Extracting prog: 5m12.112470248s
Minimizing prog: 39m26.327145091s
Simplifying prog options: 0s
Extracting C: 1m27.985615668s
Simplifying C: 15m20.650464433s


extracting reproducer from 30 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$TOKEN_CREATE-openat$ptmx-ioctl$TIOCSETD-fcntl$dupfd-ioctl$TCFLSH-ioctl$TIOCSETD-ioctl$TIOCSTI-bpf$MAP_CREATE_TAIL_CALL-bpf$PROG_LOAD-bpf$PROG_LOAD
detailed listing:
executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$TCFLSH(r2, 0x400455c8, 0x1) (async)
ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffbe)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xdb) (async)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0xffffffff, '\x00', 0x0, r2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"/104], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {0x95, 0x0, 0x0, 0xa000000}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

program did not crash
single: failed to extract reproducer
bisect: bisecting 30 programs with base timeout 30s
testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 20, 4, 9, 30, 29, 22, 30, 30, 8, 17, 32, 6, 11, 19, 30, 30, 30, 30, 4, 2, 20, 30, 30, 30, 30, 9, 12, 12, 4]
detailed listing:
executing program 3:
pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c)
executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x20000008b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="40050c0000000c220571db4cb5331771e678"], 0x0, 0x0, 0x0}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) (async)
r3 = socket(0xa, 0x3, 0x3a)
unshare(0x20040600) (async)
listen(r3, 0x40) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e21, @remote}]}, &(0x7f00000002c0)=0x10)
executing program 3:
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c00000007000000000000000000000d0a000000000000000100000604"], &(0x7f0000000f40)=""/4089, 0x8b, 0xff9, 0x1}, 0x28)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x1800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000040)=[@acquire_done={0x40106309, 0x1}], 0x2b, 0x0, &(0x7f0000000080)="2fb4281bd56d5f424c038a52bcb3c781d8bbb11af98e5936b60abafe4700fb88181209874ad84716c4ed51"})
executing program 3:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syncfs(r0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0x0, "c3e1b7fc", {0x3, 0x100, 0x0, 0x1, 0x6c03, 0x3, 0x1}})
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @loopback, 0x0, 0x0, 'lc\x00', 0x13, 0x0, 0x1a}, 0x2c)
r3 = socket$inet_sctp(0x2, 0x0, 0x84)
sendmmsg$inet_sctp(r3, &(0x7f0000001680)=[{&(0x7f0000000000)=@in={0x2, 0xfffc, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="9e", 0x1}], 0x1}], 0x1, 0xfc)
executing program 2:
syz_usb_connect$uac1(0x0, 0xa5, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000020904000000010100000a24010000000002"], 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000100)=0x7, 0x4)
recvmmsg$unix(r1, &(0x7f0000001d40)=[{{0x0, 0x5a, 0x0}}], 0x40001ec, 0x102, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x500, 0x7fffffff, 0x24}, 0x48) (async, rerun: 32)
sendmmsg$inet(r1, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)='\t', 0x1}], 0x1}}], 0x1, 0x4000010) (rerun: 32)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)='X\x00\x00\x00', 0x4}], 0x1) (async)
close(0x3) (async)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x189042, 0x0) (async)
ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000180))
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x13, r3, 0x0) (async)
r4 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000021000000000000000002"], 0x48) (async, rerun: 64)
r5 = socket$netlink(0x10, 0x3, 0x8000000004) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) (async)
dup2(r6, r7)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000001000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
r9 = socket$kcm(0x21, 0x2, 0x2) (async, rerun: 64)
r10 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 64)
bind$vsock_stream(r10, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) (async)
sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0xfffffc00, @local, 0x3}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001001000001", @ANYRES16=r10], 0x18}, 0x8004) (async)
sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)
sendmmsg$inet(r8, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x46054) (async)
setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000100)={0x10000001, 0xffffffff}, 0x8)
close(r8)
executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x1, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10)
timer_gettime(0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETKEYCODE(r5, 0x4b4d, &(0x7f00000002c0)={0x5, 0x5})
r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r6) (async)
syz_usb_disconnect(r6)
syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) (async)
r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0)
ioctl$EVIOCRMFF(r6, 0x550c, 0x0) (async)
ioctl$EVIOCRMFF(r6, 0x550c, 0x0)
syz_usb_control_io$uac1(r7, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0)
syz_usb_control_io$uac1(r7, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r7, 0x0, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r8, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002740)=""/4090, 0xffa}, {&(0x7f0000000300)=""/130, 0x82}], 0x2}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)=""/104, 0x68}, {&(0x7f0000001740)=""/4080, 0xff0}, {&(0x7f0000004740)=""/4083, 0xff3}], 0x3}, 0x8}], 0x3, 0x2, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r1, @ANYRES32=r5], 0x34}, 0x1, 0x0, 0x0, 0x4000801}, 0x0)
executing program 4:
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10)
socket$can_raw(0x1d, 0x3, 0x1)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0})
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1})
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040), 0x10)
listen(r2, 0x0)
r3 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r3, &(0x7f0000000080), 0x10)
sendmmsg(r3, &(0x7f0000000440), 0x4000079, 0x4008054)
executing program 3:
ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0e05403, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socket(0x1a, 0xa, 0x9)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000480)="0a1a0320c1de3ab08c1c12da03312d57d0c3a133315ff88f6ecc84bb863abef22d41fca9abd599", 0x27, 0xfffffffffffffffc)
keyctl$describe(0x6, r3, &(0x7f0000001480)=""/226, 0xe2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000000005000100070000002d1d1a5cc7a9e36886a8af781992c67d7d43740ddd8e41301cfa7513f1139d9cbce47dd6820da0b128d4be8aa95139eb0ef4f761d04d30aeebbbe932cf8fd3f0979c2331e42dc7202d365d5997169724340271cff0eb5c77b960502885486d578fc27ec6354e96de5db069a97800a5e255b3f2c2b8d2a81107dde0f7ae3f49026d1f2a862b78dce5529a151b9d0b355926ac55abc37c4934c4fc008b85cea7cd6c7d7e33297283f889a170e806773ea61042f200cfdc37df69bfce"], 0x1c}}, 0x0)
r5 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x10000, 0x0)
write$char_usb(r5, &(0x7f00000003c0)="00b9479de219d232f93a4e565ed7392166d07d3cab9988dae2fccbb5b94e7f4abc2a5d8c19a486328288b8f4dbcf017cf21a57c0866b7b86e38a813c5cd51d3a470b0f49947c67d36a4e79661e1d0fe71936d72b4e23bf49d36fa3f0c2a4c3", 0x5f)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000340)=[{0x5, 0x7, 0xe4, 0x7}, {0x9, 0x6, 0x10, 0x4}, {0x7, 0x0, 0x9, 0x1000}, {0x8, 0x2, 0xcf, 0x7}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000240)="c4e1e97505bd000000b8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b8330500000000210000000f01c1c4e17929d8", 0x57}], 0x1, 0x11, 0x0, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r7, &(0x7f0000000000)=ANY=[], 0xff2e)
ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0000fa00ea8000"})
r8 = syz_open_pts(r7, 0x0)
dup3(r8, r7, 0x0)
ioctl$TIOCSETD(r8, 0x541b, &(0x7f0000000ec0)=0x5)
sigaltstack(&(0x7f0000000040)={0x0, 0x80000000, 0x7e2c87a6242f95be}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
executing program 2:
timer_create(0x0, 0x0, &(0x7f0000000140)=<r0=>0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
timer_gettime(r0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01f71800000000000000240000002400000002000000000000000000000400000003000000000000000000000000000000000000000d0200000000000006"], 0xffffffffffffffff, 0x3e, 0x0, 0xa}, 0x28)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006"], 0x68}}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0)
close(0x4)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae01, 0x1)
r4 = open(&(0x7f0000001600)='./file0\x00', 0x143142, 0x0)
ftruncate(0xffffffffffffffff, 0x2000000)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100), 0x1814000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r8}})
ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000140)={0x1, 0xfffffffffffffffb})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
r10 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}})
executing program 4:
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000040)=[{}], 0x1, 0x7, 0x0, 0x0, 0x0, 0x2e})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0})
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0x951b000, 0xa, 0x6, 0xb6, <r2=>0x0})
sched_setscheduler(r2, 0x0, &(0x7f0000000100)=0x8)
executing program 4:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000001900)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000002a00000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed327db7eb29b55ec00", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000c00000001"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x4, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x24, @short={0x2, 0x1, 0x3}}, 0x14, &(0x7f0000000440)={&(0x7f00000000c0)="7ead2a9cfda5fe662e5dc1eedc4fb1a9b22492af7325b169edbbb410756248d1f9b0570e27d69970cedc868e1b52da7dab4b1f9a0064b0d83a8e0e2bcfe2e6", 0x3f}, 0x1, 0x0, 0x0, 0x4}, 0x800)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0xeeee0000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2000, 0x10, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x4}, {0x5000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x0, 0x58, 0x8, 0x4}, {0x0, 0x8000000, 0xb, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5}, {0xe000, 0x100000, 0x4, 0x8, 0x80, 0xfb, 0x0, 0x7, 0x1a, 0x2}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x0, 0x7, 0x5}, {0x2000, 0x400}, {}, 0xddf8ffdb, 0x0, 0x1, 0x120, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]})
executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f00000002c0)=0x401, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) (async)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff9, @ipv4}, 0x1c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0) (async)
listen(r3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0xfff) (async)
listen(r4, 0xfff)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f00000001c0))
listen(r7, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0) (async)
listen(r8, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x3, 0x11}, 0x20)
r10 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_buf(r10, 0x6, 0x1a, &(0x7f0000000040)=""/45, &(0x7f0000000180)=0x2d) (async)
getsockopt$inet_tcp_buf(r10, 0x6, 0x1a, &(0x7f0000000040)=""/45, &(0x7f0000000180)=0x2d)
executing program 4:
r0 = inotify_init1(0x800)
close(r0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x4004af07, 0xfffffffffffffffa) (async)
syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a1a44000010203010902630002010000000904800001020900000524cf36791b9d256668cffb3f5cfb06000105240000000d240f01fb000000000000000006341a00f6c6a988a6715e4fe60457202071faa0f314fad289505b67fc41acc259cc219851f9565940b1b0051ccccb52dbce7ed47f5369d1b32ad86bccb6dfec134ac3974be69017571bd07b8e6092cdb385fa43a2e81cf53abf362fa28cf0e246a5ac55123c48800de36c"], 0x0)
executing program 0:
r0 = openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x0, 0x90)
read$FUSE(r0, 0x0, 0x35)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb, 0x2e, 0x35, 0x10, 0x413, 0x6026, 0x18aa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa6, 0x9b, 0xce}}]}}]}}, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = dup2(r2, r1)
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = io_uring_setup(0x868, &(0x7f00000000c0)={0x0, 0xfafb, 0x400, 0x2})
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x14, &(0x7f0000000000)=[0xffffffff], 0x2)
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r4, 0x1e, &(0x7f0000000080)={r3}, 0x1)
syz_usb_connect$uac1(0x0, 0xd3, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102000000ff6b1d01014000010203010902c10003017f70050904000000010100000a2401f41e79ec01020904010000010200000904010101010200000924020145039d0c220924020101027f819307247ee4260510072401025c010009240202050001000709050109100008e90907250180070400090402000001020000090402010101020000072401060405000f240202060001ff10303d3cbaf9e90e240201050101007c33a71de2820c240202ff0103000341adfd09240201060305815509058209200000070907250180080800"], &(0x7f0000000200)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x3, 0x4, 0xa7, 0x20}, 0xc, &(0x7f0000000180)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x3, 0x8}]}, 0x1, [{0xfffffd79, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x81d}}]})
executing program 2:
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
socket$inet6(0xa, 0xf, 0xc5)
fanotify_init(0xf00, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x1, 0x2, 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff})
r3 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x800, 0x0, 0x3a6}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000200)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x18}, 0x0, 0x20040000})
io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00'})
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0xffff, 0x0, 0x5, 0x24, 0x1, 0x3, 0x3c5b, 0x1, 0x24, 0x6, 0x5, 0x5, 0x2, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x8, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x200, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xffffffbe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x7f, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x2, 0x7ff, 0x12b, 0x4, 0x1, 0xfffffffa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x1, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x20000d7, 0x200, 0xffff3441, 0x2]}, 0x45c)
syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f00000001c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0xfffffffffffffcbb, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000010000000000000010000000040000005fa", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000002ddffff84100000f5ffffffbf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0)
setrlimit(0x7, &(0x7f0000000400))
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)
fsmount(r9, 0x0, 0xf)
executing program 1:
syz_clone(0x2211000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)="d8b07da8a079e9cf2597bad5ae1bc3cf0263274742d57c4d52f7ca8dabf267")
add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
pipe2$9p(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0500001e1000000040000003000000450000002e79c49b11a2a422470db3f65cfaf952ce6b9922dc964df7d0db58ca964ed3b0b63c07447695d87cdb350d8eb8df6e99b9945d09cfdda2c0218de990dcb34d8f65c4fc66492a83404780df075fd4d11943ecf0ed893bf62fbcb10dbe3c55d60d6c81141abeeb3ea32a680aa52e2ac03865df7b3bf56128ecfaad5b20772e53c319", @ANYRES32, @ANYBLOB="d6aa00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r3}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r3, &(0x7f0000000300), 0x0}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10000008, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
getgroups(0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r5, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0x2d, 0x0, 0x0, @local}}, 0x42)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, 0x0)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8, 0x4c5, 0x0, 0x2, 0x4, 0x80000001, 0xf, 0x0, 0xbe, 0xe39, 0x0, 0x532, 0x3, 0xb, 0xa, 0x26, {0x2001, 0x3}, 0x0, 0x2}})
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
gettid()
mknod(&(0x7f0000000340)='./file0\x00', 0x1ffa, 0x400)
executing program 2:
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000340)={0x4, 0x0, {<r0=>0x0}, {0xee01}, 0x5, 0xfffffffffffffff7})
prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
setpriority(0x1, 0x1, 0x3ff)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000010085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
listen(0xffffffffffffffff, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x3, 0x2, 0x4})
ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405668, &(0x7f0000000100)={0x1d, 0x3, 0x2, 0x84000})
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0)
memfd_secret(0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
executing program 0:
timer_create(0x7d012b4cafbe7efb, 0x0, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x110, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, 0x0)
socket(0x200000100000011, 0x803, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x106)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, 0x0)
chdir(&(0x7f0000000080)='./file1\x00')
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r4}, 0x10)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0)
r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='./file1\x00', r6, &(0x7f0000000100)='./file0\x00')
recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000240)}, {0x0}, {&(0x7f00000006c0)=""/127, 0x7f}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/201, 0xc9}, {&(0x7f0000000880)=""/36, 0x24}], 0x8, &(0x7f0000000940)=""/11, 0xb}, 0x1)
ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, &(0x7f0000000180))
ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000001000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000004050003000600000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000c08000240000000030900010073797a30"], 0xf8}}, 0x0)
executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080))
writev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)="3751f02b82f73ccfc7c431617753f5732f765c975ebce8947e5388c4ff26fa3893119fd147a1576d9456136ab5f15493d175754e4b666e989869d01d418adc376ca22d8077c1b54bea92b5977a41d70ebcc4735ce6c012a5fe5ab7fef98e864216699a235d615ded3292397894b34a794b", 0x71}, {&(0x7f0000000200)="d0f2c13a3028c25f419badebc5eba629dffd4c836f512ca2b57abe2b67a6665aedfeaa392d738e830b94958751bc4b3721b5f33c04933169a3c1dfb5534eee", 0x3f}], 0x2)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="66e5303bd46757c9f6efd558f27759820896b9daa3b7727b983a17f87f380445051494246e5f129daca876145c721726ae657d128a7ff0ff82f7b0b5ae", 0x3d}, {&(0x7f0000000040)}, {&(0x7f0000000240)="def1dc7710ecf3d4db759a09169e661e725bd8fe54cf5350bad6d983af0512d5ede231677c0d660831596ec4c202b9e94bd7d449e273250be34436decfd370c6ad9721020eb4f7728fbf7fe94cc3e0a5ab96de705b519ff41dd8875dd3440deccaaf977c8a3fd1f31783c3f705567d78f6dec3a27f641324579d5f5b67aa85da92edf56d675fd89d43d43098c5c712d4a73784ddefa29af128cc6616d93cad20c79a828d33268ca6c6a690533d0d9e836c31ce4e8d21728da83ba1559860be73b8356d50bb956a9a5827409503026b5ff279c9dfc44dcb6edd190d32b571b481cc1b0b6e", 0xe4}], 0x3)
executing program 4:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x44, r0, 0x1, 0x70bd31, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xffd}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x104}, 0x20000000)
executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x1, 0x4, 0x0, 0x0, @msi={0x8, 0x1, 0x7fff, 0x80}}]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, <r6=>0x0, 0x0, 0x0, 0xa, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180)={<r7=>0x0, 0x0, r1})
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f00000002c0)={0x0, 0xffff, 0x6, 0x27, 0x0, [<r8=>0x0], [0x40e, 0x200000, 0xfffffffd], [0x0, 0x0, 0xffffee98, 0x2], [0xc1, 0x0, 0x0, 0x6]})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000001c0)={<r9=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000340)={0x0, 0xfffffff8, 0x5, 0x4, 0x2, [0x0, 0x0, <r10=>0x0], [0x8, 0x8, 0x6a1417a3, 0x54], [0x3, 0x7fffffff, 0x6, 0x8], [0x1, 0x9, 0x1ff, 0x7]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f00000003c0)={r6, 0xa, 0x800, 0x7f, 0x0, [r7, r8, r9, r10], [0x2, 0x91f, 0xc5a6, 0x8818], [0x6, 0x1, 0x1e43, 0x7fff], [0xfffffffffffffffb, 0x0, 0x40, 0x2]})
io_setup(0x4, &(0x7f0000000280)=<r11=>0x0)
dup2(r1, r0)
io_submit(r11, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xfc}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x20}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0)
write(r0, 0x0, 0x0)
executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x2, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0xfd, 0x60, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xfd5c, 0x9, 0x5}, {0x6, 0x24, 0x1a, 0x8, 0x10}, [@acm={0x4, 0x24, 0x2, 0xe}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xff, 0xff, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xd5, 0x0, 0xf}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x9, 0x3}}}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x4, 0x2, 0x2, 0x20, 0x5}, 0x16, &(0x7f00000000c0)={0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x3, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x0, 0x1, 0x6}]}, 0x1, [{0x43, &(0x7f0000000100)=@string={0x43, 0x3, "68dd8dab46124173d1d77e0279fe20ea2cdbc522b1dba08f99d3f283feeb5523b3313ebc52cd56f11c73e0f51a8d702940bd0754466cdebfd9c49b9807ce502d88"}}]})
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x22, 0xbc, {0xbc, 0x10, "39f8368aa634060322cb936c84152d864a8d761518668984ee17f91d5f453285fb3a33fdd0b0cdec82a59b9e4b1d18f0057a8f0c75aa3b8b369cb2641c9043b29521c8f0d40f93bdf29b3bc1931c68860cb1b5b2f0079c5a47de809a59a09510a964b84f3beae4e0bf00bae3926652976fa2001023e606f9e868547babd1946d144a36b8619b98ea4b32a7c2881a227f6eccfaab78aff0d91b411d1fca27dccaf38b62231c6c699e1d886e1ae22436c06429f3460bb925d915f8"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41d}}, &(0x7f0000000300)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x2, 0x1, 0xaf42}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc, 0x4, 0x0, 0x2, "76751d1d", "90ba594e"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x80, 0x5, 0x19, 0x7, 0x8, 0x69e0}}}, &(0x7f0000000800)={0x84, &(0x7f0000000400)={0x20, 0x15, 0x10, "37b15cd0816af7b1674cbe96f659fb94"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x14}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x200, 0x8, [0xf0]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x401}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "8f07"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x7eb6}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'kM'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x3ff}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x7}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x80}})
prctl$PR_GET_SECUREBITS(0x1b)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000008c0)={0x2, 0xf, 0x2, 0x5, 0x18, 0x0, 0x70bd2a, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x6e6bbd, 0x46, {0x6, 0x6c, 0x1, 0x7, 0x0, 0x3ff, 0x0, @in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e20, 0xf, @mcast1, 0x21}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_x_filter={0x5, 0x1a, @in6=@private2, @in6=@loopback, 0x23, 0x10, 0xc}, @sadb_x_sa2={0x2, 0x13, 0x9, 0x0, 0x0, 0x70bd25, 0x3501}]}, 0xc0}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000a40)={{0x1, 0x1, 0x18, <r2=>r1, {0xe6df}}, './file0\x00'})
syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r2)
syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000a80)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x215, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0xb0, 0x2, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0xfa, {0x9, 0x21, 0x6c1, 0xe, 0x1, {0x22, 0xded}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x45, 0x2, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x18, 0x10, 0x7, 0x1}}]}}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x201, 0x8, 0x9, 0x2f, 0x40, 0x9a}, 0x5, &(0x7f0000000b00)={0x5, 0xf, 0x5}, 0x1, [{0xae, &(0x7f0000000b40)=@string={0xae, 0x3, "331243936783739dbc43e70f05a747e4f4281a14b3d44f417ead6034b305e8090a833f3f705185034acaca873a2700958b2864c2abbf7726aa9ea71434233f8edb5133496da5f5c6c1066736a55327f29baf63bbd5ff4d170fe52ded88335b588fb2ff1eeeccebfd120634e34d031e0eda9bf94ae4b51a01f948cc50829938f017e7fb9d6b32f075ddd795a039699d5e730a5e885774f166c89b25a46bd0f94c69994f2fa9ed0c65de7f1494"}}]})
prctl$PR_GET_SECUREBITS(0x1b)
syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000c40)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0xf0, 0x4, [{{0x9, 0x4, 0x0, 0xcf, 0x2, 0x7, 0x1, 0x1, 0x10, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x4, 0xff, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0x1, 0xe7, 0xe}}]}}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000c80)={0xa, 0x6, 0x150, 0x5, 0x9, 0x5, 0x20, 0x6}, 0x5, &(0x7f0000000cc0)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x3801}}, {0x9d, &(0x7f0000000d40)=@string={0x9d, 0x3, "2d308264baac981b215345a86e243450d59085f4f273b5ac2eb47079f4e523ffb77a67f2636428bc29cd27c37ee0edcb9aeeb847eb9dc9a61bfd9aa15e1df2e6889d6f87086f876921c49d750fae9c379a8f90bfb1bfe48253a570020aeeb619e1ef20b86313357369201f708d163be53691c7566a1906f253a1328cda7f53db6aebdb893f12aa4c765a8dbc1e72a5fc021a63c7bcaf8c479ca370"}}, {0x47, &(0x7f0000000e00)=@string={0x47, 0x3, "184aad525c509e109f8ba8194bec35f4457769e42ffa36e11f91c66d671bfa63f9e15919af6ebb936475b84d00e5659ab5469dd2b53c5175ee182f789192069c3e37939068"}}, {0x1f, &(0x7f0000000e80)=@string={0x1f, 0x3, "ab5072b744b97f8309700275cfd427eca520d33bc989e4be4424470953"}}, {0x7d, &(0x7f0000000ec0)=@string={0x7d, 0x3, "ef693d3152b170c2d40c319c65ec1ecce29525cadbfef548a0b1ebdb57cd5b85ad1724b1db09adb05f0859ee7d2f355e69d107e0664a52731debeae0b5002a872a92784b763a9c8d76d55a857c28f881c213cdaa113689dba367dae57c9b72c184a327a631c9eabd239504aa5041b5bfa9f7b3995941ef50aede0a"}}]})
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001000), r2)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x24, r3, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x5}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000800}, 0x40000)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001100), 0x440800, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000001140)={{0x11, @empty, 0x4e20, 0x0, 'dh\x00', 0x2, 0x1ff, 0x2}, {@broadcast, 0x4e21, 0x2000, 0x100, 0x0, 0x9}}, 0x44)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f00000011c0)={0xfffffffffffeffff, 0x40, 0x1, 0x1, 0x3, [0x4, 0x4, 0xfffffffa, 0x7]})
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000001200)='./file0\x00', 0x10000, 0x48)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x38, 0x1403, 0x20, 0x70bd2b, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4801}, 0x4000)
r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
mknod$loop(&(0x7f0000001340)='./file0/../file0\x00', 0x40, 0x0)
r7 = syz_clone(0x0, &(0x7f0000001880)="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", 0x1000, &(0x7f0000002880), &(0x7f00000028c0), &(0x7f0000002900)="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")
read$FUSE(r4, &(0x7f0000002a00)={0x2020, 0x0, 0x0, <r8=>0x0}, 0x2020)
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000004a40)='./binderfs2/custom0\x00', 0x2, 0x0)
r10 = syz_clone3(&(0x7f0000004d00)={0x4021000, &(0x7f0000004a80), &(0x7f0000004ac0), &(0x7f0000004b00), {0x6}, &(0x7f0000004b40)=""/194, 0xc2, &(0x7f0000004c40)=""/65, &(0x7f0000004cc0)=[0x0, 0xffffffffffffffff], 0x2, {r2}}, 0x58)
newfstatat(0xffffffffffffff9c, &(0x7f0000004d80)='./file0\x00', &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, <r11=>0x0}, 0x0)
r12 = getegid()
syz_clone3(&(0x7f0000005100)={0x12000000, &(0x7f0000004e40), &(0x7f0000004e80), &(0x7f0000004ec0)=<r13=>0x0, {0x2d}, &(0x7f0000004f00)=""/211, 0xd3, &(0x7f0000005000)=""/189, &(0x7f00000050c0)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5, {r4}}, 0x58)
ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000005180)=<r14=>0x0)
r15 = getpid()
sendmmsg$unix(r2, &(0x7f000000bd80)=[{{&(0x7f0000001380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001400)="bcf6633b8d3095f66d27b41d5a04efde2ddb2e36163d9f878925d0fd1a00b2e4187f27a613da6a9bed51afd205aa98a65c4f992691ca9fe77bc00e2cf819842b58ecbb73636baa5569f88eb3fccbc23ea131e0ca2d3a336ad5f572c37ecb587ee7ce481b567b3acf5daed66e05a7", 0x6e}, {&(0x7f0000001480)="db85a6c6d758392795ddbbb76d36073cda420219d5401268cc4a2e929e7d4dd05b030091f9341fa1e49a28bf354383a5f9d2f761c60322f84c530501d7b1dd142524d00400cfd93f6f60e3e53d485d4a65138c15ac8fea7249aaea8cad1ca2d84e28b2011391a967167f2b3546b35e98803debcd1797113594aae56e2d1d74f5ac7e4f9fa9c7ddb07646b8f2e454e6e59f7c663193d53003", 0x98}, {&(0x7f0000001540)="32a6fa88", 0x4}, {&(0x7f0000001580)="9d35b7908599d3c6d1ecbed1d0533f55b0c3c0ca93770ec91370007aecf35c30b04a455ea5913b3ec92920be3e1f6a6e33c8370fd26a9d48e7b3b090dcbcde3e9a946bc0a291f5bf8c069bc00add6ff9aa9f6ceeadeb60592fbde260cf368c6d54b2ca7ce65f5b77b77dc745829e7762fde3f03478816423b90d9013b200db317c1009521ad43833f025f541b8e5fbd65259a402cd0db64b41cf6314641b6147f443b3f47c9afe80", 0xa8}, {&(0x7f0000001640)="263aef9d01124888263a2fcf9454cd773f8511d6a98e47abec63b3dec87bbcc848eeca35784701a41803820b328dc78623c2736c4c00449fce2ea6909dcdfdf200544717d273b1bdfa70679bb10b600a2a7eee3e880ae5f110b0b8b7acd3de3de0cf5236c30a63757d94e5dfd01164563cea5f1bad1fd15f0ae33080df5a8cd82b6c8fe7d1db6fd09675a7f5f147dee435b43fb028fa87fe43c9bd3ac1b526d51f4cd31f19ccca29612dc945131990f67aede60ba50fe83ef478d2bc5d742f6fc6794f", 0xc3}, {&(0x7f0000001740)="2f1d666a380e2e7c61156ea1d2389ef4c782d7af3890901cd392bc6b9ebc4f94e8bb5fbb1263ec2fbbe734e2e9c6c6048c8d0fd8c37f7aca0d28e1fb33647c9d6f7e83512a706c869913edbf157543c7e9a0c24dcf0c8b4bc2037f7c5f53d8c26387bd5530fd0c5a1939151849cd36094035c4b9e71d33f2c20b09c8bc4564aec7", 0x81}], 0x6, &(0x7f00000051c0)=[@cred={{0x1c, 0x1, 0x2, {r7, r8}}}, @rights={{0x24, 0x1, 0x1, [r6, r9, 0xffffffffffffffff, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, 0xffffffffffffffff}}}], 0x88, 0x80}}, {{&(0x7f0000005280)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000005500)=[{&(0x7f0000005300)="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", 0xfa}, {&(0x7f0000005400)="d5419cacce04295695d7a84186384b1e9e66827fe76563d0f8f39464d102c4ce5f06eba4848de4ef9ea174466293f2b3dc4836bc18d25bb3398c3eb7e5b7547f6e26b10c3335734a640da209b22d58b0d02ca29597100f67505afaf82ea6aa09f6de1ebb17ea24448271b6f35186cc6cdfeaf07db8953d401b0b3dafc2d63f8d97eb695870d96d7d6f1f066889ab51536b6e7ff67f2676d402c717b08f9ab5f21d390c42e6ef1db020a1c2f76ab4727e349e1b91b186684aee60d878341c556d916551fc9935acdd8b6893ae8a954ecd509ae4b2043dc678c6609ba6ed297f6893cf91d7563bed87f2c49a165e2e43c617e89d8f0c", 0xf5}], 0x2, &(0x7f00000056c0)=[@cred={{0x1c, 0x1, 0x2, {r15}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r5, 0xffffffffffffffff, r6, r4]}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x70, 0x4000800}}, {{&(0x7f0000005740)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000058c0)=[{&(0x7f00000057c0)="39bdbd3973b4b07a33f83212", 0xc}, {&(0x7f0000005800)="2eb0cd176b451724091f61ff26cc379857c81cf1fff1861a40e6f5097859e4dc99272e751e89c3f06e30a32f1e731efd9e07b56721505e2163443d17dbd876a70dd42e3a7c08e18aec778d143c458ea7f71f3e34d23d75a62aafd1eefad2339024", 0x61}, {&(0x7f0000005880)="d1", 0x1}], 0x3, &(0x7f0000005ac0)=[@rights={{0x38, 0x1, 0x1, [r6, r4, r4, 0xffffffffffffffff, r2, 0xffffffffffffffff, r6, 0xffffffffffffffff, r2, r1]}}, @cred={{0x1c}}], 0x58, 0x24000000}}, {{&(0x7f0000005b40)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000005c80)=[{&(0x7f0000005bc0)="261b828aea7ab53f9ad0e76870ba9871cffd38466d82eb6b3c7f2bb555e44c7048b2c4c4", 0x24}, {&(0x7f0000005c00)="d52134e1f696397f9844f5dfe789e42db33a9a790463ca3a4124335c7d421fc9277c840c7c797d0294fa492a88d4345e6f83e98f1342adf82f758179c30ae8739ebc0227f460e53bea923884a5c583503fe1ce200b83bbdd0833f0a13b", 0x5d}], 0x2, &(0x7f000000a180)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r6, r4, r6, r5, r6, r2]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r4, r4, r2, r6, r5, r5, 0xffffffffffffffff, r5]}}, @rights={{0x2c, 0x1, 0x1, [r1, r1, r5, r6, r4, r5, r1]}}, @cred={{0x1c}}], 0x110, 0x2000}}, {{&(0x7f000000a2c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f000000b880)=[{&(0x7f000000a340)="6a580f3a10f387bec8f61bd83ba5d90c326c22b789fbdd5dd1cbfa541b5917acb72312bc1f6106c2f74a62bd88885eee8fd7cea95f3770eb6a0cb95b3c5c9f3710eedbea2eb03eea71643909fca354c3083c57994b4dbeb1a4cc8651ad9ab1635630907e9976ded78bf30e5d27c7e1cbe53f64358aeb44a0c462d0a91fa0c98613a3e74fbcc858211b09991785e787a0d503ce7cc5aa8217a2ac7c62bb566da058a10211110aef20e9b4b20bbdd5f19f9b210116030747cc1b4a4aca66d37d1e1793468edc9241d1bba77b2983358116f1ce9fbfdf89d9d532c2264eb89d631f651283649c95c607a24f1437317e2de7d5082fe7b411fd0f8c2bb878415160f9cda1890d4b57a775be715e401282dea0151bfdb785f1e76827ef4ce634f714885f8388de5c37316434e2cddd36b14965ea4870080e410e34aea5431a09eb432c226215e8719a1a8f8a1f443faab08de0b23c6368367c721b6dbf21e5dae033741815e95081f65544cbe74ef91c2c34366ed0b35fcd463439ae7af2385a38ce498ad20c1ea67329102972eb2ae29e24dfd19c00f72169cdb17b3f435aafd2ee68d54b7675904b5260dbb595d24e30908671a274c000a944b0a3a4d42f0c34e21f5b33bbb4a7f7eee2781fcbf83fc0b70715310eda4a4c7266bbdaae0eef0c51ccbdb48810a4fb1c2759d58b0f806e3b5e7a17d613a753620a97312237e6bd5c12b84ee053ca6be590055563385a250a9294efd17f0a581a63e1ab56f22cc24bc4b55851aedc494fdede895ece3a65e8e1a636be35ae4493601b807448832330ae51e5dce6f2c149f74c2c8cbf771bd24f393804740ebc8fdab75dc51e015dfff839c177745bbd3b3b1188985c8ab4ec66e03acd724c5e532710c53c6a5334d9ec59818cd2c1d3082c8411377bc0b9275d21597c6c56175f931de3ce278681d535ceac872fa75f533f16b54940fe0395f6a52de5c1c24ffcf72d6107436d0093e7b601210e37de80d0a3b201fcf7ed00c85fc068469feb97b24449c8ea990946caaafd81caa3a26d8d7054f133f576ad27cf8b314dbb2612bfd4d5384666ed0f94007c28e81e97744bbf493ce00dd75cf733ba64e45a123801da4f1fc90bd8432126da7dae114c2ad50b5dd5da27add93c9355183137b61f81a105d7166b9e854ef4299b5bca744c35af30b8a6c6b00b05b680cd90f7efd1d52204a5cd10d714a0f1c3454fcbb5324e4b159ed8a1dffd14133679fc664326622a5e6fcd549f3d4ce9691829a97dc38709dda3731b9d99c434ca8a9b13d008b7d1c82b416704e549c03742ed0670a7e9b3622278d8146287723215bdac1a7bc0fe379a24203278ae0b8e7d66b71794c7de7c5b2370a23602b76960ee546b182f4a96ea5c35c5378a9b6cdf0fbac9fcc1253073ab88bee81767abf4a2337154e9cdb3afa006e3df83734500c2990d87ed746aa88677f6748036743d2891624818ef93794814eff7b82bef6f0cdb49f4b020a6485f89c3df595234b5c8fa84b2e5afb96bc4e7797996f11c65bc2c54dd78572c145885a6fcff65cb3c43ae2d7fe366d1679e6322c2c35497d398fbdd80d62a863c00f21a6aa98fc24350a7e61914f9a207ca9beca4b36d65e45545b52205ec892ca9333d81e383a89ec66e3cdedf087e2526964b4bebaa10b07c5d5cc754e35d87a25c3a531f82c4ab50aa964a5e47798023d5d70c9c49e9a7717be7568d49979425d90d9859e8d800c9c50b3ea58d1be6af58498e9084433c22c25d989d408112ab155c2358e417d83526195d19a4f357fa2d5ef3b7c4efda9c0187b06a9e16f4ada49cda84b05906c3119604b54f7cad15870add2a82578274061132ebcaf190713615b8577993360ff872fc39f9e991e168d08d8a57d4ff586b68122239a1ed613b95a14922226920e33f13b14e8f737a46943afc7c8eb35ada23783e2da2b17476c01af67eb87b2eaa34df5b264a5048d9363c90840d70559cd1bc2471cf7d2f787429370885961c0c6537c30ac4a09848b88b750d1e04693bba718d0fc024ecd6a251016c77a0a86c2e32ea59892a987a71da45e3c7147706dce49673e5512103d3ec20d2c3e60db4a24a81ebb864e8c5165982c20002a94789924882308e014cf20dc25a0edf4ff2ca1469656cc27aaffaa6e38f2605dfa5ce03117bc76b2f0f8fe566ead9ac86b77d47afa2393a14df1c4ae6122ec0bedaa65de331ab9f1db7be0d9594e345d7e01f417c82b54dc5366da053c358a2f0d9f43421696d941a9f51e7f5354c7633c9bf51e0d6e841f3451b18148e22e4032d6b2c881bf616ea71ba157170b9b645bd223b68d2a7ebc6646e7845e6eec556789fe4ff016ea9da0bb88f8fc539d66bd94eb76bdedd9464a8f20a1a536d42c271e9dd8eef1e1d263f44b8f1404962b296ba9ed85f765f870e9965a5993f0f9c86ec045d70968a1db3e51a6a072617bb5d20f0de397bb0ec0ea7865985b7182cc2d7a7360a1862972646fadd2b61c771e525689bc6a856254d98ddb7d30b8b3cacb91ff8c7ed0f1fb4031a28a83b77af75f02c4b8afbeb41061b2c2f50914b286e0d0a9146365f1322787532bf12f885c9194bebff175af867454e91d9d005083478bc81fe9560622159c6846a9c8dc90a360dd814c168c1789308ace410e978ba792af0f7cb96e6901fa0c96e95e5f69932207c04c90b9df54fe597c8f32ebd57f00e0659621821db1cc5f1d91cfdbdc974d9dee8935012aa9943e763c59141d3ec71f10dcc3ecff9493b2d3dbd8d2501859b2b1e639963bb7a40357ff4a43cd60ff9cc7b10ebd647298fe45e146ebad165472ba7c0de6353ef769e78787cb38d194562adb6aa296138df8edf1cd32591f99ab1faabb0aa50b1bb07fb2fcb032b57b3775beb942dc79f99492f74b3f86bdea47882f28589908e48fef0bcb37e8b5a87a030dc1dee14f23cfef2369e00cab88ef549ab1f242a7bfa3833c2bc400f5c62ce1b8d19a7ea7408a8a0b81ff7d249e121edc10f105dc73d56ab6f7b33980e4889a080f177515ef9f2869197a0f50228cc2a32e07502da06b3f82e53c09df7165128a4e7c35b03e47a7b0eca0edc986c91bba7274f8e7b7089497c0cd7b1fd95434c7dadef63918f7833daf85b0124cc48d94fc083eb125eca4f21c0bb902e0db722354d0a1ed0ebb1ef3539625f1178cb7466d75044c06f75d2246be659b5654999519bea1be37e3bd84ee3550245852340411b531b6b5333fc21df440f6e8889d017d1f0ef09a3fc515de261bec92f12eebb73a3c62d4432893e113ae46f3b140e0c0f396fabf950250778109e7c38c11be0c82c969b4cc2b60b6261d771ee990eac43456b2458259afa33a26578f7287772b3673fc82cdbb32bf5ccb1f141a90efde0c31378f0e591221ff124c459d2848bc2f7937d8d4983d1ba05ad00936f03894602ee780cc5c6f0b41ddae8e21569839c4e09a994be4a8016ff8698196b261c0948a95400db25d746160ebfd6aa04b43e26836b3e73891c52b3d52b15c413703550a38cdccc5f35185aeeb1ab12812ed3435a0368b3a51df290526e18d22d8d87b26d0ab24891d0e1345a32944ddcea6345835fcae2016a90b642743692f07e11159d579890f08947e1c9aa9aa7ec697b8c6a303f22f0f59ab871b795ab22da91bbcd5612a347f8f8e2a02c9ae3d5ed6f6229e54a71c8a1bb052ae3dee678c60a2964762a2bde8930f35a7123e944bf5694f7262b545465fd5ef918ef53140b9f7a06d9115b4f672360aa556ac39b948671525c76e0a245a0aa4bab6489aea27ad7eacf7c808022d185bd3cf5dd1a22ae707de8b040878230c37a3cb7fea3822a86c3115234766a78e94868ba072c352d6710e7abab4ba10ade245648762af52b8f847c5ec40520bc48b6fef73ff6f3e6372aa93fd4fbb3f6b5510503d3b768f12f463e7de4c2702bcf28bfffd47954dc162edd93fcc49ea79332f075e0cb8adac6d712d8febcfac591db0fbc10e1b002fd28fb22e8b2b145d710d761bddc3a74995d55e12e582958facae9820a11f92ad67b3ccbe4c7b2de52970576343470d78b46a72122bfacf7be4bb0071f27941a2695b7a9264dbece3f62e3faf30116af469d9a227cb236c6bc28292bde0e87af66a84b0c9b9a61a208d0e56a79cfaacdf61d4bac9be81a563e27846d806a77cf11723792328be283a8f6acd604895e681994d60d4a3bbb24963b71652e7156e9694ef0ed05606c362ada8a11c9040df941df00cd3ccd6a922ea27e28cd02ecedbe0d12c6e295c0256a48496dfac93cf5d4af376f05c4afd1d09e341a6c5653b7fad8dbfdc864d96fb267422a25f1839d866b2eb8b8d30ab5b552099a7a9509b05d321586611b0ead9bbcf0d3d0801701a68904c8811eca0c3389bbeae2ebb07ece9dc609874b4bbaaa68e2bbaf9799ac97e02e845db5a9e739842c53521e98b65bea108a228c506339328143f79e39a9b77e2e489ab0949f98eafd8be75c7da31976ddbd13724def3773bed44db89f427cbcbaee5393934342356bc840663e0df6db67bc753ca4208022066ae54674a134879c6370bcbcd6de191a951ac4e0f26040c02b62af39191eae2bc5793a11d1ef42604c3d6d83cce07f454eac5d8b7f4b9d55e06f826e15ddda0607d7707cc3d88e899246046645e3a63e26881d77ac73bc5f78f788f5724b0d5532beef81da7b0c2b107432ddc2b81b224a575b1eeaad6d16da0359dee9da0b9b80c46fc09934da91d98c81d7576399b430c9c3664e2c50c8d9c33415805d398c8fa14bdcdfc40d1baacbf7771ae36967b7350473afdb75732a49fc5d3c1a2afa0c1eddf85e8d6ec20f461c52e13f48ef9125a7a136d2b3a017fa4cf56caf704cba6822d116006f580b153dca47b921f5c8e647e376beb8889fb60672e5db47aba0fdb13eca539efc8a7c2133626b3129259279609a36eb31c3b02e8bfb38c2140d9731732690fb633ddd9976f54248d909d301ea77793b4ffce79e0f8c9dc6eabe1e572b819c9649f0c889d8ad3c624886724e3f8e360f20bb1d29880f3b8f7c43b0e68691414acaaab3b2ad8baebd7284a415d9ea296bf93170e069079d432ceb4e65545fc9ae3a53a76dec0d8b58346882b15d7fa646a0736f4ca742a0ad07aff905b93afe64bfce9d7205e61e9253f9e6f502d7b79f0ae30fa567298225948da8b8a1f91b0a2d2cfe54b1128f23c475a1278d5691a3f5232a55c9ed9e2f1cbf113ca947c0d77c2135c55829f56a5a2fa518a09fb4c678df5661f775af9cdca55f7ff47b56ed3de5545fedac6a079afebe956799b464281f17cc846d95ec7420c3cc2318186533cb7344ce23e6354dfc6a14d48d9c6db876b02b89ae68001d27c2734366333329a28f7ae151c2088f2a245d64225d0453be2d6caa58cf42cc2dcde6ef7315d3729178d9ff66285625970790d9e6d102752d59eccbcc3ad982ecbeb5e6c92d8ab8369ef4ad4a87e291d949dae4a0fc1f8eaad51682cae892600cd9ff75350e2fd8e778d6918ae9ded48fcc71b22cf75edcb75692e551f374c412e967d07de3e3af7e16ec672045a46fece9c7a24f6731e43186dc3d8c1e2aa489e462c1c230227d81a502ac2d865260e583788bd59889b03f564b46b66282fafc7a82f764adcf7044d7cd7bdbde165411aad32fd0f0ca1887e2b19c07d66514b8dbb7f4f50876736f3b69aec3b5847e99c86403f5cbb97c2e1868b07d9432efb51e3b2bd4fcf478ceb37a7243cf5ec9036fa6e9021fbbd2dfa9", 0x1000}, {&(0x7f000000b340)="986da88cdb6327b8c15a8fd0e060cf1589f8675fa72e81265f479622c003d537283d63bdc97bb76ae1353f53c6cfe20e1413e355eda82c5f047d869fd5ae804a1072a0b031755c8137460f5734adc3bf2c3019d25a198eab452eebf61000e5cd19662184765202f477c1089069031d930e65f86927c252fae9dd14205f7ff40463728fbe513d266cfda1858c9f72eac8e45393273a42e26709d196ecce4c444cdb8d0159eb3cb2893958574db25c316548b67be0f27d59af04b8b27f", 0xbc}, {&(0x7f000000b400)="fe0073a4fcc94ccc4ada1ef716db93c42b2b9bdab6e0690d8598fd999dc405574cf3d14490d671acc3cc47dab2f47092a6e8ef6195cebedbe09b75d4cf2fabef21dfab042883642140ef5da1273f96aecac4336c672142fddb1cea79a69c65cd6402fe192b2bca469a8b931309678e27bb6d7539ced29d0853d79aabef7e507d4a0e323ba6c9310f60932e201619b6004253a09cc50d9597b9868a053cc4de069301f85ee6b94a8ca37eb7bf63d00f670e233ffe29155039d4f6ecee617c35cf576d9151b71e0d8b8084a114b3140cc97ce6f54bd89936de238b8c4c5aa2223dd25b445f6d26af77f097e2b80fc25fd62e2baf1dceca9e", 0xf7}, {&(0x7f000000b500)="150faee098ad24d90dc86448c2fb3d92b436c86c515e3da2705f8dc36c9b347bbe507df3181fe256cf24bf19a12b3ea8157f3f9f7032de9e54b7c7086147444c7c8730fd3a26f428e2ebdb17c52388af0cbaab9dab86ce3834bdaefbb234120a08e483d8db9e8530d8eb481f153805519059b50f4a2883e98198e28f2ec0115307c12b72180bbbed5d2b5809fd72054850685f6af0934ca9d736ab4cb2332f1c650ec919797398b0fb2c7828344e5914155ae59d94f4908c695805143b71eceb15da7f67a6478f4b87fcc7a4ccba1b093640b5315f43e46b50e63f5f4b6d90fd0b41e9619557da", 0xe7}, {&(0x7f000000b600)="7d4df5b815699be4800866e169027417ba86b45bbc1f83d8c910a72df0944d349420cd92e06befa578b2fe2cbc8ad276f0279abce41aa7d496486055c2af312fb1cbead899d6004aeff0dde10436eaf65f01fb09340f3e014d8be4bd0e6c9fada303bbea809ca3ca3a8d2e9f6eaba4c3dd5871742841628ca4e995a98741dc3087fbc8fc0e31011ebf179d07c9200a8ecbb12d9bd002eb2d1dba67961c552e116e543bf18c", 0xa5}, {&(0x7f000000b6c0)="b59c05bef3aa4ff2f917e5dd0e7b1c1f980b5a1273f8ad00b90f6ef2238cbd8d4d5fc74438cc1c634ebb25106b438ebbf74a6bf9f78ea59583cf5bd5fc7ffe1e420d8e61b4058555ce65ad2091b5b526bf05afaa5216a7f6b0706eab00be1d225aa061d8ab7a8a4cb313e5af3fa06ed8a95e0efae362605ad0041358da74dee7a9d977b5512f937649e45aa189cd5a5122ae8155994ddc8994fdb31b41862e5ae9a311dd3cb7fb0ac8e8a90d6425225bed112daf3c4995571d", 0xb9}, {&(0x7f000000b780)="a016c84ec4ad6212e8bd896d78416d65d195ab51aad23b52797b74090ba054af07dd772bf8f548d24cf8a16af4f496fc78cc817f11d837805d9944c9a76cdc6b43e5812acd8eed4535700df51acf9b7f3d09e05fb7efc2f9e7d5962a0abf3b6e8d1a36c7bc4492294aa7b65cfb6c4380fd2b71416529fe4d7410b7658264f32a62fb9d43cb4173eee378268824b18f6c2904412a915a19494f1130de5fccd8b368e21e1491b098fc53294d524362a49dc766cce63bd414fa88a7a70375e8613ec354fa54753d539e864dba666f0b75ff44ef4f5e4e4f200601d82c5a1a169e75aac00d108381f166c1ea341b", 0xec}], 0x7, 0x0, 0x0, 0x80}}, {{0x0, 0x0, &(0x7f000000ba00)=[{&(0x7f000000b900)="c45d7858bda0bf77ff09a26354f297b2b1604fddd26a350b24ef925e6bda52a735f11e8e45d44dd1c13b2403a8fef7dd4bf26430a65d39c9aeb10e73594b0a817d275235decd2fd279177070efba3bb6488fa4caa375117b82e7cfb6b14cfbb1d41eb0f9d6ba1b1ce1d31aece58f31a58c9974837c3463afefa6dab151ee196a27d73e57c46951b1ff4a30580330c86d7f9f8316afffc32d4e28bbfd32d89043118a95dc60a31cc657bef7c696190cf49e042af544aae62e8501b620ebc20bf5012a0761b155c82a85f319", 0xcb}], 0x1, &(0x7f000000bc40)=[@rights={{0x38, 0x1, 0x1, [r4, r2, 0xffffffffffffffff, r2, r1, r6, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r1, r6, r2, r6, r4]}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0, 0x4010}}, {{0x0, 0x0, &(0x7f000000bd00), 0x0, &(0x7f000000bd40), 0x0, 0x4}}], 0x7, 0x0)
executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="348b0d151f8218e3c73697e40800", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000280)='./file1\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x4, 0x1000, 0x40000476, 0x100000000, 0xfffffffffffffffc, 0x3, 0x0, 0xfeff})
fallocate(r2, 0x1, 0x9, 0x81)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x53)
setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000000)=0x9, 0x4)
syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f00000000c0), 0x10)
socket$nl_route(0x10, 0x3, 0x0)
syz_io_uring_setup(0x3789, &(0x7f0000000580)={0x0, 0x572a, 0x21a00, 0x3, 0x334}, &(0x7f0000000480)=<r4=>0x0, &(0x7f0000000600))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000640)=0x100, 0x0, 0x4)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180100000000009f5886b8c88557b50005000000f6"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025010000fbdbdf250800000028000380080005007f000001050008000600000014000200766c616e310000000000000000000000080006000600000014000280080005000200bc38b40205c6279a6531fb426400000800040001000000"], 0x58}, 0x1, 0x0, 0x0, 0x40880}, 0x800)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000400)={0x5, 0xe})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000180), 0xfefc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r5, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
r6 = socket(0x8, 0x0, 0x8000)
ioctl$sock_netrom_SIOCADDRT(r6, 0x6180, 0x0)
sendmsg$nl_route(r6, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x1)
r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
syz_usb_control_io(r7, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x2, 0x79, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102020000202505a1a440000102030102026700020105d0400904000001020d0000082406000142f36a05240006000d240f0107000000ffffff0f4506241a03000f08241c040007030009058103080007130f0904010000020d00000904010102020d0000090582024000070004090503020800070281"], &(0x7f0000000240)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x0, 0x6, 0x4, 0x20, 0xb}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x41a}}]})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x14, 0x10, 0x3, 0x5, 0x10, 0xa53, 0x10, 0x9, 0x1, 0x10}}, 0x0, 0x0, 0x0, 0x0})
readv(r3, &(0x7f0000000040)=[{&(0x7f0000000180)=""/68, 0x44}], 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r4, @ANYRESHEX=r2, @ANYRESOCT=r7, @ANYRESOCT=r6], 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
executing program 2:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@delqdisc={0x1e8, 0x25, 0x300, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0x8}, {0xffff}, {0x8, 0x6}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xa1, 0x1, 0xa7bcefe4f20f3181}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_STAB={0xe0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x9, 0x9d1e, 0xad, 0x2, 0x4, 0x40, 0x5}}, {0xe, 0x2, [0xffff, 0x0, 0x9, 0x4, 0x9]}}, {{0x1c, 0x1, {0x4, 0xe6, 0x6, 0xe, 0x0, 0x4, 0x1, 0x4}}, {0xc, 0x2, [0x1, 0x0, 0x7, 0xb]}}, {{0x1c, 0x1, {0x4, 0x6, 0xa, 0x3, 0x2, 0x3, 0xdbe8, 0x8}}, {0x14, 0x2, [0xe, 0xfffa, 0x0, 0xe3cf, 0x3, 0x5, 0x7, 0x45]}}, {{0x1c, 0x1, {0x6, 0x8f, 0x9, 0x7, 0x1, 0x6, 0x965, 0x9}}, {0x16, 0x2, [0x7d, 0x7f, 0x2, 0x0, 0x6e, 0x9, 0x6, 0x0, 0x81]}}, {{0x1c, 0x1, {0x0, 0x4, 0x5, 0x7, 0x1, 0x2, 0x1, 0x1}}, {0x6, 0x2, [0x8ac]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xd}, @qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0xa}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x7}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x3}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xe4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xb2}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x7}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x912}, @TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xf}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x10}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
prlimit64(0x0, 0xd, &(0x7f0000000240)={0x0, 0x5ab}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x2, 0xffffffffffffffff, 0x30)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f0000000380)={0x281, 0x1})
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe)
add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, &(0x7f0000000740)="69bf05d40ff7e03db3ddca537c6c5612321b25d32064e9ed643d462211406432e87c4d40383939ab8276bfc0294ba021d1ccf9b6b32d1b6c9e8c9737ca2d08305301693ef20a414ca24bed3736d182271d197fc2146a9f55070f3f31155b9081ecbd0fcc0296c88eac143394a776955e8a075194717757c9e085976cac66fd4c5bc83183df2db8205863d7f803e302420e7fc5315861803024f921932a49a4283f6a7d8ab2cbd629e984582467fd6ca63598d554677517903644dc2ef01f8dec", 0xc0, 0xffffffffffffffff)
r6 = syz_io_uring_complete(0x0)
ioctl$KDSETLED(r6, 0x4b32, 0x9)
executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9eb6, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50)
sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)
bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e00, 0x8001, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}, 0x8103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1000001}, {{0x0, 0x0, &(0x7f00000007c0)}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xb0}], 0x6, 0x20, 0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
close(r2)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xa}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x68}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040854}, 0x3d310fcfa6cf8277)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="a00000001900010000000000000000001c14"], 0xa0}}, 0x0)
executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$TCFLSH(r2, 0x400455c8, 0x1) (async)
ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffbe)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xdb) (async)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0xffffffff, '\x00', 0x0, r2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"/104], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {0x95, 0x0, 0x0, 0xa000000}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
close(r0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$TOKEN_CREATE-openat$ptmx-ioctl$TIOCSETD-fcntl$dupfd-ioctl$TCFLSH-ioctl$TIOCSETD-ioctl$TIOCSTI-bpf$MAP_CREATE_TAIL_CALL-bpf$PROG_LOAD-bpf$PROG_LOAD
detailed listing:
executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$TCFLSH(r2, 0x400455c8, 0x1) (async)
ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffbe)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xdb) (async)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0xffffffff, '\x00', 0x0, r2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"/104], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {0x95, 0x0, 0x0, 0xa000000}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

program crashed: general protection fault in bcsp_recv
single: successfully extracted reproducer
found reproducer with 12 syscalls
minimizing guilty program
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$TOKEN_CREATE-openat$ptmx-ioctl$TIOCSETD-fcntl$dupfd-ioctl$TCFLSH-ioctl$TIOCSETD-ioctl$TIOCSTI-bpf$MAP_CREATE_TAIL_CALL-bpf$PROG_LOAD
detailed listing:
executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$TCFLSH(r2, 0x400455c8, 0x1) (async)
ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffbe)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xdb) (async)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0xffffffff, '\x00', 0x0, r2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"/104], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)

program crashed: general protection fault in bcsp_recv
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$TOKEN_CREATE-openat$ptmx-ioctl$TIOCSETD-fcntl$dupfd-ioctl$TCFLSH-ioctl$TIOCSETD-ioctl$TIOCSTI-bpf$MAP_CREATE_TAIL_CALL
detailed listing:
executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$TCFLSH(r2, 0x400455c8, 0x1) (async)
ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffbe)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xdb) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0xffffffff, '\x00', 0x0, r2}, 0x50)

program crashed: general protection fault in bcsp_recv
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$TOKEN_CREATE-openat$ptmx-ioctl$TIOCSETD-fcntl$dupfd-ioctl$TCFLSH-ioctl$TIOCSETD-ioctl$TIOCSTI
detailed listing:
executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$TCFLSH(r2, 0x400455c8, 0x1) (async)
ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffbe)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xdb) (async)

program crashed: general protection fault in bcsp_recv
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$TOKEN_CREATE-openat$ptmx-ioctl$TIOCSETD-fcntl$dupfd-ioctl$TCFLSH-ioctl$TIOCSETD
detailed listing:
executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$TCFLSH(r2, 0x400455c8, 0x1) (async)
ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffbe)

program crashed: general protection fault in bcsp_recv
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$TOKEN_CREATE-openat$ptmx-ioctl$TIOCSETD-fcntl$dupfd-ioctl$TCFLSH
detailed listing:
executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$TCFLSH(r2, 0x400455c8, 0x1) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$TOKEN_CREATE-openat$ptmx-ioctl$TIOCSETD-fcntl$dupfd-ioctl$TIOCSETD
detailed listing:
executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffbe)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$TOKEN_CREATE-openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-ioctl$TIOCSETD
detailed listing:
executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1) (async)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0xffffffbe)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$TOKEN_CREATE-openat$ptmx-fcntl$dupfd-ioctl$TCFLSH-ioctl$TIOCSETD
detailed listing:
executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$TCFLSH(r2, 0x400455c8, 0x1) (async)
ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffbe)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$TOKEN_CREATE-ioctl$TIOCSETD-fcntl$dupfd-ioctl$TCFLSH-ioctl$TIOCSETD
detailed listing:
executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$TCFLSH(r1, 0x400455c8, 0x1) (async)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffbe)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$ptmx-ioctl$TIOCSETD-fcntl$dupfd-ioctl$TCFLSH-ioctl$TIOCSETD
detailed listing:
executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$TCFLSH(r2, 0x400455c8, 0x1) (async)
ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffbe)

program crashed: general protection fault in bcsp_recv
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-openat$ptmx-ioctl$TIOCSETD-fcntl$dupfd-ioctl$TCFLSH-ioctl$TIOCSETD
detailed listing:
executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x400455c8, 0x1) (async)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffbe)

program crashed: general protection fault in bcsp_recv
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ptmx-ioctl$TIOCSETD-fcntl$dupfd-ioctl$TCFLSH-ioctl$TIOCSETD
detailed listing:
executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x400455c8, 0x1) (async)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffbe)

program crashed: general protection fault in bcsp_recv
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ptmx-ioctl$TIOCSETD-fcntl$dupfd-ioctl$TCFLSH-ioctl$TIOCSETD
detailed listing:
executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x400455c8, 0x1)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffbe)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ptmx-ioctl$TIOCSETD-fcntl$dupfd-ioctl$TCFLSH-ioctl$TIOCSETD
detailed listing:
executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x400455c8, 0x1) (async)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffbe)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ptmx-ioctl$TIOCSETD-fcntl$dupfd-ioctl$TCFLSH-ioctl$TIOCSETD
detailed listing:
executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x400455c8, 0x1) (async)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffbe)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ptmx-ioctl$TIOCSETD-fcntl$dupfd-ioctl$TCFLSH-ioctl$TIOCSETD
detailed listing:
executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x400455c8, 0x1) (async)
ioctl$TIOCSETD(r1, 0x5412, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ptmx-ioctl$TIOCSETD-fcntl$dupfd-ioctl$TCFLSH-ioctl$TIOCSETD
program crashed: general protection fault in bcsp_recv
simplifying C reproducer
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ptmx-ioctl$TIOCSETD-fcntl$dupfd-ioctl$TCFLSH-ioctl$TIOCSETD
program did not crash
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ptmx-ioctl$TIOCSETD-fcntl$dupfd-ioctl$TCFLSH-ioctl$TIOCSETD
program crashed: general protection fault in bcsp_recv
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ptmx-ioctl$TIOCSETD-fcntl$dupfd-ioctl$TCFLSH-ioctl$TIOCSETD
program crashed: general protection fault in bcsp_recv
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ptmx-ioctl$TIOCSETD-fcntl$dupfd-ioctl$TCFLSH-ioctl$TIOCSETD
program crashed: general protection fault in bcsp_recv
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ptmx-ioctl$TIOCSETD-fcntl$dupfd-ioctl$TCFLSH-ioctl$TIOCSETD
program crashed: general protection fault in bcsp_recv
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ptmx-ioctl$TIOCSETD-fcntl$dupfd-ioctl$TCFLSH-ioctl$TIOCSETD
program crashed: general protection fault in bcsp_recv
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ptmx-ioctl$TIOCSETD-fcntl$dupfd-ioctl$TCFLSH-ioctl$TIOCSETD
program crashed: general protection fault in bcsp_recv
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ptmx-ioctl$TIOCSETD-fcntl$dupfd-ioctl$TCFLSH-ioctl$TIOCSETD
detailed listing:
executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x400455c8, 0x1) (async)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffbe)

program crashed: general protection fault in bcsp_recv
validation run: crashed=true
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ptmx-ioctl$TIOCSETD-fcntl$dupfd-ioctl$TCFLSH-ioctl$TIOCSETD
detailed listing:
executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x400455c8, 0x1) (async)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffbe)

program crashed: general protection fault in bcsp_recv
validation run: crashed=true
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ptmx-ioctl$TIOCSETD-fcntl$dupfd-ioctl$TCFLSH-ioctl$TIOCSETD
detailed listing:
executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x400455c8, 0x1) (async)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffbe)

program crashed: general protection fault in bcsp_recv
validation run: crashed=true
reproducing took 1h7m14.296075577s
repro crashed as (corrupted=false):
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] SMP KASAN PTI
KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f]
CPU: 0 UID: 0 PID: 6000 Comm: syz.0.19 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
RIP: 0010:bcsp_recv+0x13d/0x1740 drivers/bluetooth/hci_bcsp.c:590
Code: 89 4c 24 40 48 89 54 24 28 48 c1 ea 03 48 89 54 24 68 48 89 5c 24 20 48 c1 eb 03 48 89 5c 24 60 4c 89 7c 24 38 48 8b 44 24 58 <42> 80 3c 30 00 74 08 4c 89 ff e8 14 e7 c9 f9 49 8b 1f 31 ff 48 89
RSP: 0018:ffffc900032c7c00 EFLAGS: 00010206
RAX: 0000000000000021 RBX: 0000000000000030 RCX: 000000000000002f
RDX: 000000000000002f RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffc900032c7d60 R08: ffff888035712c1f R09: 1ffff11006ae2583
R10: dffffc0000000000 R11: ffffffff885624a0 R12: 0000000000000001
R13: ffffc900032c7e00 R14: dffffc0000000000 R15: 0000000000000108
FS:  00007facd2b6e6c0(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007facd2b6df98 CR3: 000000007d300000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 hci_uart_tty_receive+0x194/0x220 drivers/bluetooth/hci_ldisc.c:627
 tiocsti+0x23c/0x2c0 drivers/tty/tty_io.c:2290
 tty_ioctl+0x626/0xde0 drivers/tty/tty_io.c:2706
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:907 [inline]
 __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7facd1d8e9a9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007facd2b6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007facd1fb6080 RCX: 00007facd1d8e9a9
RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000004
RBP: 00007facd1e10d69 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 00007facd1fb6080 R15: 00007ffc089ebab8
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:bcsp_recv+0x13d/0x1740 drivers/bluetooth/hci_bcsp.c:590
Code: 89 4c 24 40 48 89 54 24 28 48 c1 ea 03 48 89 54 24 68 48 89 5c 24 20 48 c1 eb 03 48 89 5c 24 60 4c 89 7c 24 38 48 8b 44 24 58 <42> 80 3c 30 00 74 08 4c 89 ff e8 14 e7 c9 f9 49 8b 1f 31 ff 48 89
RSP: 0018:ffffc900032c7c00 EFLAGS: 00010206
RAX: 0000000000000021 RBX: 0000000000000030 RCX: 000000000000002f
RDX: 000000000000002f RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffc900032c7d60 R08: ffff888035712c1f R09: 1ffff11006ae2583
R10: dffffc0000000000 R11: ffffffff885624a0 R12: 0000000000000001
R13: ffffc900032c7e00 R14: dffffc0000000000 R15: 0000000000000108
FS:  00007facd2b6e6c0(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007facd2b6df98 CR3: 000000007d300000 CR4: 00000000003526f0
----------------
Code disassembly (best guess):
   0:	89 4c 24 40          	mov    %ecx,0x40(%rsp)
   4:	48 89 54 24 28       	mov    %rdx,0x28(%rsp)
   9:	48 c1 ea 03          	shr    $0x3,%rdx
   d:	48 89 54 24 68       	mov    %rdx,0x68(%rsp)
  12:	48 89 5c 24 20       	mov    %rbx,0x20(%rsp)
  17:	48 c1 eb 03          	shr    $0x3,%rbx
  1b:	48 89 5c 24 60       	mov    %rbx,0x60(%rsp)
  20:	4c 89 7c 24 38       	mov    %r15,0x38(%rsp)
  25:	48 8b 44 24 58       	mov    0x58(%rsp),%rax
* 2a:	42 80 3c 30 00       	cmpb   $0x0,(%rax,%r14,1) <-- trapping instruction
  2f:	74 08                	je     0x39
  31:	4c 89 ff             	mov    %r15,%rdi
  34:	e8 14 e7 c9 f9       	call   0xf9c9e74d
  39:	49 8b 1f             	mov    (%r15),%rbx
  3c:	31 ff                	xor    %edi,%edi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

final repro crashed as (corrupted=false):
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] SMP KASAN PTI
KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f]
CPU: 0 UID: 0 PID: 6000 Comm: syz.0.19 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
RIP: 0010:bcsp_recv+0x13d/0x1740 drivers/bluetooth/hci_bcsp.c:590
Code: 89 4c 24 40 48 89 54 24 28 48 c1 ea 03 48 89 54 24 68 48 89 5c 24 20 48 c1 eb 03 48 89 5c 24 60 4c 89 7c 24 38 48 8b 44 24 58 <42> 80 3c 30 00 74 08 4c 89 ff e8 14 e7 c9 f9 49 8b 1f 31 ff 48 89
RSP: 0018:ffffc900032c7c00 EFLAGS: 00010206
RAX: 0000000000000021 RBX: 0000000000000030 RCX: 000000000000002f
RDX: 000000000000002f RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffc900032c7d60 R08: ffff888035712c1f R09: 1ffff11006ae2583
R10: dffffc0000000000 R11: ffffffff885624a0 R12: 0000000000000001
R13: ffffc900032c7e00 R14: dffffc0000000000 R15: 0000000000000108
FS:  00007facd2b6e6c0(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007facd2b6df98 CR3: 000000007d300000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 hci_uart_tty_receive+0x194/0x220 drivers/bluetooth/hci_ldisc.c:627
 tiocsti+0x23c/0x2c0 drivers/tty/tty_io.c:2290
 tty_ioctl+0x626/0xde0 drivers/tty/tty_io.c:2706
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:907 [inline]
 __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7facd1d8e9a9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007facd2b6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007facd1fb6080 RCX: 00007facd1d8e9a9
RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000004
RBP: 00007facd1e10d69 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 00007facd1fb6080 R15: 00007ffc089ebab8
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:bcsp_recv+0x13d/0x1740 drivers/bluetooth/hci_bcsp.c:590
Code: 89 4c 24 40 48 89 54 24 28 48 c1 ea 03 48 89 54 24 68 48 89 5c 24 20 48 c1 eb 03 48 89 5c 24 60 4c 89 7c 24 38 48 8b 44 24 58 <42> 80 3c 30 00 74 08 4c 89 ff e8 14 e7 c9 f9 49 8b 1f 31 ff 48 89
RSP: 0018:ffffc900032c7c00 EFLAGS: 00010206
RAX: 0000000000000021 RBX: 0000000000000030 RCX: 000000000000002f
RDX: 000000000000002f RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffc900032c7d60 R08: ffff888035712c1f R09: 1ffff11006ae2583
R10: dffffc0000000000 R11: ffffffff885624a0 R12: 0000000000000001
R13: ffffc900032c7e00 R14: dffffc0000000000 R15: 0000000000000108
FS:  00007facd2b6e6c0(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007facd2b6df98 CR3: 000000007d300000 CR4: 00000000003526f0
----------------
Code disassembly (best guess):
   0:	89 4c 24 40          	mov    %ecx,0x40(%rsp)
   4:	48 89 54 24 28       	mov    %rdx,0x28(%rsp)
   9:	48 c1 ea 03          	shr    $0x3,%rdx
   d:	48 89 54 24 68       	mov    %rdx,0x68(%rsp)
  12:	48 89 5c 24 20       	mov    %rbx,0x20(%rsp)
  17:	48 c1 eb 03          	shr    $0x3,%rbx
  1b:	48 89 5c 24 60       	mov    %rbx,0x60(%rsp)
  20:	4c 89 7c 24 38       	mov    %r15,0x38(%rsp)
  25:	48 8b 44 24 58       	mov    0x58(%rsp),%rax
* 2a:	42 80 3c 30 00       	cmpb   $0x0,(%rax,%r14,1) <-- trapping instruction
  2f:	74 08                	je     0x39
  31:	4c 89 ff             	mov    %r15,%rdi
  34:	e8 14 e7 c9 f9       	call   0xf9c9e74d
  39:	49 8b 1f             	mov    (%r15),%rbx
  3c:	31 ff                	xor    %edi,%edi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89