0 [ 2099.753559][T28391] dump_emit+0x240/0x360 [ 2099.757845][T28391] ? wait_for_dump_helpers+0x390/0x390 [ 2099.763333][T28391] ? dump_user_range+0xe0/0x1a0 [ 2099.768314][T28391] dump_user_range+0x6a/0x1a0 [ 2099.773032][T28391] elf_core_dump+0x278a/0x2bc0 [ 2099.777845][T28391] ? load_elf_binary+0x2890/0x2890 [ 2099.783005][T28391] ? kvmalloc_node+0x88/0x130 [ 2099.787740][T28391] ? _raw_spin_unlock+0x4d/0x70 [ 2099.792689][T28391] ? __kasan_check_write+0x14/0x20 [ 2099.797949][T28391] ? put_files_struct+0x23b/0x330 [ 2099.803113][T28391] do_coredump+0x1ac9/0x27f0 [ 2099.807845][T28391] ? simple_acl_create+0x1c0/0x1c0 [ 2099.813001][T28391] ? debug_smp_processor_id+0x17/0x20 [ 2099.818600][T28391] ? kmem_cache_free+0x100/0x2d0 [ 2099.823691][T28391] ? ____kasan_slab_free+0x130/0x160 [ 2099.829003][T28391] ? get_signal+0xb98/0x12e0 [ 2099.833623][T28391] ? kmem_cache_free+0x100/0x2d0 [ 2099.838591][T28391] get_signal+0xf23/0x12e0 [ 2099.843046][T28391] ? asm_exc_invalid_op+0xa/0x20 [ 2099.845896][T28377] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2099.848014][T28391] arch_do_signal_or_restart+0xbf/0x10f0 [ 2099.859922][T28410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28410 comm=syz.7.43247 [ 2099.860636][T28391] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 2099.879997][T28391] ? force_sig_info_to_task+0x26d/0x2e0 [ 2099.883521][T28377] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2099.885811][T28391] ? __ia32_sys_rt_sigreturn+0x6c0/0x6c0 [ 2099.898386][T28391] ? force_sig_fault_to_task+0x110/0x110 [ 2099.904059][T28391] ? do_trap+0x117/0x2f0 [ 2099.908343][T28391] ? asm_exc_invalid_op+0xa/0x20 [ 2099.913313][T28391] exit_to_user_mode_loop+0xa2/0xe0 [ 2099.918546][T28391] exit_to_user_mode_prepare+0x76/0xa0 [ 2099.924051][T28391] irqentry_exit_to_user_mode+0x9/0x10 [ 2099.929545][T28391] irqentry_exit+0x12/0x60 [ 2099.933992][T28391] exc_invalid_op+0x3e/0x50 [ 2099.938542][T28391] asm_exc_invalid_op+0x12/0x20 [ 2099.943410][T28391] RIP: 0033:0x200000000006 [ 2099.947854][T28391] Code: Unable to access opcode bytes at RIP 0x1fffffffffdc. [ 2099.955245][T28391] RSP: 002b:00007f076f633a78 EFLAGS: 00010282 [ 2099.961339][T28391] RAX: 00000000000000da RBX: 00007f0770e22fa0 RCX: 00007f0770bcc6c9 [ 2099.969345][T28391] RDX: 00007f076f633a80 RSI: 00007f076f633bb0 RDI: 000000000000000d [ 2099.977445][T28391] RBP: 00007f0770c4ef91 R08: 0000000000000000 R09: 0000000000000000 [ 2099.985444][T28391] R10: 0000000000000805 R11: 0000000000000246 R12: 0000000000000000 [ 2099.993444][T28391] R13: 00007f0770e23038 R14: 00007f0770e22fa0 R15: 00007fff3303b148 [ 2100.003751][T28391] memory: usage 307200kB, limit 307200kB, failcnt 9563 [ 2100.011254][T28391] memory+swap: usage 383940kB, limit 9007199254740988kB, failcnt 0 [ 2100.020823][T28391] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2100.028378][T28391] Memory cgroup stats for /syz0: [ 2100.028813][T28391] anon 888832 [ 2100.028813][T28391] file 312238080 [ 2100.028813][T28391] kernel_stack 0 [ 2100.028813][T28391] percpu 0 [ 2100.028813][T28391] sock 0 [ 2100.028813][T28391] shmem 312238080 [ 2100.028813][T28391] file_mapped 0 [ 2100.028813][T28391] file_dirty 0 [ 2100.028813][T28391] file_writeback 0 [ 2100.028813][T28391] anon_thp 0 [ 2100.028813][T28391] inactive_anon 314208256 [ 2100.028813][T28391] active_anon 135168 [ 2100.028813][T28391] inactive_file 28672 [ 2100.028813][T28391] active_file 0 [ 2100.028813][T28391] unevictable 0 [ 2100.028813][T28391] slab_reclaimable 0 [ 2100.028813][T28391] slab_unreclaimable 0 [ 2100.028813][T28391] slab 0 [ 2100.028813][T28391] workingset_refault_anon 0 [ 2100.028813][T28391] workingset_refault_file 0 [ 2100.028813][T28391] workingset_activate_anon 0 [ 2100.028813][T28391] workingset_activate_file 0 [ 2100.028813][T28391] workingset_restore_anon 0 [ 2100.028813][T28391] workingset_restore_file 0 [ 2100.054336][T17281] usb 10-1: new full-speed USB device number 58 using dummy_hcd [ 2100.125305][T28391] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.43242,pid=28390,uid=0 [ 2100.134392][T28183] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 2100.168692][T28391] Memory cgroup out of memory: Killed process 28390 (syz.0.43242) total-vm:93812kB, anon-rss:1308kB, file-rss:60384kB, shmem-rss:4kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 2100.174121][T28183] CoreChips: probe of 4-1:0.41 failed with error -71 [ 2100.190343][ T27] oom_reaper: reaped process 28390 (syz.0.43242), now anon-rss:0kB, file-rss:59252kB, shmem-rss:4kB [ 2100.206068][T28183] usb 4-1: USB disconnect, device number 36 [ 2100.594363][T17281] usb 10-1: config 0 has no interfaces? [ 2100.600115][T17281] usb 10-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2100.620313][T17281] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2100.638759][T17281] usb 10-1: config 0 descriptor?? [ 2100.683497][T28448] bridge0: port 1(bridge_slave_0) entered blocking state [ 2100.714762][T28448] bridge0: port 1(bridge_slave_0) entered disabled state [ 2100.735382][T28448] device bridge_slave_0 entered promiscuous mode [ 2100.766948][T28448] bridge0: port 2(bridge_slave_1) entered blocking state [ 2100.798543][T28448] bridge0: port 2(bridge_slave_1) entered disabled state [ 2100.821412][T28448] device bridge_slave_1 entered promiscuous mode [ 2100.902229][T17281] usb 10-1: USB disconnect, device number 58 [ 2100.998269][T28448] bridge0: port 2(bridge_slave_1) entered blocking state [ 2101.005468][T28448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2101.012766][T28448] bridge0: port 1(bridge_slave_0) entered blocking state [ 2101.019955][T28448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2101.089772][ T768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2101.112082][ T768] bridge0: port 1(bridge_slave_0) entered disabled state [ 2101.130732][ T768] bridge0: port 2(bridge_slave_1) entered disabled state [ 2101.156435][ T768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2101.174530][ T768] bridge0: port 1(bridge_slave_0) entered blocking state [ 2101.181656][ T768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2101.204723][ T768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2101.220117][ T768] bridge0: port 2(bridge_slave_1) entered blocking state [ 2101.227248][ T768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2101.258344][ T768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2101.276423][ T768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2101.316831][ T768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2101.338922][ T768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2101.365067][ T768] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2101.372676][ T768] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2101.396006][T28448] device veth0_vlan entered promiscuous mode [ 2101.405160][ T8507] device bridge_slave_1 left promiscuous mode [ 2101.411346][ T8507] bridge0: port 2(bridge_slave_1) entered disabled state [ 2101.429284][ T8507] device bridge_slave_0 left promiscuous mode [ 2101.444330][T14422] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 2101.444381][ T8507] bridge0: port 1(bridge_slave_0) entered disabled state [ 2101.475441][ T8507] device veth1_macvtap left promiscuous mode [ 2101.491711][ T8507] device veth0_vlan left promiscuous mode [ 2101.652581][ T768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2101.668457][T28448] device veth1_macvtap entered promiscuous mode [ 2101.689679][ T768] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2101.697923][T14422] usb 4-1: Using ep0 maxpacket: 16 [ 2101.708382][ T768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2101.732338][ T768] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2101.751052][ T768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2101.814445][T14422] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 2101.846108][T14422] usb 4-1: config 0 has no interface number 0 [ 2101.852300][T14422] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2101.893031][T14422] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2101.908017][T14422] usb 4-1: config 0 interface 41 has no altsetting 0 [ 2102.074354][T14422] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2102.101414][T14422] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2102.120491][T14422] usb 4-1: Product: syz [ 2102.124867][T14422] usb 4-1: Manufacturer: syz [ 2102.139763][T14422] usb 4-1: SerialNumber: syz [ 2102.160104][T14422] usb 4-1: config 0 descriptor?? [ 2102.194345][T28473] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2102.201404][T28473] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2102.231631][T28546] 9pnet: Insufficient options for proto=fd [ 2102.438155][T28473] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2102.454289][T28473] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2102.694329][T14422] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 2102.714163][T14422] CoreChips: probe of 4-1:0.41 failed with error -71 [ 2102.729654][T28588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28588 comm=syz.9.43338 [ 2102.739864][T14422] usb 4-1: USB disconnect, device number 37 [ 2102.940228][T28606] netlink: 'syz.9.43346': attribute type 16 has an invalid length. [ 2102.948776][T28606] netlink: 64122 bytes leftover after parsing attributes in process `syz.9.43346'. [ 2103.205881][T28636] netlink: 20 bytes leftover after parsing attributes in process `syz.9.43363'. [ 2103.287941][T28654] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 2103.594380][T14579] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 2103.844403][T14579] usb 1-1: Using ep0 maxpacket: 16 [ 2103.964430][T14579] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 2103.983030][T14579] usb 1-1: config 0 has no interface number 0 [ 2104.000033][T14579] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2104.024283][T14579] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2104.046789][T14579] usb 1-1: config 0 interface 41 has no altsetting 0 [ 2104.204445][T14579] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2104.224004][T14579] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2104.242698][T14579] usb 1-1: Product: syz [ 2104.254459][T14579] usb 1-1: Manufacturer: syz [ 2104.259196][T14579] usb 1-1: SerialNumber: syz [ 2104.295025][T14579] usb 1-1: config 0 descriptor?? [ 2104.314465][T28659] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2104.321486][T28659] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2104.376342][T28739] netlink: 7776 bytes leftover after parsing attributes in process `syz.9.43414'. [ 2104.535187][T28659] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2104.544140][T28659] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2104.620454][T28768] netlink: 7776 bytes leftover after parsing attributes in process `syz.9.43426'. [ 2104.794353][T14579] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 2104.824229][T14579] CoreChips: probe of 1-1:0.41 failed with error -71 [ 2104.834859][T14579] usb 1-1: USB disconnect, device number 43 [ 2105.304656][T28843] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=28843 comm=syz.8.43464 [ 2105.641284][T28869] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=28869 comm=syz.0.43477 [ 2105.835974][T28889] overlayfs: unrecognized mount option "verity=require:/" or missing value [ 2106.114986][T28900] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=28900 comm=syz.3.43491 [ 2106.644141][T28908] overlayfs: unrecognized mount option "verity=require:/" or missing value [ 2107.620066][ T24] audit: type=1326 audit(1930993927.397:6224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28982 comm="syz.7.43532" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8932d86c9 code=0x0 [ 2108.399862][T29081] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2108.415068][T29081] SELinux: (dev overlay, type overlay) has no security xattr handler [ 2108.918075][T29115] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=29115 comm=syz.9.43597 [ 2110.726140][T29188] netlink: 'syz.8.43625': attribute type 16 has an invalid length. [ 2110.743494][T29188] netlink: 64122 bytes leftover after parsing attributes in process `syz.8.43625'. [ 2111.194301][T18602] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 2111.434355][T18602] usb 8-1: Using ep0 maxpacket: 16 [ 2111.554428][T18602] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 2111.572797][T18602] usb 8-1: config 0 has no interface number 0 [ 2111.593033][T18602] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2111.623435][T18602] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2111.643742][T18602] usb 8-1: config 0 interface 41 has no altsetting 0 [ 2111.814454][T18602] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2111.829128][T18602] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2111.849209][T18602] usb 8-1: Product: syz [ 2111.857506][T18602] usb 8-1: Manufacturer: syz [ 2111.867598][T18602] usb 8-1: SerialNumber: syz [ 2111.879331][T18602] usb 8-1: config 0 descriptor?? [ 2111.904336][T29194] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2111.913675][T29194] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2112.164396][T18602] CoreChips: probe of 8-1:0.41 failed with error -71 [ 2112.177483][T18602] usb 8-1: USB disconnect, device number 44 [ 2112.795251][T29254] netlink: 6008 bytes leftover after parsing attributes in process `syz.8.43664'. [ 2113.082644][T29277] overlayfs: missing 'lowerdir' [ 2113.157914][T29282] netlink: 6892 bytes leftover after parsing attributes in process `syz.7.43679'. [ 2113.818532][T29298] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2113.852911][T29298] SELinux: (dev overlay, type overlay) has no security xattr handler [ 2113.935974][T29302] overlayfs: missing 'lowerdir' [ 2113.977944][T29304] netlink: 6892 bytes leftover after parsing attributes in process `syz.3.43691'. [ 2114.266381][T29318] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2114.273977][T29318] SELinux: (dev overlay, type overlay) has no security xattr handler [ 2114.302460][T29322] overlayfs: missing 'lowerdir' [ 2114.666141][T29353] overlayfs: unrecognized mount option "/" or missing value [ 2114.865356][T29373] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=29373 comm=syz.7.43724 [ 2114.960193][T29381] overlayfs: unrecognized mount option "/" or missing value [ 2115.002760][T29385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.43730'. [ 2115.364954][T29403] overlayfs: unrecognized mount option "/" or missing value [ 2117.291270][T29497] netlink: 7720 bytes leftover after parsing attributes in process `syz.3.43787'. [ 2117.568213][T29527] netlink: 7720 bytes leftover after parsing attributes in process `syz.9.43801'. [ 2118.124288][T14579] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 2118.374340][T14579] usb 8-1: Using ep0 maxpacket: 16 [ 2118.494322][T14579] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2118.508705][T29549] netlink: 7720 bytes leftover after parsing attributes in process `syz.0.43813'. [ 2118.514787][T14579] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2118.620731][T29557] netlink: 'syz.3.43819': attribute type 16 has an invalid length. [ 2118.639364][T29557] netlink: 64122 bytes leftover after parsing attributes in process `syz.3.43819'. [ 2118.694378][T14579] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2118.713658][T14579] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2118.733951][T14579] usb 8-1: Product: syz [ 2118.743988][T14579] usb 8-1: Manufacturer: syz [ 2118.754083][T14579] usb 8-1: SerialNumber: syz [ 2118.768194][T14579] usb 8-1: config 0 descriptor?? [ 2118.847964][T29575] netlink: 7748 bytes leftover after parsing attributes in process `syz.3.43826'. [ 2118.988137][T29586] netlink: 'syz.3.43830': attribute type 16 has an invalid length. [ 2119.006423][T29586] netlink: 64122 bytes leftover after parsing attributes in process `syz.3.43830'. [ 2119.019217][T14579] usb 8-1: USB disconnect, device number 45 [ 2119.943186][T29607] netlink: 'syz.8.43842': attribute type 16 has an invalid length. [ 2119.961639][T29607] netlink: 64122 bytes leftover after parsing attributes in process `syz.8.43842'. [ 2120.410028][T29629] netlink: 'syz.3.43853': attribute type 16 has an invalid length. [ 2120.427783][T29629] netlink: 64122 bytes leftover after parsing attributes in process `syz.3.43853'. [ 2120.655704][T14422] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 2120.725291][T29656] netlink: 'syz.3.43865': attribute type 16 has an invalid length. [ 2120.738746][T29656] netlink: 64122 bytes leftover after parsing attributes in process `syz.3.43865'. [ 2120.904359][T14422] usb 10-1: Using ep0 maxpacket: 16 [ 2121.024373][T14422] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2121.044304][T14422] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2121.224407][T14422] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2121.241428][T14422] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2121.259776][T14422] usb 10-1: Product: syz [ 2121.264090][T14422] usb 10-1: Manufacturer: syz [ 2121.284106][T14422] usb 10-1: SerialNumber: syz [ 2121.304343][T14422] usb 10-1: config 0 descriptor?? [ 2121.547100][ T8659] usb 10-1: USB disconnect, device number 59 [ 2122.474353][ T8659] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 2122.724393][ T8659] usb 9-1: Using ep0 maxpacket: 16 [ 2122.854353][ T8659] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 2122.872770][ T8659] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2122.896568][ T8659] usb 9-1: config 0 has no interface number 0 [ 2122.909265][ T8659] usb 9-1: config 0 interface 41 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 2122.937834][ T8659] usb 9-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2122.984664][ T8659] usb 9-1: config 0 interface 41 has no altsetting 0 [ 2123.154556][ T8659] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2123.174301][ T8659] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2123.204217][ T8659] usb 9-1: Product: syz [ 2123.208848][ T8659] usb 9-1: Manufacturer: syz [ 2123.223628][ T8659] usb 9-1: SerialNumber: syz [ 2123.232958][ T8659] usb 9-1: config 0 descriptor?? [ 2123.284880][ T8659] CoreChips: probe of 9-1:0.41 failed with error -22 [ 2123.487890][ T8659] usb 9-1: USB disconnect, device number 50 [ 2124.115114][T29866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43970'. [ 2124.199487][ T8659] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 2124.454274][ T8659] usb 10-1: Using ep0 maxpacket: 16 [ 2124.574504][ T8659] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 2124.582726][ T8659] usb 10-1: config 0 has no interface number 0 [ 2124.604315][ T8659] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2124.624309][ T8659] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2124.644291][ T8659] usb 10-1: config 0 interface 41 has no altsetting 0 [ 2124.804447][ T8659] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2124.824365][ T8659] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2124.832516][ T8659] usb 10-1: Product: syz [ 2124.853490][ T8659] usb 10-1: Manufacturer: syz [ 2124.860058][ T8659] usb 10-1: SerialNumber: syz [ 2124.874417][ T8659] usb 10-1: config 0 descriptor?? [ 2124.894383][T29852] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2124.901450][T29852] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2124.992968][T29914] netlink: 'syz.7.43993': attribute type 16 has an invalid length. [ 2125.011293][T29914] netlink: 64122 bytes leftover after parsing attributes in process `syz.7.43993'. [ 2125.154401][ T8659] CoreChips: probe of 10-1:0.41 failed with error -71 [ 2125.189463][ T8659] usb 10-1: USB disconnect, device number 60 [ 2126.322171][T29940] netlink: 'syz.3.44004': attribute type 16 has an invalid length. [ 2126.340581][T29940] netlink: 64122 bytes leftover after parsing attributes in process `syz.3.44004'. [ 2126.401165][T29946] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=29946 comm=syz.0.44006 [ 2126.404937][T29944] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2126.484359][T29944] SELinux: (dev overlay, type overlay) has no security xattr handler [ 2126.735242][T29970] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=29970 comm=syz.0.44021 [ 2126.851769][T29974] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2126.881515][T29974] SELinux: (dev overlay, type overlay) has no security xattr handler [ 2127.796296][T29994] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=29994 comm=syz.8.44032 [ 2128.092158][T30016] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=30016 comm=syz.7.44045 [ 2129.425063][T30064] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=30064 comm=syz.7.44058 [ 2129.786876][T30097] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=30097 comm=syz.3.44082 [ 2131.222862][T30167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.44117'. [ 2133.295177][T30316] netlink: 7752 bytes leftover after parsing attributes in process `syz.7.44190'. [ 2133.785780][T30342] netlink: 7752 bytes leftover after parsing attributes in process `syz.3.44203'. [ 2134.157203][T30364] netlink: 7752 bytes leftover after parsing attributes in process `syz.9.44214'. [ 2134.475001][T30375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.44213'. [ 2134.633392][T30390] netlink: 7752 bytes leftover after parsing attributes in process `syz.7.44226'. [ 2134.706215][T30402] netlink: 4 bytes leftover after parsing attributes in process `syz.7.44232'. [ 2135.274181][T30468] netlink: 'syz.3.44264': attribute type 16 has an invalid length. [ 2135.294155][T30468] netlink: 64122 bytes leftover after parsing attributes in process `syz.3.44264'. [ 2135.555000][T30504] netlink: 'syz.3.44282': attribute type 16 has an invalid length. [ 2135.573189][T30504] netlink: 64122 bytes leftover after parsing attributes in process `syz.3.44282'. [ 2136.353684][T30601] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2136.378024][T30601] SELinux: (dev overlay, type overlay) has no security xattr handler [ 2141.457047][T30817] netlink: 'syz.3.44431': attribute type 10 has an invalid length. [ 2141.484337][T30817] netlink: 40 bytes leftover after parsing attributes in process `syz.3.44431'. [ 2141.493412][T30817] device wg0 entered promiscuous mode [ 2141.574373][ T1008] usb 9-1: new full-speed USB device number 51 using dummy_hcd [ 2141.944369][ T1008] usb 9-1: config 0 has no interfaces? [ 2141.949977][ T1008] usb 9-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2141.974291][ T1008] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2142.003350][ T1008] usb 9-1: config 0 descriptor?? [ 2142.256846][ T8659] usb 9-1: USB disconnect, device number 51 [ 2142.754874][T30878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.44465'. [ 2146.554317][ T8659] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 2146.804296][ T8659] usb 1-1: Using ep0 maxpacket: 16 [ 2146.924358][ T8659] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 2146.953022][ T8659] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2146.983753][ T8659] usb 1-1: config 0 has no interface number 0 [ 2146.990118][ T8659] usb 1-1: config 0 interface 41 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 2147.021055][ T8659] usb 1-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2147.052832][ T8659] usb 1-1: config 0 interface 41 has no altsetting 0 [ 2147.224376][ T8659] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2147.243753][ T8659] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2147.274107][ T8659] usb 1-1: Product: syz [ 2147.278634][ T8659] usb 1-1: Manufacturer: syz [ 2147.283291][ T8659] usb 1-1: SerialNumber: syz [ 2147.309161][ T8659] usb 1-1: config 0 descriptor?? [ 2147.364829][ T8659] CoreChips: probe of 1-1:0.41 failed with error -22 [ 2147.409760][T30954] netlink: 'syz.8.44499': attribute type 16 has an invalid length. [ 2147.422941][T30954] netlink: 64122 bytes leftover after parsing attributes in process `syz.8.44499'. [ 2147.879319][T30990] netlink: 'syz.9.44512': attribute type 16 has an invalid length. [ 2147.906115][T30990] netlink: 64122 bytes leftover after parsing attributes in process `syz.9.44512'. [ 2147.944614][T30988] bridge0: port 1(bridge_slave_0) entered blocking state [ 2147.962930][T30988] bridge0: port 1(bridge_slave_0) entered disabled state [ 2147.978198][T30988] device bridge_slave_0 entered promiscuous mode [ 2148.004633][T30988] bridge0: port 2(bridge_slave_1) entered blocking state [ 2148.027093][T30988] bridge0: port 2(bridge_slave_1) entered disabled state [ 2148.046683][T30988] device bridge_slave_1 entered promiscuous mode [ 2148.210383][T30988] bridge0: port 2(bridge_slave_1) entered blocking state [ 2148.217533][T30988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2148.224867][T30988] bridge0: port 1(bridge_slave_0) entered blocking state [ 2148.231922][T30988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2148.316282][ T8507] bridge0: port 1(bridge_slave_0) entered disabled state [ 2148.325921][ T8507] bridge0: port 2(bridge_slave_1) entered disabled state [ 2148.342381][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2148.358713][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2148.390274][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2148.404768][ T8507] bridge0: port 1(bridge_slave_0) entered blocking state [ 2148.411877][ T8507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2148.437671][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2148.454571][ T8507] bridge0: port 2(bridge_slave_1) entered blocking state [ 2148.461689][ T8507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2148.494678][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2148.503067][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2148.532850][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2148.552880][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2148.565268][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2148.583237][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2148.602122][T30988] device veth0_vlan entered promiscuous mode [ 2148.627514][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2148.656613][T30988] device veth1_macvtap entered promiscuous mode [ 2148.678357][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2148.704430][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2148.833586][T31011] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2148.850491][T31011] SELinux: (dev overlay, type overlay) has no security xattr handler [ 2148.908451][T31013] netlink: 'syz.3.44528': attribute type 16 has an invalid length. [ 2148.925012][T31013] netlink: 64122 bytes leftover after parsing attributes in process `syz.3.44528'. [ 2148.985978][ T768] device bridge_slave_1 left promiscuous mode [ 2148.993607][ T768] bridge0: port 2(bridge_slave_1) entered disabled state [ 2149.017908][ T768] device bridge_slave_0 left promiscuous mode [ 2149.036082][ T768] bridge0: port 1(bridge_slave_0) entered disabled state [ 2149.053891][ T768] device veth1_macvtap left promiscuous mode [ 2149.066705][ T768] device veth0_vlan left promiscuous mode [ 2149.280858][ T8659] usb 1-1: USB disconnect, device number 44 [ 2149.450140][T31034] netlink: 'syz.9.44539': attribute type 16 has an invalid length. [ 2149.500063][T31034] netlink: 64138 bytes leftover after parsing attributes in process `syz.9.44539'. [ 2149.996185][T31066] netlink: 'syz.7.44554': attribute type 16 has an invalid length. [ 2150.021525][T31066] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.44554'. [ 2150.211783][T31083] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2150.220805][T31083] SELinux: (dev overlay, type overlay) has no security xattr handler [ 2150.519903][T18602] usb 9-1: new full-speed USB device number 52 using dummy_hcd [ 2150.894608][T18602] usb 9-1: config 0 has no interfaces? [ 2150.900224][T18602] usb 9-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2150.930481][T18602] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2150.949466][T18602] usb 9-1: config 0 descriptor?? [ 2151.114100][T31150] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2151.132127][T31150] SELinux: (dev overlay, type overlay) has no security xattr handler [ 2151.203652][T18600] usb 9-1: USB disconnect, device number 52 [ 2152.144278][ T1008] usb 9-1: new full-speed USB device number 53 using dummy_hcd [ 2152.514344][ T1008] usb 9-1: config 0 has no interfaces? [ 2152.520077][ T1008] usb 9-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2152.549602][ T1008] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2152.595050][ T1008] usb 9-1: config 0 descriptor?? [ 2152.836790][ T20] usb 9-1: USB disconnect, device number 53 [ 2153.799210][T31383] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=31383 comm=syz.9.44709 [ 2155.367404][T31535] overlayfs: overlapping lowerdir path [ 2155.440076][T31529] bridge0: port 1(bridge_slave_0) entered blocking state [ 2155.488050][T31529] bridge0: port 1(bridge_slave_0) entered disabled state [ 2155.519834][T31529] device bridge_slave_0 entered promiscuous mode [ 2155.544717][T31529] bridge0: port 2(bridge_slave_1) entered blocking state [ 2155.555926][T31529] bridge0: port 2(bridge_slave_1) entered disabled state [ 2155.580472][T31529] device bridge_slave_1 entered promiscuous mode [ 2155.748775][T31529] bridge0: port 2(bridge_slave_1) entered blocking state [ 2155.756459][T31529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2155.763755][T31529] bridge0: port 1(bridge_slave_0) entered blocking state [ 2155.770849][T31529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2155.848849][T17097] bridge0: port 1(bridge_slave_0) entered disabled state [ 2155.860776][T17097] bridge0: port 2(bridge_slave_1) entered disabled state [ 2155.885831][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2155.905348][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2155.953361][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2155.963068][T17097] bridge0: port 1(bridge_slave_0) entered blocking state [ 2155.970184][T17097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2155.998294][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2156.030563][T17097] bridge0: port 2(bridge_slave_1) entered blocking state [ 2156.037702][T17097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2156.091621][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2156.118990][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2156.144978][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2156.178620][T31582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2156.195896][T31582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2156.213694][T31582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2156.233854][T31529] device veth0_vlan entered promiscuous mode [ 2156.281270][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2156.316788][T31529] device veth1_macvtap entered promiscuous mode [ 2156.325910][T31598] overlayfs: overlapping lowerdir path [ 2156.349314][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2156.367762][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2156.408757][ T8507] device bridge_slave_1 left promiscuous mode [ 2156.417480][ T8507] bridge0: port 2(bridge_slave_1) entered disabled state [ 2156.441802][ T8507] device bridge_slave_0 left promiscuous mode [ 2156.454416][ T8507] bridge0: port 1(bridge_slave_0) entered disabled state [ 2156.485340][ T8507] device veth1_macvtap left promiscuous mode [ 2156.491523][ T8507] device veth0_vlan left promiscuous mode [ 2159.035533][T31795] netlink: 7752 bytes leftover after parsing attributes in process `syz.0.44909'. [ 2160.382572][T31893] netlink: 'syz.0.44943': attribute type 16 has an invalid length. [ 2160.400869][T31893] netlink: 64130 bytes leftover after parsing attributes in process `syz.0.44943'. [ 2161.585507][T31918] netlink: 'syz.8.44967': attribute type 16 has an invalid length. [ 2161.593472][T31918] netlink: 64130 bytes leftover after parsing attributes in process `syz.8.44967'. [ 2161.843747][T31935] fuseblk: Bad value for 'fd' [ 2162.005982][T31940] netlink: 100 bytes leftover after parsing attributes in process `syz.8.44979'. [ 2162.096815][T31948] netlink: 'syz.8.44982': attribute type 16 has an invalid length. [ 2162.134268][T31948] netlink: 64130 bytes leftover after parsing attributes in process `syz.8.44982'. [ 2162.736039][T31971] netlink: 'syz.8.44993': attribute type 16 has an invalid length. [ 2162.743995][T31971] netlink: 64122 bytes leftover after parsing attributes in process `syz.8.44993'. [ 2164.459035][T32070] fuseblk: Bad value for 'fd' [ 2167.134338][ T1008] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 2167.504341][ T1008] usb 1-1: config 0 has no interfaces? [ 2167.509942][ T1008] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2167.539379][ T1008] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2167.558458][ T1008] usb 1-1: config 0 descriptor?? [ 2167.806371][ T1008] usb 1-1: USB disconnect, device number 45 [ 2167.954799][T32249] fuseblk: Bad value for 'fd' [ 2168.105790][T32269] fuseblk: Bad value for 'fd' [ 2168.794321][ T1008] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 2169.154337][ T1008] usb 1-1: config 0 has no interfaces? [ 2169.159936][ T1008] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2169.180219][ T1008] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2169.203441][ T1008] usb 1-1: config 0 descriptor?? [ 2169.446965][T14422] usb 1-1: USB disconnect, device number 46 [ 2170.183856][T32375] netlink: 388 bytes leftover after parsing attributes in process `syz.0.45190'. [ 2172.225471][ T24] audit: type=1400 audit(1930993992.007:6225): avc: denied { create } for pid=32470 comm="syz.0.45236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2172.864309][T14422] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 2173.134845][T14422] usb 4-1: Using ep0 maxpacket: 16 [ 2173.254323][T14422] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 2173.282908][T14422] usb 4-1: config 0 has no interface number 0 [ 2173.291377][T14422] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2173.311511][T14422] usb 4-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2173.322261][T14422] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2173.332504][T14422] usb 4-1: config 0 interface 41 has no altsetting 0 [ 2173.514408][T14422] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2173.533867][T14422] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2173.564249][T14422] usb 4-1: Product: syz [ 2173.568459][T14422] usb 4-1: Manufacturer: syz [ 2173.573065][T14422] usb 4-1: SerialNumber: syz [ 2173.589381][T14422] usb 4-1: config 0 descriptor?? [ 2173.614322][T32487] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2173.634887][T14422] CoreChips: probe of 4-1:0.41 failed with error -22 [ 2175.611505][T17281] usb 4-1: USB disconnect, device number 38 [ 2176.314275][ T8659] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2176.564257][ T8659] usb 4-1: Using ep0 maxpacket: 16 [ 2176.694298][ T8659] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 2176.712604][ T8659] usb 4-1: config 0 has no interface number 0 [ 2176.734294][ T8659] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2176.764500][ T8659] usb 4-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2176.784278][ T8659] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2176.804283][ T8659] usb 4-1: config 0 interface 41 has no altsetting 0 [ 2176.984404][ T8659] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2176.993495][ T8659] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2177.020527][ T8659] usb 4-1: Product: syz [ 2177.044286][ T8659] usb 4-1: Manufacturer: syz [ 2177.048931][ T8659] usb 4-1: SerialNumber: syz [ 2177.058314][ T8659] usb 4-1: config 0 descriptor?? [ 2177.084452][T32594] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2177.104816][ T8659] CoreChips: probe of 4-1:0.41 failed with error -22 [ 2177.369118][T32641] netlink: 100 bytes leftover after parsing attributes in process `syz.9.45318'. [ 2177.625839][T32664] netlink: 100 bytes leftover after parsing attributes in process `syz.8.45330'. [ 2179.043485][T14579] usb 4-1: USB disconnect, device number 39 [ 2179.714269][T14579] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 2179.974267][T14579] usb 4-1: Using ep0 maxpacket: 16 [ 2180.094392][T14579] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 2180.114266][T14579] usb 4-1: config 0 has no interface number 0 [ 2180.120419][T14579] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2180.154257][T14579] usb 4-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2180.184416][T14579] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2180.212678][T14579] usb 4-1: config 0 interface 41 has no altsetting 0 [ 2180.374417][T14579] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2180.399147][T14579] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2180.423887][T14579] usb 4-1: Product: syz [ 2180.429229][T14579] usb 4-1: Manufacturer: syz [ 2180.433927][T14579] usb 4-1: SerialNumber: syz [ 2180.443050][T14579] usb 4-1: config 0 descriptor?? [ 2180.474324][ T311] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2180.494888][T14579] CoreChips: probe of 4-1:0.41 failed with error -22 [ 2182.438132][T17281] usb 4-1: USB disconnect, device number 40 [ 2182.535012][ T468] netlink: 100 bytes leftover after parsing attributes in process `syz.0.45462'. [ 2183.135762][ T519] netlink: 100 bytes leftover after parsing attributes in process `syz.7.45473'. [ 2184.643484][ T576] fuseblk: Invalid rootmode [ 2184.844457][ T610] fuseblk: Invalid rootmode [ 2186.666581][ T749] fuseblk: Invalid rootmode [ 2186.986442][ T787] fuseblk: Bad value for 'fd' [ 2190.063039][ T1078] netlink: 7544 bytes leftover after parsing attributes in process `syz.0.45752'. [ 2190.451756][ T1104] netlink: 7544 bytes leftover after parsing attributes in process `syz.0.45765'. [ 2190.969451][ T1127] netlink: 7544 bytes leftover after parsing attributes in process `syz.0.45776'. [ 2191.476954][ T1146] netlink: 7652 bytes leftover after parsing attributes in process `syz.9.45787'. [ 2192.364443][ T1189] netlink: 7652 bytes leftover after parsing attributes in process `syz.0.45798'. [ 2192.714421][ T1217] netlink: 7652 bytes leftover after parsing attributes in process `syz.8.45820'. [ 2193.005245][ T1247] netlink: 7704 bytes leftover after parsing attributes in process `syz.0.45835'. [ 2193.892697][ T1315] bridge0: port 1(bridge_slave_0) entered blocking state [ 2193.914253][ T1315] bridge0: port 1(bridge_slave_0) entered disabled state [ 2193.922332][ T1315] device bridge_slave_0 entered promiscuous mode [ 2193.931288][ T1315] bridge0: port 2(bridge_slave_1) entered blocking state [ 2193.944505][ T1315] bridge0: port 2(bridge_slave_1) entered disabled state [ 2193.952204][ T1315] device bridge_slave_1 entered promiscuous mode [ 2194.071078][ T1315] bridge0: port 2(bridge_slave_1) entered blocking state [ 2194.078219][ T1315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2194.085584][ T1315] bridge0: port 1(bridge_slave_0) entered blocking state [ 2194.092650][ T1315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2194.192965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2194.224946][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 2194.234487][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 2194.277863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2194.286904][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 2194.294019][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2194.314585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2194.323348][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 2194.330451][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2194.364355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2194.379283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2194.414910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2194.435549][ T1315] device veth0_vlan entered promiscuous mode [ 2194.445116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2194.469697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2194.484673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2194.520211][ T1315] device veth1_macvtap entered promiscuous mode [ 2194.528553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2194.549352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2194.584516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2194.615466][ T8507] device bridge_slave_1 left promiscuous mode [ 2194.621662][ T8507] bridge0: port 2(bridge_slave_1) entered disabled state [ 2194.672818][ T8507] device bridge_slave_0 left promiscuous mode [ 2194.682371][ T8507] bridge0: port 1(bridge_slave_0) entered disabled state [ 2194.708030][ T8507] device veth1_macvtap left promiscuous mode [ 2194.724413][ T8507] device veth0_vlan left promiscuous mode [ 2195.074691][ T1369] bridge0: port 1(bridge_slave_0) entered blocking state [ 2195.081781][ T1369] bridge0: port 1(bridge_slave_0) entered disabled state [ 2195.114674][ T1369] device bridge_slave_0 entered promiscuous mode [ 2195.154777][ T1369] bridge0: port 2(bridge_slave_1) entered blocking state [ 2195.173436][ T1369] bridge0: port 2(bridge_slave_1) entered disabled state [ 2195.192794][ T1369] device bridge_slave_1 entered promiscuous mode [ 2195.374702][ T1369] bridge0: port 2(bridge_slave_1) entered blocking state [ 2195.381783][ T1369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2195.389105][ T1369] bridge0: port 1(bridge_slave_0) entered blocking state [ 2195.396175][ T1369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2195.474828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2195.486218][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 2195.508543][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 2195.543561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2195.562400][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 2195.569543][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2195.603395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2195.624547][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 2195.631645][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2195.663958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2195.683214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2195.722016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2195.756644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2195.793487][ T1369] device veth0_vlan entered promiscuous mode [ 2195.807384][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2195.822686][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2195.841323][T31582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2195.887078][ T1369] device veth1_macvtap entered promiscuous mode [ 2195.899254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2195.924834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2195.986877][ T8507] device bridge_slave_1 left promiscuous mode [ 2195.993208][ T8507] bridge0: port 2(bridge_slave_1) entered disabled state [ 2196.020007][ T8507] device bridge_slave_0 left promiscuous mode [ 2196.041052][ T8507] bridge0: port 1(bridge_slave_0) entered disabled state [ 2196.058698][ T8507] device veth1_macvtap left promiscuous mode [ 2196.075529][ T8507] device veth0_vlan left promiscuous mode [ 2196.665561][ T1555] fuseblk: Bad value for 'fd' [ 2196.903383][ T1578] fuseblk: Bad value for 'fd' [ 2197.163221][ T1603] fuseblk: Bad value for 'fd' [ 2197.378490][ T1626] fuseblk: Bad value for 'fd' [ 2198.524494][ T1696] fuseblk: Invalid rootmode [ 2199.525820][ T1817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.46105'. [ 2201.547071][ T1893] bridge0: port 1(bridge_slave_0) entered blocking state [ 2201.563922][ T1893] bridge0: port 1(bridge_slave_0) entered disabled state [ 2201.571563][ T1893] device bridge_slave_0 entered promiscuous mode [ 2201.581343][ T1893] bridge0: port 2(bridge_slave_1) entered blocking state [ 2201.588651][ T1893] bridge0: port 2(bridge_slave_1) entered disabled state [ 2201.596454][ T1893] device bridge_slave_1 entered promiscuous mode [ 2201.772761][ T1893] bridge0: port 2(bridge_slave_1) entered blocking state [ 2201.779876][ T1893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2201.787210][ T1893] bridge0: port 1(bridge_slave_0) entered blocking state [ 2201.794281][ T1893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2201.857351][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2201.866043][T17097] bridge0: port 1(bridge_slave_0) entered disabled state [ 2201.884560][T17097] bridge0: port 2(bridge_slave_1) entered disabled state [ 2201.913780][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2201.935135][T17097] bridge0: port 1(bridge_slave_0) entered blocking state [ 2201.942243][T17097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2201.950785][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2201.960569][T17097] bridge0: port 2(bridge_slave_1) entered blocking state [ 2201.967668][T17097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2201.975309][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2201.997034][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2202.005932][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2202.020030][ T1893] device veth0_vlan entered promiscuous mode [ 2202.029623][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2202.038490][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2202.046940][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2202.071130][ T1893] device veth1_macvtap entered promiscuous mode [ 2202.087401][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2202.108607][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2202.138190][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2202.209243][ T8507] device bridge_slave_1 left promiscuous mode [ 2202.234104][ T8507] bridge0: port 2(bridge_slave_1) entered disabled state [ 2202.251976][ T8507] device bridge_slave_0 left promiscuous mode [ 2202.263986][ T8507] bridge0: port 1(bridge_slave_0) entered disabled state [ 2202.284942][ T8507] device veth1_macvtap left promiscuous mode [ 2202.291009][ T8507] device veth0_vlan left promiscuous mode [ 2202.724773][ T1977] fuseblk: Invalid rootmode [ 2203.051231][ T2001] fuseblk: Invalid rootmode [ 2203.686395][ T2031] fuseblk: Bad value for 'fd' [ 2204.102538][ T2059] fuseblk: Bad value for 'fd' [ 2204.273347][ T1315] ------------[ cut here ]------------ [ 2204.284725][ T1315] WARNING: CPU: 1 PID: 1315 at fs/inode.c:304 drop_nlink+0xc5/0x110 [ 2204.313297][ T1315] Modules linked in: [ 2204.317537][ T1315] CPU: 1 PID: 1315 Comm: syz-executor Not tainted syzkaller #0 [ 2204.339228][ T1315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2204.349788][ T1315] RIP: 0010:drop_nlink+0xc5/0x110 [ 2204.359683][ T1315] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 93 22 f2 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 bb 30 b8 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 2204.393759][ T1315] RSP: 0018:ffffc90000de7cd0 EFLAGS: 00010293 [ 2204.415740][ T1315] RAX: ffffffff81ab74e5 RBX: ffff888185c9e4a0 RCX: ffff888125e60000 [ 2204.427676][ T1315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2204.443937][ T1315] RBP: ffffc90000de7cf8 R08: 0000000000000004 R09: 0000000000000003 [ 2204.471823][ T1315] R10: fffff520001bcf88 R11: 1ffff920001bcf88 R12: dffffc0000000000 [ 2204.481426][ T1315] R13: 1ffff11030b93c9d R14: ffff888185c9e4e8 R15: 0000000000000000 [ 2204.510297][ T1315] FS: 0000555569fa3500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2204.530505][ T1315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2204.543937][ T1315] CR2: 00000000000000da CR3: 0000000118319000 CR4: 00000000003506b0 [ 2204.562169][ T1315] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2204.580545][ T1315] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 2204.589140][ T2085] netlink: 7752 bytes leftover after parsing attributes in process `syz.8.46235'. [ 2204.609090][ T1315] Call Trace: [ 2204.612528][ T1315] shmem_rmdir+0x5b/0x90 [ 2204.629328][ T1315] vfs_rmdir+0x1b3/0x3e0 [ 2204.633632][ T1315] incfs_kill_sb+0xfe/0x210 [ 2204.649572][ T1315] deactivate_locked_super+0xa0/0x100 [ 2204.659659][ T1315] deactivate_super+0xaf/0xe0 [ 2204.669765][ T1315] cleanup_mnt+0x446/0x500 [ 2204.674618][ T1315] __cleanup_mnt+0x19/0x20 [ 2204.679076][ T1315] task_work_run+0x127/0x190 [ 2204.715278][ T1315] exit_to_user_mode_loop+0xcb/0xe0 [ 2204.720654][ T1315] exit_to_user_mode_prepare+0x76/0xa0 [ 2204.743738][ T1315] syscall_exit_to_user_mode+0x1d/0x40 [ 2204.756713][ T1315] do_syscall_64+0x3d/0x40 [ 2204.771372][ T1315] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2204.777872][ T1315] RIP: 0033:0x7f8534f8f9f7 [ 2204.788799][ T1315] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 2204.829004][ T1315] RSP: 002b:00007fff110decf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2204.848297][ T1315] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8534f8f9f7 [ 2204.863790][ T1315] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff110dedb0 [ 2204.882348][ T1315] RBP: 00007fff110dedb0 R08: 0000000000000000 R09: 0000000000000000 [ 2204.890665][ T1315] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff110dfe40 [ 2204.899052][ T1315] R13: 00007f8535010d7d R14: 000000000021a246 R15: 00007fff110dfe80 [ 2204.907128][ T1315] ---[ end trace fa4e5d2225a35d66 ]--- [ 2204.912750][ T1315] ================================================================== [ 2204.920841][ T1315] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 2204.927103][ T1315] Write of size 4 at addr 0000000000000170 by task syz-executor/1315 [ 2204.935177][ T1315] [ 2204.937526][ T1315] CPU: 0 PID: 1315 Comm: syz-executor Tainted: G W syzkaller #0 [ 2204.946470][ T1315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2204.956542][ T1315] Call Trace: [ 2204.959961][ T1315] __dump_stack+0x21/0x24 [ 2204.964314][ T1315] dump_stack_lvl+0x169/0x1d8 [ 2204.969002][ T1315] ? thaw_kernel_threads+0x220/0x220 [ 2204.974302][ T1315] ? show_regs_print_info+0x18/0x18 [ 2204.979640][ T1315] ? _raw_spin_lock+0x8e/0xe0 [ 2204.984346][ T1315] ? _raw_spin_trylock_bh+0x130/0x130 [ 2204.989734][ T1315] ? ihold+0x20/0x60 [ 2204.993640][ T1315] kasan_report+0xd8/0x130 [ 2204.998076][ T1315] ? ihold+0x20/0x60 [ 2205.001979][ T1315] kasan_check_range+0x280/0x290 [ 2205.006949][ T1315] __kasan_check_write+0x14/0x20 [ 2205.011919][ T1315] ihold+0x20/0x60 [ 2205.015660][ T1315] vfs_rmdir+0x247/0x3e0 [ 2205.019917][ T1315] incfs_kill_sb+0xfe/0x210 [ 2205.024423][ T1315] deactivate_locked_super+0xa0/0x100 [ 2205.029790][ T1315] deactivate_super+0xaf/0xe0 [ 2205.034468][ T1315] cleanup_mnt+0x446/0x500 [ 2205.038882][ T1315] __cleanup_mnt+0x19/0x20 [ 2205.043387][ T1315] task_work_run+0x127/0x190 [ 2205.047976][ T1315] exit_to_user_mode_loop+0xcb/0xe0 [ 2205.053183][ T1315] exit_to_user_mode_prepare+0x76/0xa0 [ 2205.058639][ T1315] syscall_exit_to_user_mode+0x1d/0x40 [ 2205.064180][ T1315] do_syscall_64+0x3d/0x40 [ 2205.068609][ T1315] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2205.074498][ T1315] RIP: 0033:0x7f8534f8f9f7 [ 2205.078914][ T1315] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 2205.098526][ T1315] RSP: 002b:00007fff110decf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2205.106940][ T1315] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8534f8f9f7 [ 2205.114911][ T1315] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff110dedb0 [ 2205.122880][ T1315] RBP: 00007fff110dedb0 R08: 0000000000000000 R09: 0000000000000000 [ 2205.130870][ T1315] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff110dfe40 [ 2205.138858][ T1315] R13: 00007f8535010d7d R14: 000000000021a246 R15: 00007fff110dfe80 [ 2205.146834][ T1315] ================================================================== [ 2205.154900][ T1315] Disabling lock debugging due to kernel taint [ 2205.271347][ T1315] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 2205.279213][ T1315] #PF: supervisor write access in kernel mode [ 2205.285299][ T1315] #PF: error_code(0x0002) - not-present page [ 2205.291302][ T1315] PGD 114c12067 P4D 114c12067 PUD 0 [ 2205.296625][ T1315] Oops: 0002 [#1] PREEMPT SMP KASAN [ 2205.301857][ T1315] CPU: 1 PID: 1315 Comm: syz-executor Tainted: G B W syzkaller #0 [ 2205.310813][ T1315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2205.320907][ T1315] RIP: 0010:ihold+0x26/0x60 [ 2205.325427][ T1315] Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 d1 28 b8 ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 80 1a f2 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 51 [ 2205.345162][ T1315] RSP: 0018:ffffc90000de7d10 EFLAGS: 00010246 [ 2205.351245][ T1315] RAX: ffff888125e60000 RBX: 0000000000000000 RCX: 0000000000000286 [ 2205.359230][ T1315] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 2205.367252][ T1315] RBP: ffffc90000de7d20 R08: 0000000000000004 R09: 0000000000000003 [ 2205.375269][ T1315] R10: fffffbfff0d8ee48 R11: 1ffffffff0d8ee48 R12: 1ffff110235ed628 [ 2205.383253][ T1315] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 2205.391247][ T1315] FS: 0000555569fa3500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 2205.400192][ T1315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2205.406789][ T1315] CR2: 0000000000000170 CR3: 0000000118319000 CR4: 00000000003506a0 [ 2205.414780][ T1315] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2205.422764][ T1315] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2205.430750][ T1315] Call Trace: [ 2205.434056][ T1315] vfs_rmdir+0x247/0x3e0 [ 2205.438360][ T1315] incfs_kill_sb+0xfe/0x210 [ 2205.442889][ T1315] deactivate_locked_super+0xa0/0x100 [ 2205.448276][ T1315] deactivate_super+0xaf/0xe0 [ 2205.452970][ T1315] cleanup_mnt+0x446/0x500 [ 2205.457399][ T1315] __cleanup_mnt+0x19/0x20 [ 2205.461828][ T1315] task_work_run+0x127/0x190 [ 2205.466430][ T1315] exit_to_user_mode_loop+0xcb/0xe0 [ 2205.471742][ T1315] exit_to_user_mode_prepare+0x76/0xa0 [ 2205.477210][ T1315] syscall_exit_to_user_mode+0x1d/0x40 [ 2205.482684][ T1315] do_syscall_64+0x3d/0x40 [ 2205.487125][ T1315] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2205.493036][ T1315] RIP: 0033:0x7f8534f8f9f7 [ 2205.497461][ T1315] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 2205.517392][ T1315] RSP: 002b:00007fff110decf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2205.525830][ T1315] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8534f8f9f7 [ 2205.533827][ T1315] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff110dedb0 [ 2205.541825][ T1315] RBP: 00007fff110dedb0 R08: 0000000000000000 R09: 0000000000000000 [ 2205.549841][ T1315] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff110dfe40 [ 2205.557837][ T1315] R13: 00007f8535010d7d R14: 000000000021a246 R15: 00007fff110dfe80 [ 2205.565924][ T1315] Modules linked in: [ 2205.569850][ T1315] CR2: 0000000000000170 [ 2205.574042][ T1315] ---[ end trace fa4e5d2225a35d67 ]--- [ 2205.579539][ T1315] RIP: 0010:ihold+0x26/0x60 [ 2205.584070][ T1315] Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 d1 28 b8 ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 80 1a f2 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 51 [ 2205.603699][ T1315] RSP: 0018:ffffc90000de7d10 EFLAGS: 00010246 [ 2205.609791][ T1315] RAX: ffff888125e60000 RBX: 0000000000000000 RCX: 0000000000000286 [ 2205.617787][ T1315] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 2205.625785][ T1315] RBP: ffffc90000de7d20 R08: 0000000000000004 R09: 0000000000000003 [ 2205.633783][ T1315] R10: fffffbfff0d8ee48 R11: 1ffffffff0d8ee48 R12: 1ffff110235ed628 [ 2205.641790][ T1315] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 2205.649792][ T1315] FS: 0000555569fa3500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 2205.658749][ T1315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2205.665368][ T1315] CR2: 0000000000000170 CR3: 0000000118319000 CR4: 00000000003506a0 [ 2205.673380][ T1315] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2205.681397][ T1315] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2205.689391][ T1315] Kernel panic - not syncing: Fatal exception [ 2205.695742][ T1315] Kernel Offset: disabled [ 2205.700166][ T1315] Rebooting in 86400 seconds..