last executing test programs: 2m45.69691014s ago: executing program 4 (id=186): mknod$loop(&(0x7f0000000440)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000680)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000026c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000008b40)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) 2m45.189644162s ago: executing program 4 (id=187): syz_usb_connect$uac2(0x3, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x80) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r0 = getpid() sched_setaffinity(r0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x2208004, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0xe, &(0x7f0000000440)=ANY=[], &(0x7f0000001240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x80000000}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$tty20(0xc, 0x4, 0x0) 2m44.368186862s ago: executing program 4 (id=194): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002bbd7000ffdbde252100000008000300", @ANYRES32=r2, @ANYBLOB="14002c8008000094c66f22f9d376343b9d09736a8af4fc97a6374e00ff7fce609da84514da9b79703c9d5fee125171b4af57ebbe569557501fab6e7beefe94600df8aa50c0e423b60135f4cae473d8e0fabedeb7e8f5772bf4a38755dff62199"], 0x30}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12ae10}, 0x0) 2m44.284557714s ago: executing program 4 (id=195): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) epoll_create1(0x0) keyctl$invalidate(0x15, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='1', 0x1) unshare(0x400) r4 = mq_open(0x0, 0x8c2, 0x30, 0x0) mq_getsetattr(r4, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r5, 0x84, 0x7d, &(0x7f0000000300), 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r5, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80) connect(r5, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) sendto(r5, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) 2m43.326909377s ago: executing program 4 (id=201): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r0, &(0x7f0000000080)="2a00eea69dcc3873cf8bb5fc702dc9480bebc7977096c2a538fec62e8bb965886fbb825491dff8bd8fa9fe6ce18547f09590ad98928b5b77717bf62bb6214598c77e0aad876ebb31749ba9fac2451ce0eb590a5a8b90498186fa67933971c8ecdaf56727f5ad7783b0", 0x69, 0x44024814, &(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x0) syz_mount_image$reiserfs(&(0x7f0000000540), &(0x7f0000000140)='./file0\x00', 0xd0, &(0x7f0000000040), 0xf4, 0x1119, &(0x7f0000003600)="$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") mknod$loop(&(0x7f0000023f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x842, 0x40) read$FUSE(r1, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdir(&(0x7f00000004c0)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='my_tracefs\x00', &(0x7f0000002d00)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002d40)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r3, &(0x7f0000002d80)='oom_score_adj & 1|', 0x12) write$cgroup_pid(r1, &(0x7f00000025c0)=r2, 0x12) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x4000854) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000240)={@multicast1, @local}, 0xc) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x14a40, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r6, 0x541c, &(0x7f00000002c0)={0xd, 0x1afe}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000000000010100000000000000000a0000013c0001802c000180141503"], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x8d0) write$uinput_user_dev(r1, &(0x7f0000002680)={'syz1\x00', {0x5, 0x7, 0x4, 0x251f}, 0x5, [0x7f, 0x800, 0x8, 0x3, 0x1, 0x401, 0x8001, 0x9, 0x9e, 0x8, 0x6, 0x3ff, 0x10001, 0xfffffff7, 0x401, 0x10000, 0x9, 0xffffd5df, 0x6, 0x2, 0xfffffffe, 0x8, 0x6, 0x7fffffff, 0x3, 0x1, 0x6, 0x4d, 0x8, 0x3, 0x9, 0xb, 0x10000, 0x2, 0x400, 0xca1, 0x6, 0x0, 0x3, 0x709, 0x8, 0x3, 0x9, 0x10, 0x0, 0x41e4, 0x443, 0xa60e, 0xfffffffe, 0x4, 0x1, 0x0, 0x2, 0x0, 0x5, 0x4, 0x6, 0x8, 0xf, 0xc, 0x5, 0x2, 0x1, 0x7], [0x2, 0x8, 0x4, 0x3, 0x2, 0x7, 0x7, 0x516c, 0x8, 0x4, 0x1, 0x8001, 0x7fff, 0x6, 0xfff, 0x4, 0x9, 0xaf, 0x2, 0x6, 0x5, 0x6, 0x3ff, 0x5, 0x4, 0x0, 0x180, 0x5, 0x800, 0x0, 0x2, 0xbd, 0xd, 0x8, 0x6, 0x1, 0x0, 0xc, 0x4, 0x0, 0x3, 0x2, 0xe0000, 0x1, 0x7, 0x0, 0x684e, 0x9, 0x7, 0x7fff, 0x3, 0x0, 0x3, 0x8, 0x9, 0x10001, 0xf, 0x1, 0x4, 0x3, 0x10b8, 0x1000, 0x6, 0x8], [0x6b8, 0x7, 0x7fff, 0x200, 0x1, 0x2, 0xf0, 0x9, 0x8, 0x9, 0x40, 0x8, 0x8, 0xfffffffd, 0x6, 0x4, 0x795b, 0x8, 0x2, 0x81, 0xc, 0x1, 0xc, 0x0, 0xb3, 0x9, 0x3a49, 0x6, 0x6, 0x0, 0x8001, 0x8, 0x7, 0x1b16, 0x8, 0x33bc, 0xfffffc01, 0x10000, 0x5, 0xfc, 0x1, 0xffff8001, 0x1, 0x0, 0x4110, 0x3ff, 0x541, 0x3, 0x10, 0x2, 0x373, 0x7, 0xfffffc00, 0x8, 0xb, 0x6, 0x3, 0x6, 0x8, 0x80000000, 0xfff, 0x6, 0x5bcf, 0x80], [0x1000, 0x9, 0x9, 0x8001, 0x8, 0x9, 0x0, 0x6, 0xfb4, 0x4e99, 0x8, 0x0, 0x8, 0x9, 0x6, 0x5000bf9a, 0x80000000, 0x7, 0x1, 0x6, 0x3, 0xfffffffc, 0x3, 0x3, 0x800, 0x3, 0x6, 0x0, 0x0, 0xfffffffb, 0xf, 0x21, 0xfffffffe, 0x8, 0x1, 0x8, 0x1ff, 0x2, 0x3ff, 0x3, 0xc3e7, 0x6e6, 0x0, 0xfff, 0x6, 0x0, 0x1, 0x8, 0x4, 0x800, 0x6, 0x7, 0x51e, 0x9, 0x8, 0x6, 0xf, 0x1, 0x84, 0x3, 0x6, 0xaa1, 0x1, 0x3ff]}, 0x45c) 2m41.435224412s ago: executing program 4 (id=206): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000380), 0x1, 0x50f, &(0x7f0000000fc0)="$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") io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000001300)=0x10, 0x4) bind$xdp(r1, &(0x7f0000001400)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r2, &(0x7f0000001600), &(0x7f0000001700)=@udp=r1}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m26.134375242s ago: executing program 32 (id=206): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000380), 0x1, 0x50f, &(0x7f0000000fc0)="$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") io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000001300)=0x10, 0x4) bind$xdp(r1, &(0x7f0000001400)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r2, &(0x7f0000001600), &(0x7f0000001700)=@udp=r1}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12.135303817s ago: executing program 5 (id=679): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0xa4, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd], [0x0, 0xfff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xa4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={0xffffffffffffffff, r6, 0xe}, 0x14) sendmsg$inet(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x7e, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac1414aa0011000000000000000100000001"], 0x30}, 0x4040810) socket$inet6_tcp(0xa, 0x1, 0x0) socket$pptp(0x18, 0x1, 0x2) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r7, 0x541c, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu -pids'], 0xb) 8.426145657s ago: executing program 5 (id=689): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="700000001900010000000000000000001c0109000c00128008002100", @ANYRES32=0x0, @ANYBLOB="5000068049002f80897a22072687d86fdfb849e8dd3bce220a0ca5a0217c43a621fc12ea0f434939e5c85990fb1debcbb8e973833811328574341ca2fb3527623d00"/80], 0x70}, 0x1, 0x0, 0x0, 0x5}, 0x4000854) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0xd, 0x1afe}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000102010100000000000000000a0000013c0001802c000180"], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x8d0) r2 = accept(0xffffffffffffffff, &(0x7f0000000280)=@un=@abs, &(0x7f00000001c0)=0x80) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000340)='X', 0x34000, 0x0, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000640), 0x4) r4 = getpid() sched_setscheduler(r4, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000006c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000700)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1df) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000440)="04000000000000000000000038010000380100003f0000000000000000000000000000000000000000000000000000000074") ioctl(r6, 0xc138fd09, &(0x7f00000006c0)="04000000000000000000000090010000380100000100"/42) socket$igmp6(0xa, 0x3, 0x2) socket$netlink(0x10, 0x3, 0xa) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000740)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000800)={0x18, 0x3f9, 0x400, 0x70bd29, 0x25dfdbff, {}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x44880}, 0x28000) 7.933403768s ago: executing program 1 (id=692): bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/3584], &(0x7f0000001440)='GPL\x00', 0x2, 0x103a, &(0x7f0000001480)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002480), 0x0, 0x10, &(0x7f00000024c0), 0x2a3}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000002500)={0x6, 0x23, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f0000002700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002740)={r0, 0x3a, 0x42, 0x0, &(0x7f00000027c0)="e460cdfbef240832296a00000000072feb311cab36f8cd0a31d170069bd14374891a783ec8a755c1e138005fffad008036e8d50000ff010000001400000500242f09", 0x0, 0x8000400, 0x0, 0x42a, 0xa6, &(0x7f0000003040)="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", &(0x7f0000002b80)="b33620dad49cc786c86a5c5444e76c2a1ef9224fb91083d2ba4368e98a14467703e9ee585196fa95320bd53c6a76ad443b81dc833b22016aeaafb4597c06919ecf7e5ea4d0a8995feaaf9a9feb0c4b5277398049a2f5475f6ceb26bd128189f4b1b3c662d3d1630717791de0cdac3ce6e01c5719b670da5ded7dfa9dda53f04ad151cb952d708eaa69e983dcfab36b2dac3f3fe85e1d86b3d73d4879fb11cfac51f3cb669a50", 0x1, 0xfffffffd, 0x2}, 0x50) r1 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000600), 0x0) r2 = socket$inet(0x2, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000002880)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x30bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x5475d, 0xfd6f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MTU={0x8, 0x4, 0xfff}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000200)={@multicast2, @local}, 0xc) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x78, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r6, {0x5, 0x3da48c8682330ab8}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x48, 0x2, [@TCA_BASIC_EMATCHES={0x44, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0x5}, {0x36, 0xb, 0x3, 0x5, 0x9, 0x3}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x3, 0xfbeb}, {0xffffe8fd, 0x18a, 0xffffffff, 0x4}}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2400d0d5}, 0x4880) r7 = getuid() setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@remote, @in=@multicast2, 0x4e22, 0x55, 0x4e20, 0x8, 0x8, 0x0, 0x0, 0x5e, r6, r7}, {0x7, 0x53ea74ad, 0x5, 0x4, 0x6, 0x10, 0x2, 0x9}, {0x0, 0x5, 0xc, 0x8}, 0x8000, 0x6e6bb8, 0x1, 0x31e82fb79f1b4c98, 0x2}, {{@in6=@private0, 0x4d5, 0x33}, 0x2, @in=@loopback, 0x3507, 0x0, 0x3, 0x7, 0x6, 0x10000, 0x2}}, 0xe8) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/10], 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r8, &(0x7f0000003c00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003bc0)={&(0x7f0000003480)={0x710, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xec, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_BITS={0xe4, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbda}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'hash:net\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '*}*}#\\}\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '.\\*${'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '\\@--%(}]-:)&.^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5c0}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}\\),\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x21c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xb4, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'multiq\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'macvtap\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'hash:net\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '^)\'@\'\\%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '^@-\\.\\\'\\(^(\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x882c}]}]}, @ETHTOOL_A_BITSET_BITS={0x114, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa9cd}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4f9}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'basic\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'multiq\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'multiq\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'macvtap\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x69a1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '!{*-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x41, 0x5, "2d498f93e51d4c8f84767b884d16a209473c4c08b14dcee7a21ce7f5acec0487d65ca980674eb4e1823d59da6c4f2074148705528c3d1b73fc1efe8d2a"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x2dc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x134, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe81f}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'macvtap\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/\'+*\\}+@!\xe8@^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller0\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'multiq\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}]}]}, @ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(^\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'multiq\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xbf, 0x4, "8ac440ba05ccd4693cd47471458d94e9e55b2bf577cad20d8b3bed48ab351c2f8c780a298f8b0aea56915bc303ed3a4888aea1709aa1240302f754df3cf83061da1b1a29ef8fd37b0804bc8ebee08aab48d00969558bd73866aab184d4d9e571eab5a1d72356c00a32021b613db72f2a303e5d97fa1d79361c3e4eb61c1855e15df8d26afbfdd323ad09b8166bd0f4343fc24ae51ca821ada3a5462e0d5245bdca23a4220cef8cd3fa44e6f2f17bd377972a091476c4835a9b86e4"}, @ETHTOOL_A_BITSET_VALUE={0xa, 0x4, "28dffc3d0a59"}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '[.&-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller0\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x148297f2816dc4a0}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x710}, 0x1, 0x0, 0x0, 0x40084}, 0x8001) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002a00)={0x0, 0xc, &(0x7f0000002ac0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020705200000000002020207b0ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000040c0)={0x0, 0x4, &(0x7f0000002d00)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002d40)={0x11, 0x14, &(0x7f0000002e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002e80)={0x11, 0x14, &(0x7f0000002f40)=ANY=[], &(0x7f0000002f80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002940), 0x282002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000003c40)=@security={'security\x00', 0xe, 0x4, 0x3e8, 0xffffffff, 0x130, 0x200, 0x200, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, &(0x7f0000002980), {[{{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0x1d}, [0x0, 0x0, 0xff000000, 0xffffffff], [0xffff00, 0xffffff00, 0xff], 'veth0_to_team\x00', 'nicvf0\x00', {0xff}, {}, 0xc0, 0x10, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}, {0x7, 0x3, 0x1, [0x0, 0x8fe0, 0x14d, 0x200, 0x9b8, 0x3, 0x8001, 0x9, 0x40, 0xd86b, 0x1, 0x129, 0x8, 0x5, 0x7fff, 0x2], 0x8}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0x9, {0x8}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@ipv6={@mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xffffff00, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xffffff00], 'rose0\x00', 'geneve0\x00', {}, {0xff}, 0x11, 0x7, 0x0, 0x2}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x4, 0x9, 0x1ff, 0x10000, 0x81}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x4, 0x4}, {0xffffffffffffffff, 0x0, 0x2}, {0x1, 0x1, 0x5}, 0x4, 0x4f7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 7.887711479s ago: executing program 0 (id=694): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0xa4, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd], [0x0, 0xfff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xa4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x7e, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac1414aa0011000000000000000100000001"], 0x30}, 0x4040810) socket$inet6_tcp(0xa, 0x1, 0x0) socket$pptp(0x18, 0x1, 0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r6, 0x541c, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu -pids'], 0xb) 6.426893805s ago: executing program 1 (id=695): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) r3 = memfd_create(&(0x7f0000000040)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000003c0)={r3, 0x0, 0xfffffffff0000000, 0x1000000}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x48041, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000001800)={0x1, 0x0, [{0x10}]}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, 0x0, 0x40) r7 = socket$packet(0x11, 0x3, 0x300) syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00') r8 = syz_create_resource$futex(&(0x7f00000006c0)) futex(r8, 0x6, 0x0, 0x0, 0x0, 0x1) bind$packet(r7, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000015c0), 0x8, 0x10, &(0x7f0000001600), 0x10}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c0000"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) write(r7, &(0x7f0000000500)="08021100950108021100000008004500", 0x10) 6.418231915s ago: executing program 5 (id=696): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x70, 0x19, 0x1, 0x0, 0x0, {0x1c, 0xd601, 0x9}, [@nested={0xc, 0x12, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid}]}, @nested={0x50, 0x6, 0x0, 0x1, [@nested={0x49, 0x2f, 0x0, 0x1, [@generic="897a22072687e16fdfb849e8dd3bce220a0ca5a0217c43a621fc12ea0f434939e5c85990fb1debcbb8e97383381132856180c51cf041d37410e5c77c74341ca2fb3527623d"]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x5}, 0x4000854) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x14a40, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000100)={0xd, 0x1afe}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000004}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x88, 0x1, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0xfffff51b}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0xe3e9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3c}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000102010100000000000000000a0000013c0001802c00018014"], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x8d0) accept(0xffffffffffffffff, &(0x7f0000000380)=@un=@abs, &(0x7f0000000400)=0x80) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x2, 0xa}}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.310861118s ago: executing program 3 (id=697): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x3, 0x8005}, 0x4) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), r4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x24, r5, 0x1, 0x70bd2c, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, 0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}]}, 0x24}}, 0x0) r6 = openat$kvm(0xffffff9c, &(0x7f0000000680), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000006c0)={0x1, &(0x7f0000000700)=[{0x6, 0xf, 0xf, 0x7fff8001}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000780)={[0x12e8, 0x4, 0x88fd, 0xffffffffffffffff, 0x2, 0x8000003fe, 0x4002004c2, 0x1000, 0x4, 0x97, 0x3, 0x4, 0x9, 0x2, 0x200000000000001, 0x2000000000008], 0x1ffc, 0x514}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x0, 0x1, 0xe000, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, 0x1405, 0x1, 0x70bd29, 0x25dfdbfc, "", [{{0x8}, {0x8, 0x3, 0x3}}]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x1050) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000500)={0x1, [0x0]}, &(0x7f0000000540)=0x8) sendmsg$inet_sctp(r9, &(0x7f0000000640)={&(0x7f0000000400)=@in={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000440)="151ae5d5ec39b54f4f35336170bb47493ff8c56b29f70c381ba864dbe9584542f37e668aa799536ff07ba4f5bfbb277f411d8469e3e6369347eb12bd6e5d3050d3f06c4e", 0x44}], 0x1, &(0x7f0000000580)=[@init={0x14, 0x84, 0x0, {0x3, 0x58da, 0x9, 0x6}}, @authinfo={0x10, 0x84, 0x6, {0x5}}, @dstaddrv4={0x10, 0x84, 0x7, @rand_addr=0x64010100}, @authinfo={0x10, 0x84, 0x6, {0x88}}, @prinfo={0x14, 0x84, 0x5, {0x20, 0x2}}, @prinfo={0x14, 0x84, 0x5, {0x30, 0xf35}}, @prinfo={0x14, 0x84, 0x5, {0x10, 0x3}}, @sndrcv={0x2c, 0x84, 0x1, {0x2, 0x4, 0x2, 0x46d0, 0x9, 0x8, 0x6f10, 0x4, r10}}], 0xac, 0x20000000}, 0x4030) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000340)={'\x00', 0xb7, 0x5, 0x57bf, 0x80000000, 0x40, 0x0}) prlimit64(r11, 0xa, &(0x7f0000000380)={0x200}, &(0x7f00000003c0)) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_RESERVE(r12, 0x401070c9, &(0x7f0000000300)={0x3c1842d, 0x1000, 0x3}) bind$l2tp6(r2, &(0x7f0000000140)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 6.309436308s ago: executing program 0 (id=698): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000002380), 0x2, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002400)={0xfc, {"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", 0xce2}}, 0x1006) 6.2249177s ago: executing program 0 (id=699): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0xa4, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd], [0x0, 0xfff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xa4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={0xffffffffffffffff, r6, 0xe}, 0x14) sendmsg$inet(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x7e, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac1414aa0011000000000000000100000001"], 0x30}, 0x4040810) socket$inet6_tcp(0xa, 0x1, 0x0) socket$pptp(0x18, 0x1, 0x2) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r7, 0x541c, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu -pids'], 0xb) 6.164394431s ago: executing program 1 (id=700): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x70, 0x19, 0x1, 0x0, 0x0, {0x1c, 0xd601, 0x9}, [@nested={0xc, 0x12, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid}]}, @nested={0x50, 0x6, 0x0, 0x1, [@nested={0x49, 0x2f, 0x0, 0x1, [@generic="897a22072687e16fdfb849e8dd3bce220a0ca5a0217c43a621fc12ea0f434939e5c85990fb1debcbb8e97383381132856180c51cf041d37410e5c77c74341ca2fb3527623d"]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x5}, 0x4000854) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0xd, 0x1afe}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000102010100000000000000000a0000013c0001802c000180"], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x8d0) accept(0xffffffffffffffff, &(0x7f0000000380)=@un=@abs, &(0x7f0000000400)=0x80) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x2, 0xa}}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x20) 6.107786263s ago: executing program 5 (id=701): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r1, r2}}, 0x18) r3 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000fee000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe8000/0x13000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fe7000/0x4000)=nil, &(0x7f0000000200)="51398765e1108856bcfa032622a64c3891ba8eef6351f76d88d27ed272c87b864de63effb62e74f216321f0aa5917cc3de6efd98b481200def769c79a9bc14bee61a9ee5ee6357922cb17121a7ba30d7f790741413c826ca66b725e8891400666d5e4122848453e63cf18c7fe082848e40a6cecb3c48fbe9f7ec2eb42e2e67ecb98116e9", 0x84, r4}, 0x68) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000340)={0x5, 0x0, &(0x7f0000ffe000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000380)=""/59, &(0x7f00000003c0)=0x3b) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000400)={r2, 0xfffffffffffffffa, 0x401, 0xfe3}) fcntl$notify(r5, 0x402, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000480)={0x6, 0x118, 0xfa00, {{0x3f, 0xc35, "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", 0x80, 0x50, 0xe5, 0x4, 0x6, 0x0, 0x2}, r1}}, 0x120) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f00000005c0)={0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r7, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000006c0)=[@text32={0x20, &(0x7f0000000640)="262e0f00939595bba10f78e00f01d8c4e13d6ae40f20d835080000000f22d8260f01b8c0a8000066baa100b027eeb9800000c00f3235004000000f300f01cb0f01cf", 0x42}], 0x1, 0x1e, &(0x7f0000000700)=[@cr0={0x0, 0x60040001}], 0x1) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x2000001, 0x10, r8, 0x79477000) recvmsg$can_j1939(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/251, 0xfb}, {&(0x7f00000009c0)=""/167, 0xa7}, {&(0x7f0000000a80)=""/230, 0xe6}, {&(0x7f0000000b80)=""/118, 0x76}], 0x6, &(0x7f0000000c80)=""/170, 0xaa}, 0x1) read$FUSE(r7, &(0x7f0000000d80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r3, 0x40786e88, &(0x7f0000002f80)={{&(0x7f0000002dc0)=[{0x5, 0x3, 0x5, {0x9, 0xf5}, 0xfffffffffffffff8, 0x4, 0x611a41df}], 0x1, 0x40, 0x3, 0xfff}, {&(0x7f0000002e00)=[{0x6, 0x400}, {0xa1f, 0x9}, {0x3, 0xfff}, {0x4}, {0x7, 0x81}], 0x5, 0x10, 0xfff}, {&(0x7f0000002e80)=[0x6, 0x9, 0x0, 0x8, 0x9, 0x80000001, 0x2, 0xac7, 0x401], 0x9, 0x8, 0xd0, 0x2}, {&(0x7f0000002f00)=[{0x7, 0xd8, 0x3, 0xa, 0x9}], 0x1, 0x28, 0x0, 0x5}, {&(0x7f0000002f40)=[0x3], 0x1, 0x8, 0x3e9b, 0xffffffffffffff80}}) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000031c0)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003180)={&(0x7f0000003040)={0x10c, 0x9, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x6c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'tunl0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'nr0\x00'}}]}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x9}}]}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x10001}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffec6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xb2}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x509b}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000040) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000003200), 0x802, 0x0) ioctl$UI_SET_FFBIT(r10, 0x4004556b, 0x2c) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000032c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000003280)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f0000003300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xd, @remote, 0x81}, {0xa, 0x4e24, 0x6, @empty, 0x7f}, r12, 0x1}}, 0x48) ioctl$UI_GET_VERSION(r10, 0x8004552d, &(0x7f0000003380)) quotactl_fd$Q_SETINFO(r4, 0xffffffff80000601, r9, &(0x7f00000033c0)={0xa, 0x24, 0x0, 0x2}) write$RDMA_USER_CM_CMD_DISCONNECT(r6, &(0x7f0000003400)={0xa, 0x4, 0xfa00, {r1}}, 0xc) 4.736072716s ago: executing program 5 (id=702): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)}, 0x10) r1 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x1c}}, 0x0) syz_io_uring_setup(0x6ff, &(0x7f0000000140)={0x0, 0xce1d, 0x10826, 0x2, 0x9c}, &(0x7f0000000080), &(0x7f0000000000), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000"], 0x0) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x40, 0x8302) io_submit(0x0, 0x0, &(0x7f0000000880)) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000140)=""/231) 4.708150116s ago: executing program 1 (id=703): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x10080, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpuidle/current_governor\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x2c}}, 0x0) write(r0, &(0x7f0000000100)='haltpoll\x00', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000400)={0x1, 0xf}) write(r4, &(0x7f0000000180)='0\x00', 0x2) write(r4, &(0x7f00000001c0)='1\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000000240)='1', 0x1) 4.706510547s ago: executing program 3 (id=704): socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) migrate_pages(0x0, 0xffffffffffffffff, &(0x7f0000000300)=0xb, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x83, 0x7fff0000}]}) socket$inet6(0xa, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}, 0x0) socket(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x903940, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) close_range(r7, 0xffffffffffffffff, 0x2) flistxattr(r7, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r6], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x10000, &(0x7f00000002c0), 0x1, 0x507, &(0x7f00000009c0)="$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") syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.648610168s ago: executing program 0 (id=705): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x7, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x409, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4c, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a000007090001007379"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x240400c0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa300090504"], 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x4, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.312909356s ago: executing program 3 (id=707): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0xa4, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd], [0x0, 0xfff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xa4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x7e, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac1414aa0011000000000000000100000001"], 0x30}, 0x4040810) socket$inet6_tcp(0xa, 0x1, 0x0) socket$pptp(0x18, 0x1, 0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r6, 0x541c, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu -pids'], 0xb) 4.311465426s ago: executing program 2 (id=717): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x10080, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpuidle/current_governor\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x2c}}, 0x0) write(r0, &(0x7f0000000100)='haltpoll\x00', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000400)={0x1, 0xf}) write(r4, &(0x7f0000000180)='0\x00', 0x2) write(r4, &(0x7f00000001c0)='1\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000000240)='1', 0x1) 4.310317146s ago: executing program 1 (id=708): r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc\x00', 0x1ff) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000800)={0x20080522}, &(0x7f0000000840)={0x200002, 0x200003, 0x803, 0x4, 0x7, 0x1}) mount(0x0, &(0x7f0000000880)='./proc\x00', &(0x7f00000008c0)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./proc/thread-self/fail-nth\x00', 0x2, 0x2) write(r4, &(0x7f0000000940)='27', 0x2) unshare(0xa000400) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x48, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_ACT={0x4}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @multicast2}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88f5}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010000000e4ff001000000000008946c5", @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e30000000000000000000000008000a00", @ANYRES32=r7, @ANYBLOB], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'gre0\x00', &(0x7f0000000580)={'gre0\x00', 0x0, 0x20, 0x8000, 0x7b, 0x8, {{0x7, 0x4, 0x2, 0x7, 0x1c, 0x66, 0x0, 0xe, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@end, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000600)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000980)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r1, @ANYBLOB="04002cb6fcbd7000fbdbdf25170000005800018008000190", @ANYRES32=r2, @ANYBLOB="1400020067656e657665310000000000000000001400020069705f767469300000000000000000001400020069703667726574617030000000000000080003000000000008000100", @ANYRES32=r5, @ANYBLOB="34000180080003000100000014000200687372300000000000000000000000001400020076657468315f766972745f776966690048000180080003000100000008000100", @ANYRES32=r7, @ANYBLOB="1400020070696d3672656730000000000000000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="08000300010000000c0001800800030000000000"], 0xf4}, 0x1, 0x0, 0x0, 0x4000004}, 0x8880) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) r12 = socket(0x2d, 0x2, 0x0) bind$xdp(r12, &(0x7f0000000080)={0x2d, 0x0, r11, 0xc}, 0x10) r13 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r13, 0x5609, &(0x7f0000000000)={0x2, 0x0, 0x2}) ioctl$KDGKBMETA(r13, 0x4b62, &(0x7f0000000040)) r14 = socket(0x2d, 0x2, 0x0) bind$xdp(r14, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(r14) 2.532507829s ago: executing program 2 (id=709): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000002380), 0x2, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002400)={0xfc, {"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", 0xce2}}, 0x1006) 2.285010295s ago: executing program 3 (id=710): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) r3 = memfd_create(&(0x7f0000000040)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000003c0)={r3, 0x0, 0xfffffffff0000000, 0x1000000}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x48041, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000001800)={0x1, 0x0, [{0x10}]}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, 0x0, 0x40) r7 = socket$packet(0x11, 0x3, 0x300) syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00') r8 = syz_create_resource$futex(&(0x7f00000006c0)) futex(r8, 0x6, 0x0, 0x0, 0x0, 0x1) bind$packet(r7, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b7000000f8000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000015c0), 0x8, 0x10, &(0x7f0000001600), 0x10}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c0000"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) write(r7, &(0x7f0000000500)="08021100950108021100000008004500", 0x10) 2.248805636s ago: executing program 2 (id=711): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x529820, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="680000001900010000000000000000001c0109000c00128008002100", @ANYRES32=0x0, @ANYBLOB="4800068041002f80897a22072687e16fdfb849e8dd3bce220a0cdb49cc0d05e9b5a5a0217c43a621fc12ea0f434939e5c85902fb1debcbb8e973833811ca0779b6c51cf041d37410"], 0x68}, 0x1, 0x0, 0x0, 0x5}, 0x4000854) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000580)=0x3) close(0x3) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0xd, 0x1afe}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x4000, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000102010100000000000000000a0000013c0001802c000180140003"], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x8d0) accept(0xffffffffffffffff, &(0x7f0000000380)=@un=@abs, &(0x7f0000000400)=0x80) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x2, 0xa}}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.246223946s ago: executing program 1 (id=712): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000200), 0x2, 0x101000) ioctl$I2C_RDWR(r1, 0x107, &(0x7f0000000240)={&(0x7f0000001340)=[{0x7, 0x0, 0x0, 0x0}], 0x1}) 2.039964541s ago: executing program 2 (id=713): capset(&(0x7f0000000300)={0x19980330}, &(0x7f0000000440)) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xa, 0x6b8a01) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *:', @ANYRESOCT=r1], 0xd) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000, 0x2}) close(r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000180)=r3) 2.038591831s ago: executing program 3 (id=714): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x7, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0xfffffffe, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x0, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x409, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4c, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x0, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x80000003, 0x100009, 0xc, 0x32d, 0x4, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x4006, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a0000070800024000000002090001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x20004000}, 0x240400c0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000002c0)=@md0, r6, &(0x7f00000004c0)={0x8001, 0x7fff, 0xc, 0xaa, 0x1c0, 0x8001, 0x5, 0x10, 0x8}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.839329526s ago: executing program 2 (id=715): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0xa4, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd], [0x0, 0xfff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xa4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={0xffffffffffffffff, r6, 0xe}, 0x14) sendmsg$inet(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x7e, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac1414aa0011000000000000000100000001"], 0x30}, 0x4040810) socket$inet6_tcp(0xa, 0x1, 0x0) socket$pptp(0x18, 0x1, 0x2) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r7, 0x541c, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu -pids'], 0xb) 422.11195ms ago: executing program 3 (id=716): symlink(0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0xffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x88c, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0xffff, 0xd, 0x81, 0x7, 0x6, 0x7, 0x9, 0x4, 0x4, 0x6, 0x3, 0x5, 0x3, 0x6, 0x6, 0xffff, 0x6, 0x4, 0x6, 0x0, 0x20, 0xb, 0x5, 0x5, 0x2, 0x62, 0x9, 0xfffffff8, 0x6338, 0x70, 0x7, 0x9, 0x8, 0x9, 0x7, 0x80000000, 0x7, 0xfff, 0x2, 0x9, 0xfffffffa, 0x6, 0xfffffffd, 0x600000, 0x6, 0x1, 0x8, 0x1, 0xbc0, 0x9bf1, 0x5, 0x2, 0x0, 0xe, 0x9, 0x1ff, 0xb9, 0xc741, 0x6, 0x5, 0x1, 0xed, 0x1, 0x8001, 0xb, 0x5b96, 0xffff, 0x2, 0x20000000, 0xff, 0x1, 0x4, 0xb, 0x401, 0xffffffff, 0x1000, 0x101, 0x50, 0x8, 0x2, 0x1, 0x5, 0x5, 0x7, 0x8a6b, 0xfffffbff, 0x4, 0x2, 0x1, 0x5, 0x6, 0x2, 0x5, 0xffffffff, 0x80, 0x7, 0x0, 0x9, 0xfffffff4, 0x3b96, 0xfffff800, 0x0, 0x3, 0xf, 0xf8b, 0x10001, 0x3, 0x2, 0xa78, 0x3, 0xcb0, 0x6, 0x9, 0x9, 0x0, 0x7, 0x7fffffff, 0x7, 0x9, 0x0, 0x40, 0x8, 0x8, 0x5, 0x8c, 0xaa93, 0x800, 0x3, 0x9, 0x10001, 0x6, 0x1, 0xd12, 0x0, 0x23487474, 0x3cd2, 0xec19, 0x7, 0x4005, 0x5, 0xb1, 0x2, 0x6, 0x9, 0x2, 0xaa85, 0x40, 0xff, 0x9, 0x9, 0x1, 0x5, 0x0, 0x2, 0x1, 0x4, 0x9, 0x4, 0x2, 0x7, 0xffffffff, 0x1, 0xd76a, 0x6, 0xfffffff6, 0x800004, 0x1, 0xfffffffd, 0xfffffffc, 0x50, 0x7359, 0x8, 0x7, 0xb, 0xa, 0x2d5, 0x6, 0xf, 0x1, 0x773a, 0x6b7b, 0x10001, 0x3, 0x4, 0x5, 0x7, 0x4, 0x800, 0x2, 0x5, 0x0, 0x9, 0x3ff, 0x9, 0x5, 0x5, 0x0, 0x7, 0x8, 0xffff, 0x3, 0x4, 0x7, 0xae2b, 0x1, 0x6, 0x1a71, 0x0, 0x10001000, 0x0, 0x3, 0x7, 0x1, 0x8001, 0x3c34, 0x6, 0x10000, 0x5, 0x7fff, 0x0, 0x8, 0x3, 0x3, 0xc, 0x100, 0x0, 0x2, 0x3, 0x5, 0xc8, 0x557c, 0x9, 0x8, 0xff, 0x3, 0x80, 0x8000, 0x7bc, 0x1, 0x8, 0x6, 0xe, 0x5, 0xfff, 0x9, 0x5, 0x80000001, 0x8000, 0x8, 0x9, 0x1, 0x80000000, 0x4, 0x9, 0x1ff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0xd, 0x7, 0x9, 0x6, 0x2, 0x4, 0x81, 0x1, 0x100, 0x7, 0x3f, 0x3, 0x8, 0x9, 0x2, 0x6, 0x6dbf, 0x8, 0x5, 0x12c, 0x3, 0x5, 0x5, 0x7, 0x100, 0x9, 0x8, 0x9, 0x8, 0x3, 0x1, 0x200, 0xfffffffe, 0x328d, 0xfffffe01, 0x9, 0x8, 0x3, 0xffff8000, 0x4f, 0x0, 0xd, 0x3, 0x8000, 0x2, 0x17, 0x88, 0x8, 0xc, 0xffff, 0x0, 0x3, 0x2, 0x42f, 0xffffff29, 0x5, 0x222, 0xe0, 0x6, 0xc26, 0x3, 0x6, 0x3, 0xe, 0x1, 0x800, 0x1bf, 0x4, 0x5, 0x4, 0x8, 0x7ce7c36c, 0x3, 0x1eb, 0x10001, 0x8, 0x17, 0x6ce, 0x6, 0x79, 0x2, 0x5, 0xfffffff9, 0x2, 0x4e30, 0x2, 0x6, 0x2, 0x90, 0x2, 0x2, 0xc80e, 0x4, 0x5, 0x450, 0xe0, 0x9, 0x5, 0xd, 0x5, 0x5, 0x9, 0x1045800, 0x0, 0xffffffde, 0x6a4, 0x5, 0x9, 0x6, 0x1f, 0xb89, 0x6, 0xff, 0x1ff, 0x6, 0xfffff77b, 0x3, 0xffffffff, 0xfffff400, 0x6, 0x6, 0x8, 0x9, 0x2, 0x7, 0x401, 0xa7d, 0x6, 0xfffff9f3, 0x1, 0x9, 0x1, 0xb4, 0x2, 0xc, 0x8, 0x7, 0x0, 0x5891, 0x8, 0x3, 0x8, 0x0, 0x4, 0xb, 0x0, 0xff, 0x4f, 0x8, 0x33f, 0x70fc7f4f, 0x0, 0x4, 0x0, 0xc, 0x9, 0x5, 0x6, 0x3, 0xb, 0x1, 0x0, 0x2c46512a, 0x3, 0x2640, 0x0, 0x10000, 0x0, 0x9, 0x3, 0x6, 0x7fffffff, 0xdc, 0x80000000, 0x6, 0xbb16, 0x4f7, 0x9, 0xbd1, 0x44, 0xffffff7f, 0xa3, 0x1, 0x4, 0x0, 0x3, 0x2, 0x5, 0x0, 0x9, 0x4, 0x4b, 0x1, 0xc, 0x2, 0x4, 0x2e4, 0xc7, 0x4, 0x4, 0x4, 0x81, 0xff, 0x6, 0x1, 0x10, 0x6, 0x9, 0x1, 0x4e2, 0x100, 0x7, 0x3ff, 0x10000, 0x4, 0x1, 0x101, 0x800, 0x101, 0x9, 0x6, 0x9, 0x6, 0x101, 0x9, 0x4, 0x6, 0x800, 0x101, 0xf07, 0x0, 0x2, 0x81, 0x6, 0x80000001, 0x8, 0x2, 0xee8, 0x1ff, 0x81, 0x24000, 0x6, 0x2, 0x2, 0x2, 0x10, 0x8001, 0xa, 0x8, 0x200, 0x6, 0x9, 0x8003, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x4, 0x2, 0x7, {0x3, 0x2, 0x4, 0x40, 0x6, 0x1ff}, {0x2, 0x0, 0x2, 0xcd4, 0x9, 0x8}, 0x0, 0x7ff}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockname$packet(r2, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x4000010) sendmmsg$inet(r0, 0x0, 0x0, 0xc0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x10, &(0x7f0000000040)={[{@discard_async}]}, 0x25, 0x559a, &(0x7f0000005680)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x105042, 0x1db) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000240)="0bcb", 0x2}], 0x1) 420.69359ms ago: executing program 0 (id=727): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000000080000000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0900000004000000080000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xc, &(0x7f00000001c0)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r5}, &(0x7f0000000480), &(0x7f00000004c0)=r2}, 0x20) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000500)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x80) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000680)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x400000bce) r8 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0) read$msr(r8, &(0x7f0000019740)=""/102384, 0x18ff0) unshare(0x22020600) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0xce, 0x4) 267.848314ms ago: executing program 0 (id=718): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x7, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x7, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0x40, 0xff, 0x0, 0x6, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x0, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x90cf, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x807, 0xab00060, 0x2, 0x409, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0xfffffffc, 0x67b2, 0x1cc, 0x9, 0x80000004, 0xfb, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4c, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x5, 0xdd81, 0x4, 0x7f, 0x9d27, 0x5, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x9, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x8, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x3, 0x2, 0x40100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x5916, 0xfffffff9, 0x7, 0x1000, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13ffb, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a000007090001007379"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400af0fb4ae1b85012000e8ff82195d0800000000000000000500000a2c000000060a010400000000000000000a0000010900010073797a318c08b3d4000000000900020073797a32000000001400000011000100000000000100b1000000000ac9af9c7a17f5fc715c82ce47f856a1c8dad6e5fc8730a65b0549a95a0e0c5aecc2241a3304b8ab58a6a6079fb90758c8c1880442c21061035fb4489e97"], 0x54}, 0x1, 0x0, 0x0, 0x20004000}, 0x240400c0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) syz_mount_image$f2fs(&(0x7f00000007c0), &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1808014, &(0x7f0000000980)=ANY=[@ANYRES64=r2, @ANYRES8, @ANYRES64=r1, @ANYRES16, @ANYRES8=r0, @ANYRES64], 0x1, 0x55b2, &(0x7f0000001c00)="$eJzs3DuPG2UXAOAz3mzuX74VoqDLSBHSrhRb8eaiUBEgEReRKOJSUIHXdiwntme1dhyTKgUlouCfIJCoKPkNFFBChyhAdEhBnpmFbG6QrNdLkueRxmfm9esz5x1ZK52ZlQN4Zi2lv/+axJE4EBELEXE4iXw/KbeIWxHnirkvRMTRiKjcsSXl+F8DeyPiYEQcmSYvciblW58fHx87/ctbv33z3b49h774+vtdXTiwq16MiP56sX+jX8Ssk4fbC+V4Y9zNY//UuIzrW3L0s2L8Rnstz3CjsTmvkceTnWJ+tn59OI1Xeo3mNHa6V/Lx9UFxwuG4s5ln+oH0amMjP2611/LYHWZ57Jwtzju5WfxtuzkcFXlaZb6P8/QxGm3GYrw9aRfrWb+Wx+ZgVI4XebNWezKN4zKWp4tm1mvldaw97lX+73t7odwZdrNBerpWP1urn6nWN7JWe9Q+VW30W2dOpcudXndwfVIdtRv9c50s6/TatWbWX0mXO81mtV5Pl8+317qNQVqv107WTlRPr5R7x9PXL72f9lrp8jS+2h1cH3V7w/RKtpEWn1hJV2snX1pJj9XTdy9eTi+/c+HCxcvvfXj+g0uvXHzztXLSPWWly6snVler9RPV1frKNtc/XVg6bm88Cev/pCz6Edaf3H/4xx+2d9mg8IAvGAAPdk//H3f3/6H/B2buIf1/XP2H/r9/rTzemf4/7tv/VyI6N4u6JmWcWf8/bame1f7/Ufrfyi70v4uh/9/B9cO2PF7/v3fmdQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMHc/LX75Rr6zVBwfKsf/Vw49Vx4nEVGJiNv3sRB7t+RcKPMsPmD+4l01fJtEnmF6jn3ldjAizpXbH//f6asAAAAAT6+vbh39rOjWi5el3S6IeSpu2lQOfzSjfElELC79PKNslenL8zNKln+/98RkRtnyG1j7Z5SsuOW2Z1bZ/pWFLWH/HSEpQmWu5QAAAHOxtROYbxcCAADAPH360HdfnlsdzFkSm48yN58F5/95//cDwQNb3gMAAACeQMluFwAAAADsuLz/9/t/AAAA8HQrfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgT3buJyd1IAwA+LRQeH/zyIt7r+IOjuERXLoUDuAlOAKewMQLcAZMXHgEFUM7khRtYsKUKvn9kg7MDPk6A2y+mXQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo032xmNxcnV7vGeb2eb1jGHt22xskmAoAAADQYFUsJuWbUVX/Hdv/xqb/sZ6FEPKGdL4XBrWYvRinaPh8sTOGuxDKCJv2Ybx+hRDO4vX0r+1vAQAAAI7XcjYfV9l6VcQlgIduR8WBVIs2+Z/zRPGyEEIxekwULd8UJ4mClf/vfrhMFK1cwPqRKFi15Nb/uG+Q6iZ1vdrL20ym5Y9Y1vJ27gsAAHSpngk0ZCEAAAAcgYuuB8AhvE/ts22x3WeMD+3HDcGftRoAAADwDWVdDwAAAABoXZn/f6Xz/zLn/wEAAEBy1fl/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtGlVLCbL2Xzc1D/9ZJyX9X7SzQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhlf95RIATCIAz2ru9M5v6HlQYNjU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgze/+8n9iapxJ5l4bS88jydqpsXVq7J0bR38YX78GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPii3/3yf2JqnEnmThtLxyPJ2lVj66qx96Bx9GC8/RsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIudO/ZtowoDAP6dL3aTAiIEFIkgVKQOsNDULS0dqRAoYuBPQIpSpwRSCm0GWkWULGwoC0sXBCNCSKCw5X/o3EhdytbBQ5CYGILufJdeEpdEDT2b5veTnu/z8/ne956tqp+fHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBS92J8V8ZpdjOe3RyLRtF3d3N5Ljtu7Dpm1lfvTWUti5O6Ex9+r1bvnJgcXCIAAAAcHWlZ30fE/ebaTES8k9X63YvRLM/Jav4fnuvFZT2/u+7f2FweLR6aKuv/33978NL2QONpPk520fmFxc7pvamMPKk5Drvn9z1jJF/5/LOXNH9BGh+svNht5uuZfHvnznutPDxWR7YAwOM4VR6LoPz/UHZsDzIxAI6MkUrhXdT/kY4PNicAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAOnRX4pkyTiJiauRhnNnYXJ7rd/x69d7UetHO3769Wr1mdolmRMwvLHZO1ziX4VWu5s1PZxcXO9eu38iCNIpgu+fJBScios9Dtw729LRI/5HntCJiR8/Jl/tc56MDjLXrOnuC4u1Z49JlwVg2v31PTnb0JHsW/N2tnnpyPmyQPtazGsXrMyyz2BuMPvptvE9Qvvf++8Rq/ucIAICnXrNoWSV6v7k2k/UlExFbP+6s/1+vxLGj7t+61evp3V+v1P8PPj5/tzpWtf5v1zS//4PppSufT1+/cfPNhSuzlzuXO5+9dab9dvvshXPnLkznn5VMz0fDJyYAAAAcQqto1fq/MbF3//94JY5/2f+v1v9ffN/+qjpWqv7v6+Gm36AzAQAAOIpa29ELr/31Z9LnjKTsbH85u7R0rZ20WpFHZ3q3taV6CMeKVq3/04lBZwUAAADUobuS7Nj/v1SJ44D7/8/+9Mov1WumETEWcTUiOqfmri5eqm86Q62OnzfnA7UGPVMAAAAGZaxo5f5/+besuiuN7a88NCLijZMRfxe/4Y8D1v/p+9/8XB2r+v3/s/VNcSg1JnvrkR8nI0YmB50RAAAAT7PRomXF/h/NtZlPfj3+Ycv3/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADq9k8AAAD//xSuI20=") r3 = open(&(0x7f00000071c0)='.\x00', 0x51a382, 0x78e22799f4a46e8e) write$FUSE_INIT(r3, &(0x7f0000007200)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xfffffffe, 0x300040ac, 0x0, 0xffff, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x3, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) syz_mount_image$iso9660(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x2000c12, &(0x7f0000000640)=ANY=[@ANYBLOB='iocharset=cp1251,overriderockperm,overriderockperm,mode=0x0000000000000004,block=0x0000000000000800,check=strict,mode=0x00000000,iocharset=cp855,check=strict,map=normal,check=strict,unhide,\x00'], 0x8, 0xa40, &(0x7f0000001140)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000001b80)='./file1\x00', 0x48042, 0x8c) mkdirat(0xffffffffffffff9c, &(0x7f0000001bc0)='./file1\x00', 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000740)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) connect$pppoe(r5, &(0x7f0000000780)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x46}, 'ip6tnl0\x00'}}, 0x1e) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) 243.623824ms ago: executing program 2 (id=719): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) io_uring_setup(0x2a32, &(0x7f0000000000)={0x0, 0xde1f, 0x2, 0x80002, 0x3e8}) r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0xffff}, {0x0, 0x1, 0x1800}], 0x2) close(0x3) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, &(0x7f0000000180)=[{0x3, 0xfffe}], 0x1, 0x0) semop(r3, &(0x7f00000001c0)=[{0x3, 0xffff, 0x1000}, {0x4, 0x4, 0x800}], 0x2) semctl$IPC_RMID(r3, 0x0, 0x0) semctl$GETPID(r3, 0x4, 0xb, &(0x7f0000000200)=""/69) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x7, r4}, 0x38) fchdir(r1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 0s ago: executing program 5 (id=720): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001030000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x8000, 0x50) fchown(r1, 0x0, 0xffffffffffffffff) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file0', [{0x20, '/$,*'}], 0xa, "3674f520620ee043e9525d154f4b148186ce042af8c234"}, 0x27) ioctl$TIOCSBRK(r1, 0x5427) syz_usb_control_io$uac1(r0, &(0x7f0000000640)={0x14, 0x0, 0x0}, &(0x7f0000000940)={0x44, &(0x7f0000000680)={0x40, 0x14, 0x4, "bb0c7438"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): __get_vm_area_node+0x14f/0x2d0 [ 203.115230][ T6384] __vmalloc_node_range+0xef/0x8b0 [ 203.120337][ T6384] ? n_tty_open+0x19/0x150 [ 203.124745][ T6384] ? read_lock_is_recursive+0x10/0x10 [ 203.130104][ T6384] ? remove_wait_queue+0x120/0x120 [ 203.135206][ T6384] ? n_tty_open+0x19/0x150 [ 203.139608][ T6384] vzalloc+0x75/0x80 [ 203.143489][ T6384] ? n_tty_open+0x19/0x150 [ 203.147895][ T6384] n_tty_open+0x19/0x150 [ 203.152125][ T6384] tty_ldisc_setup+0xbf/0x250 [ 203.156792][ T6384] tty_init_dev+0x239/0x470 [ 203.161287][ T6384] tty_open+0x7e8/0xcd0 [ 203.165435][ T6384] ? __lock_acquire+0x7d40/0x7d40 [ 203.170453][ T6384] ? tty_compat_ioctl+0x570/0x570 [ 203.175461][ T6384] ? memset+0x1e/0x40 [ 203.179431][ T6384] ? do_raw_spin_unlock+0x11d/0x230 [ 203.184632][ T6384] chrdev_open+0x585/0x5f0 [ 203.189061][ T6384] ? cd_forget+0x160/0x160 [ 203.193477][ T6384] ? fsnotify_perm+0x3a7/0x560 [ 203.198227][ T6384] ? cd_forget+0x160/0x160 [ 203.202632][ T6384] do_dentry_open+0x7f7/0xf90 [ 203.207304][ T6384] ? vfs_open+0x2b/0x80 [ 203.211452][ T6384] path_openat+0x2718/0x2fb0 [ 203.216061][ T6384] ? __kasan_slab_alloc+0xa9/0xc0 [ 203.221077][ T6384] ? do_filp_open+0x400/0x400 [ 203.225750][ T6384] do_filp_open+0x1df/0x400 [ 203.230245][ T6384] ? vfs_tmpfile+0x300/0x300 [ 203.234844][ T6384] ? _raw_spin_unlock+0x24/0x40 [ 203.239687][ T6384] ? alloc_fd+0x59e/0x650 [ 203.244005][ T6384] do_sys_openat2+0x14b/0x500 [ 203.248669][ T6384] ? __lock_acquire+0x7d40/0x7d40 [ 203.253682][ T6384] ? do_sys_open+0xe0/0xe0 [ 203.258085][ T6384] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 203.264067][ T6384] ? lock_chain_count+0x20/0x20 [ 203.268921][ T6384] __x64_sys_openat+0x135/0x160 [ 203.273776][ T6384] do_syscall_64+0x4c/0xa0 [ 203.278185][ T6384] ? clear_bhb_loop+0x30/0x80 [ 203.282849][ T6384] ? clear_bhb_loop+0x30/0x80 [ 203.287516][ T6384] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 203.293397][ T6384] RIP: 0033:0x7fa9f9cffd8e [ 203.297797][ T6384] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 203.317390][ T6384] RSP: 002b:00007fa9f7f96b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 203.325791][ T6384] RAX: ffffffffffffffda RBX: 00007fa9f7f976c0 RCX: 00007fa9f9cffd8e [ 203.333755][ T6384] RDX: 0000000000000002 RSI: 00007fa9f7f96c00 RDI: ffffffffffffff9c [ 203.341712][ T6384] RBP: 00007fa9f9dd6ab8 R08: 0000000000000000 R09: 0000000000000000 [ 203.349671][ T6384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.357634][ T6384] R13: 00007fa9f9fc7038 R14: 00007fa9f9fc6fa0 R15: 00007ffd070e8858 [ 203.365601][ T6384] [ 203.368662][ T6384] warn_alloc: 2 callbacks suppressed [ 203.368670][ T6384] syz.5.537: vmalloc error: size 9120, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 203.388902][ T6384] CPU: 0 PID: 6384 Comm: syz.5.537 Not tainted syzkaller #0 [ 203.396172][ T6384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 203.406210][ T6384] Call Trace: [ 203.409495][ T6384] [ 203.412421][ T6384] dump_stack_lvl+0x188/0x250 [ 203.417086][ T6384] ? rcu_lock_release+0x5/0x20 [ 203.421836][ T6384] ? show_regs_print_info+0x20/0x20 [ 203.427018][ T6384] ? load_image+0x410/0x410 [ 203.431522][ T6384] warn_alloc+0x245/0x320 [ 203.435842][ T6384] ? zone_watermark_ok_safe+0x250/0x250 [ 203.441378][ T6384] ? __get_vm_area_node+0x164/0x2d0 [ 203.446563][ T6384] ? kfree+0xef/0x2a0 [ 203.450544][ T6384] __vmalloc_node_range+0x2b1/0x8b0 [ 203.455728][ T6384] ? read_lock_is_recursive+0x10/0x10 [ 203.461086][ T6384] ? remove_wait_queue+0x120/0x120 [ 203.466187][ T6384] ? n_tty_open+0x19/0x150 [ 203.470593][ T6384] vzalloc+0x75/0x80 [ 203.474484][ T6384] ? n_tty_open+0x19/0x150 [ 203.478886][ T6384] n_tty_open+0x19/0x150 [ 203.483119][ T6384] tty_ldisc_setup+0xbf/0x250 [ 203.487793][ T6384] tty_init_dev+0x239/0x470 [ 203.492289][ T6384] tty_open+0x7e8/0xcd0 [ 203.496448][ T6384] ? __lock_acquire+0x7d40/0x7d40 [ 203.501472][ T6384] ? tty_compat_ioctl+0x570/0x570 [ 203.506524][ T6384] ? memset+0x1e/0x40 [ 203.510592][ T6384] ? do_raw_spin_unlock+0x11d/0x230 [ 203.515789][ T6384] chrdev_open+0x585/0x5f0 [ 203.520194][ T6384] ? cd_forget+0x160/0x160 [ 203.524601][ T6384] ? fsnotify_perm+0x3a7/0x560 [ 203.529357][ T6384] ? cd_forget+0x160/0x160 [ 203.533767][ T6384] do_dentry_open+0x7f7/0xf90 [ 203.538432][ T6384] ? vfs_open+0x2b/0x80 [ 203.542579][ T6384] path_openat+0x2718/0x2fb0 [ 203.547177][ T6384] ? __kasan_slab_alloc+0xa9/0xc0 [ 203.552199][ T6384] ? do_filp_open+0x400/0x400 [ 203.556873][ T6384] do_filp_open+0x1df/0x400 [ 203.561368][ T6384] ? vfs_tmpfile+0x300/0x300 [ 203.565966][ T6384] ? _raw_spin_unlock+0x24/0x40 [ 203.570808][ T6384] ? alloc_fd+0x59e/0x650 [ 203.575128][ T6384] do_sys_openat2+0x14b/0x500 [ 203.579793][ T6384] ? __lock_acquire+0x7d40/0x7d40 [ 203.584806][ T6384] ? do_sys_open+0xe0/0xe0 [ 203.589206][ T6384] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 203.595194][ T6384] ? lock_chain_count+0x20/0x20 [ 203.600042][ T6384] __x64_sys_openat+0x135/0x160 [ 203.604883][ T6384] do_syscall_64+0x4c/0xa0 [ 203.609291][ T6384] ? clear_bhb_loop+0x30/0x80 [ 203.613952][ T6384] ? clear_bhb_loop+0x30/0x80 [ 203.618628][ T6384] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 203.624506][ T6384] RIP: 0033:0x7fa9f9cffd8e [ 203.628903][ T6384] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 203.648498][ T6384] RSP: 002b:00007fa9f7f96b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 203.656893][ T6384] RAX: ffffffffffffffda RBX: 00007fa9f7f976c0 RCX: 00007fa9f9cffd8e [ 203.664852][ T6384] RDX: 0000000000000002 RSI: 00007fa9f7f96c00 RDI: ffffffffffffff9c [ 203.672834][ T6384] RBP: 00007fa9f9dd6ab8 R08: 0000000000000000 R09: 0000000000000000 [ 203.680799][ T6384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.688760][ T6384] R13: 00007fa9f9fc7038 R14: 00007fa9f9fc6fa0 R15: 00007ffd070e8858 [ 203.696744][ T6384] [ 203.699794][ T6384] Mem-Info: [ 203.702927][ T6384] active_anon:328 inactive_anon:9618 isolated_anon:0 [ 203.702927][ T6384] active_file:5028 inactive_file:46493 isolated_file:0 [ 203.702927][ T6384] unevictable:768 dirty:352 writeback:0 [ 203.702927][ T6384] slab_reclaimable:21213 slab_unreclaimable:97758 [ 203.702927][ T6384] mapped:33296 shmem:4520 pagetables:832 bounce:0 [ 203.702927][ T6384] kernel_misc_reclaimable:0 [ 203.702927][ T6384] free:1358057 free_pcp:8971 free_cma:0 [ 203.744433][ T6384] Node 0 active_anon:1280kB inactive_anon:37960kB active_file:19908kB inactive_file:185972kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133184kB dirty:1408kB writeback:0kB shmem:16000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11376kB pagetables:3328kB all_unreclaimable? no [ 203.775698][ T6384] Node 1 active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 203.804714][ T6384] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 203.830921][ T6384] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 203.836653][ T6384] Node 0 DMA32 free:1496672kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1280kB inactive_anon:37960kB active_file:19908kB inactive_file:185972kB unevictable:1536kB writepending:1408kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:35884kB local_pcp:35884kB free_cma:0kB [ 203.866630][ T6384] lowmem_reserve[]: 0 0 0 0 0 [ 203.871330][ T6384] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 203.897131][ T6384] lowmem_reserve[]: 0 0 0 0 0 [ 203.901835][ T6384] Node 1 Normal free:3920196kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 203.930067][ T6384] lowmem_reserve[]: 0 0 0 0 0 [ 203.934778][ T6384] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 203.947374][ T6384] Node 0 DMA32: 20*4kB (M) 86*8kB (ME) 12*16kB (ME) 287*32kB (UME) 27*64kB (UME) 50*128kB (UE) 9*256kB (UME) 5*512kB (UM) 3*1024kB (UME) 4*2048kB (M) 357*4096kB (UM) = 1496672kB [ 203.965041][ T6384] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 203.976482][ T6384] Node 1 Normal: 245*4kB (UME) 58*8kB (UME) 26*16kB (UME) 184*32kB (UME) 80*64kB (UME) 16*128kB (U) 13*256kB (UME) 9*512kB (UE) 0*1024kB 3*2048kB (UME) 950*4096kB (M) = 3920196kB [ 203.994235][ T6384] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 204.003790][ T6384] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 204.013070][ T6384] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 204.022608][ T6384] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 204.031892][ T6384] 56041 total pagecache pages [ 204.036550][ T6384] 0 pages in swap cache [ 204.040682][ T6384] Swap cache stats: add 48, delete 48, find 1/15 [ 204.047020][ T6384] Free swap = 124796kB [ 204.051181][ T6384] Total swap = 124996kB [ 204.055315][ T6384] 2097051 pages RAM [ 204.059099][ T6384] 0 pages HighMem/MovableOnly [ 204.063774][ T6384] 415313 pages reserved [ 204.067906][ T6384] 0 pages cma reserved [ 204.071974][ T6384] tty tty30: ldisc open failed (-12), clearing slot 29 [ 205.459022][ T6390] netlink: 'syz.2.541': attribute type 1 has an invalid length. [ 205.502466][ T6393] netlink: 32 bytes leftover after parsing attributes in process `syz.0.542'. [ 205.521926][ T6387] x86: Booting SMP configuration: [ 205.528430][ T6387] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 205.535594][ T6390] netlink: 20 bytes leftover after parsing attributes in process `syz.2.541'. [ 205.571213][ T0] kvm-clock: cpu 1, msr ff0a041, secondary cpu clock [ 205.580930][ T18] kvm-guest: stealtime: cpu 1, msr b8f27440 [ 206.740953][ T6217] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 208.340927][ T6217] usb 4-1: Using ep0 maxpacket: 16 [ 208.760973][ T6217] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 208.768643][ T6217] usb 4-1: can't read configurations, error -71 [ 208.822911][ T6421] FAULT_INJECTION: forcing a failure. [ 208.822911][ T6421] name failslab, interval 1, probability 0, space 0, times 0 [ 208.835717][ T6421] CPU: 0 PID: 6421 Comm: syz.3.549 Not tainted syzkaller #0 [ 208.843002][ T6421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 208.853080][ T6421] Call Trace: [ 208.856348][ T6421] [ 208.859273][ T6421] dump_stack_lvl+0x188/0x250 [ 208.863945][ T6421] ? show_regs_print_info+0x20/0x20 [ 208.869157][ T6421] ? load_image+0x410/0x410 [ 208.873666][ T6421] ? __might_sleep+0xf0/0xf0 [ 208.878248][ T6421] ? __lock_acquire+0x7d40/0x7d40 [ 208.883270][ T6421] should_fail+0x383/0x4b0 [ 208.887719][ T6421] should_failslab+0x5/0x20 [ 208.892237][ T6421] slab_pre_alloc_hook+0x51/0xc0 [ 208.897294][ T6421] kmem_cache_alloc_node+0x47/0x2c0 [ 208.902490][ T6421] ? alloc_vmap_area+0x199/0x1b30 [ 208.907528][ T6421] ? __x64_sys_openat+0x135/0x160 [ 208.912572][ T6421] alloc_vmap_area+0x199/0x1b30 [ 208.917446][ T6421] ? vm_map_ram+0xba0/0xba0 [ 208.921944][ T6421] __get_vm_area_node+0x14f/0x2d0 [ 208.926958][ T6421] __vmalloc_node_range+0xef/0x8b0 [ 208.932057][ T6421] ? n_tty_open+0x19/0x150 [ 208.936464][ T6421] ? read_lock_is_recursive+0x10/0x10 [ 208.941824][ T6421] ? remove_wait_queue+0x120/0x120 [ 208.946927][ T6421] ? n_tty_open+0x19/0x150 [ 208.951526][ T6421] vzalloc+0x75/0x80 [ 208.955432][ T6421] ? n_tty_open+0x19/0x150 [ 208.959858][ T6421] n_tty_open+0x19/0x150 [ 208.964113][ T6421] tty_ldisc_setup+0xbf/0x250 [ 208.968790][ T6421] tty_init_dev+0x239/0x470 [ 208.973290][ T6421] tty_open+0x7e8/0xcd0 [ 208.977463][ T6421] ? __lock_acquire+0x7d40/0x7d40 [ 208.982506][ T6421] ? tty_compat_ioctl+0x570/0x570 [ 208.987536][ T6421] ? memset+0x1e/0x40 [ 208.991535][ T6421] ? do_raw_spin_unlock+0x11d/0x230 [ 208.996762][ T6421] chrdev_open+0x585/0x5f0 [ 209.001191][ T6421] ? cd_forget+0x160/0x160 [ 209.005617][ T6421] ? fsnotify_perm+0x3a7/0x560 [ 209.010370][ T6421] ? cd_forget+0x160/0x160 [ 209.014782][ T6421] do_dentry_open+0x7f7/0xf90 [ 209.019474][ T6421] ? vfs_open+0x2b/0x80 [ 209.023740][ T6421] path_openat+0x2718/0x2fb0 [ 209.028331][ T6421] ? __kasan_slab_alloc+0xa9/0xc0 [ 209.033359][ T6421] ? do_filp_open+0x400/0x400 [ 209.038065][ T6421] do_filp_open+0x1df/0x400 [ 209.042586][ T6421] ? vfs_tmpfile+0x300/0x300 [ 209.047197][ T6421] ? _raw_spin_unlock+0x24/0x40 [ 209.052049][ T6421] ? alloc_fd+0x59e/0x650 [ 209.056397][ T6421] do_sys_openat2+0x14b/0x500 [ 209.061080][ T6421] ? __lock_acquire+0x7d40/0x7d40 [ 209.066132][ T6421] ? do_sys_open+0xe0/0xe0 [ 209.070538][ T6421] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 209.076513][ T6421] ? lock_chain_count+0x20/0x20 [ 209.081387][ T6421] __x64_sys_openat+0x135/0x160 [ 209.086243][ T6421] do_syscall_64+0x4c/0xa0 [ 209.090652][ T6421] ? clear_bhb_loop+0x30/0x80 [ 209.095329][ T6421] ? clear_bhb_loop+0x30/0x80 [ 209.100019][ T6421] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 209.105926][ T6421] RIP: 0033:0x7f874cfbcd8e [ 209.110331][ T6421] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 209.129924][ T6421] RSP: 002b:00007f874b253b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 209.138334][ T6421] RAX: ffffffffffffffda RBX: 00007f874b2546c0 RCX: 00007f874cfbcd8e [ 209.146334][ T6421] RDX: 0000000000000002 RSI: 00007f874b253c00 RDI: ffffffffffffff9c [ 209.154300][ T6421] RBP: 00007f874d093ab8 R08: 0000000000000000 R09: 0000000000000000 [ 209.162281][ T6421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.170254][ T6421] R13: 00007f874d284038 R14: 00007f874d283fa0 R15: 00007ffcc06f9778 [ 209.178244][ T6421] [ 209.185897][ T6421] tty tty26: ldisc open failed (-12), clearing slot 25 [ 209.733185][ T6423] netlink: 'syz.2.550': attribute type 10 has an invalid length. [ 211.407795][ T19] IRQ fixup: irq 33 move in progress, old vector 49 [ 211.419844][ T6440] smpboot: CPU 1 is now offline [ 211.561241][ T6445] netlink: 32 bytes leftover after parsing attributes in process `syz.1.555'. [ 211.640607][ T6444] x86: Booting SMP configuration: [ 211.655861][ T6450] FAULT_INJECTION: forcing a failure. [ 211.655861][ T6450] name failslab, interval 1, probability 0, space 0, times 0 [ 211.668551][ T6450] CPU: 0 PID: 6450 Comm: syz.3.556 Not tainted syzkaller #0 [ 211.675822][ T6450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 211.685863][ T6450] Call Trace: [ 211.689125][ T6450] [ 211.692042][ T6450] dump_stack_lvl+0x188/0x250 [ 211.696723][ T6450] ? show_regs_print_info+0x20/0x20 [ 211.701924][ T6450] ? load_image+0x410/0x410 [ 211.706429][ T6450] ? stack_depot_save+0x41b/0x460 [ 211.711446][ T6450] should_fail+0x383/0x4b0 [ 211.715864][ T6450] should_failslab+0x5/0x20 [ 211.720362][ T6450] slab_pre_alloc_hook+0x51/0xc0 [ 211.725288][ T6450] kmem_cache_alloc_node+0x47/0x2c0 [ 211.730470][ T6450] ? __alloc_skb+0xf4/0x750 [ 211.734982][ T6450] __alloc_skb+0xf4/0x750 [ 211.739299][ T6450] _sctp_make_chunk+0x5b/0x430 [ 211.744048][ T6450] sctp_make_strreset_req+0x73/0x11d0 [ 211.749411][ T6450] sctp_send_reset_streams+0x6ec/0xd30 [ 211.754866][ T6450] sctp_setsockopt+0x3ad/0xf80 [ 211.759618][ T6450] ? sock_common_recvmsg+0x1c0/0x1c0 [ 211.764891][ T6450] __sys_setsockopt+0x2bf/0x3d0 [ 211.769729][ T6450] __x64_sys_setsockopt+0xb1/0xc0 [ 211.774741][ T6450] do_syscall_64+0x4c/0xa0 [ 211.779142][ T6450] ? clear_bhb_loop+0x30/0x80 [ 211.783807][ T6450] ? clear_bhb_loop+0x30/0x80 [ 211.788469][ T6450] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 211.794351][ T6450] RIP: 0033:0x7f874cffc559 [ 211.798754][ T6450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.818344][ T6450] RSP: 002b:00007f874b212028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 211.826743][ T6450] RAX: ffffffffffffffda RBX: 00007f874d284180 RCX: 00007f874cffc559 [ 211.834698][ T6450] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000006 [ 211.842655][ T6450] RBP: 00007f874b212090 R08: 000000000000000c R09: 0000000000000000 [ 211.850624][ T6450] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 211.858592][ T6450] R13: 00007f874d284218 R14: 00007f874d284180 R15: 00007ffcc06f9778 [ 211.866555][ T6450] [ 211.888499][ T6444] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 211.914929][ T0] kvm-clock: cpu 1, msr ff0a041, secondary cpu clock [ 211.925719][ T18] kvm-guest: stealtime: cpu 1, msr b8f27440 [ 212.454897][ T6457] FAULT_INJECTION: forcing a failure. [ 212.454897][ T6457] name failslab, interval 1, probability 0, space 0, times 0 [ 212.467785][ T6457] CPU: 0 PID: 6457 Comm: syz.2.559 Not tainted syzkaller #0 [ 212.475084][ T6457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.485141][ T6457] Call Trace: [ 212.488414][ T6457] [ 212.491332][ T6457] dump_stack_lvl+0x188/0x250 [ 212.496006][ T6457] ? show_regs_print_info+0x20/0x20 [ 212.501190][ T6457] ? load_image+0x410/0x410 [ 212.505720][ T6457] ? __might_sleep+0xf0/0xf0 [ 212.510298][ T6457] ? __lock_acquire+0x7d40/0x7d40 [ 212.515316][ T6457] should_fail+0x383/0x4b0 [ 212.519725][ T6457] should_failslab+0x5/0x20 [ 212.524222][ T6457] slab_pre_alloc_hook+0x51/0xc0 [ 212.529182][ T6457] kmem_cache_alloc_node+0x47/0x2c0 [ 212.534387][ T6457] ? alloc_vmap_area+0x199/0x1b30 [ 212.539409][ T6457] ? __x64_sys_openat+0x135/0x160 [ 212.544423][ T6457] alloc_vmap_area+0x199/0x1b30 [ 212.549285][ T6457] ? vm_map_ram+0xba0/0xba0 [ 212.553790][ T6457] __get_vm_area_node+0x14f/0x2d0 [ 212.558806][ T6457] __vmalloc_node_range+0xef/0x8b0 [ 212.563931][ T6457] ? n_tty_open+0x19/0x150 [ 212.568336][ T6457] ? read_lock_is_recursive+0x10/0x10 [ 212.573703][ T6457] ? remove_wait_queue+0x120/0x120 [ 212.578838][ T6457] ? n_tty_open+0x19/0x150 [ 212.583275][ T6457] vzalloc+0x75/0x80 [ 212.587178][ T6457] ? n_tty_open+0x19/0x150 [ 212.591588][ T6457] n_tty_open+0x19/0x150 [ 212.595827][ T6457] tty_ldisc_setup+0xbf/0x250 [ 212.600494][ T6457] tty_init_dev+0x239/0x470 [ 212.604989][ T6457] tty_open+0x7e8/0xcd0 [ 212.609137][ T6457] ? __lock_acquire+0x7d40/0x7d40 [ 212.614150][ T6457] ? tty_compat_ioctl+0x570/0x570 [ 212.619167][ T6457] ? memset+0x1e/0x40 [ 212.623152][ T6457] ? do_raw_spin_unlock+0x11d/0x230 [ 212.628457][ T6457] chrdev_open+0x585/0x5f0 [ 212.632916][ T6457] ? cd_forget+0x160/0x160 [ 212.637341][ T6457] ? fsnotify_perm+0x3a7/0x560 [ 212.642095][ T6457] ? cd_forget+0x160/0x160 [ 212.646500][ T6457] do_dentry_open+0x7f7/0xf90 [ 212.651167][ T6457] ? vfs_open+0x2b/0x80 [ 212.655310][ T6457] path_openat+0x2718/0x2fb0 [ 212.659905][ T6457] ? __kasan_slab_alloc+0xa9/0xc0 [ 212.664928][ T6457] ? do_filp_open+0x400/0x400 [ 212.669608][ T6457] do_filp_open+0x1df/0x400 [ 212.674115][ T6457] ? vfs_tmpfile+0x300/0x300 [ 212.678741][ T6457] ? _raw_spin_unlock+0x24/0x40 [ 212.683599][ T6457] ? alloc_fd+0x59e/0x650 [ 212.687924][ T6457] do_sys_openat2+0x14b/0x500 [ 212.692586][ T6457] ? __lock_acquire+0x7d40/0x7d40 [ 212.697599][ T6457] ? do_sys_open+0xe0/0xe0 [ 212.702002][ T6457] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 212.707972][ T6457] ? lock_chain_count+0x20/0x20 [ 212.712826][ T6457] __x64_sys_openat+0x135/0x160 [ 212.717666][ T6457] do_syscall_64+0x4c/0xa0 [ 212.722072][ T6457] ? clear_bhb_loop+0x30/0x80 [ 212.726764][ T6457] ? clear_bhb_loop+0x30/0x80 [ 212.731458][ T6457] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 212.737358][ T6457] RIP: 0033:0x7f9392e7bd8e [ 212.741767][ T6457] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 212.761361][ T6457] RSP: 002b:00007f9391112b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 212.769758][ T6457] RAX: ffffffffffffffda RBX: 00007f93911136c0 RCX: 00007f9392e7bd8e [ 212.777720][ T6457] RDX: 0000000000000002 RSI: 00007f9391112c00 RDI: ffffffffffffff9c [ 212.785695][ T6457] RBP: 00007f9392f52ab8 R08: 0000000000000000 R09: 0000000000000000 [ 212.793652][ T6457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.801607][ T6457] R13: 00007f9393143038 R14: 00007f9393142fa0 R15: 00007fff82d20468 [ 212.809574][ T6457] [ 212.813995][ T6457] tty tty24: ldisc open failed (-12), clearing slot 23 [ 213.069989][ T6217] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 213.107891][ T6464] device syzkaller0 entered promiscuous mode [ 214.526568][ T6468] loop0: detected capacity change from 0 to 512 [ 214.538517][ T6464] FAULT_INJECTION: forcing a failure. [ 214.538517][ T6464] name failslab, interval 1, probability 0, space 0, times 0 [ 214.569328][ T6464] CPU: 0 PID: 6464 Comm: syz.5.562 Not tainted syzkaller #0 [ 214.576610][ T6464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 214.586651][ T6464] Call Trace: [ 214.589919][ T6464] [ 214.592844][ T6464] dump_stack_lvl+0x188/0x250 [ 214.597534][ T6464] ? show_regs_print_info+0x20/0x20 [ 214.602723][ T6464] ? load_image+0x410/0x410 [ 214.607226][ T6464] ? __might_sleep+0xf0/0xf0 [ 214.611808][ T6464] ? __lock_acquire+0x7d40/0x7d40 [ 214.616849][ T6464] should_fail+0x383/0x4b0 [ 214.621280][ T6464] should_failslab+0x5/0x20 [ 214.625783][ T6464] slab_pre_alloc_hook+0x51/0xc0 [ 214.630714][ T6464] kmem_cache_alloc_node+0x47/0x2c0 [ 214.635910][ T6464] ? __alloc_skb+0xf4/0x750 [ 214.640413][ T6464] __alloc_skb+0xf4/0x750 [ 214.644734][ T6464] alloc_skb_with_frags+0xa7/0x720 [ 214.649837][ T6464] sock_alloc_send_pskb+0x87f/0x9a0 [ 214.655031][ T6464] ? sock_kzfree_s+0x50/0x50 [ 214.659603][ T6464] ? __lock_acquire+0x13b3/0x7d40 [ 214.664644][ T6464] packet_sendmsg+0x31b0/0x4de0 [ 214.669527][ T6464] ? __lock_acquire+0x12df/0x7d40 [ 214.674567][ T6464] ? __might_sleep+0xf0/0xf0 [ 214.679185][ T6464] ? aa_sk_perm+0x7dc/0x910 [ 214.683692][ T6464] ? packet_getsockopt+0x9a0/0x9a0 [ 214.688795][ T6464] ? aa_setprocattr_changehat+0x310/0x580 [ 214.694501][ T6464] ? apparmor_socket_sendmsg+0x88/0x230 [ 214.700034][ T6464] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 214.705318][ T6464] ? security_socket_sendmsg+0x7c/0xa0 [ 214.710776][ T6464] ? packet_getsockopt+0x9a0/0x9a0 [ 214.715882][ T6464] ____sys_sendmsg+0x5be/0x8f0 [ 214.720669][ T6464] ? __sys_sendmsg_sock+0x30/0x30 [ 214.725722][ T6464] ? import_iovec+0x6f/0xa0 [ 214.730217][ T6464] ___sys_sendmsg+0x236/0x2e0 [ 214.734889][ T6464] ? __sys_sendmsg+0x290/0x290 [ 214.739663][ T6464] __se_sys_sendmsg+0x1b7/0x2a0 [ 214.744506][ T6464] ? __x64_sys_sendmsg+0x80/0x80 [ 214.749430][ T6464] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 214.755407][ T6464] ? lockdep_hardirqs_on+0x94/0x140 [ 214.760601][ T6464] do_syscall_64+0x4c/0xa0 [ 214.765013][ T6464] ? clear_bhb_loop+0x30/0x80 [ 214.769706][ T6464] ? clear_bhb_loop+0x30/0x80 [ 214.774391][ T6464] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 214.780284][ T6464] RIP: 0033:0x7fa9f9d3f559 [ 214.784685][ T6464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.804277][ T6464] RSP: 002b:00007fa9f7f97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.812682][ T6464] RAX: ffffffffffffffda RBX: 00007fa9f9fc6fa0 RCX: 00007fa9f9d3f559 [ 214.820659][ T6464] RDX: 0000000000000004 RSI: 0000200000000600 RDI: 0000000000000005 [ 214.828634][ T6464] RBP: 00007fa9f7f97090 R08: 0000000000000000 R09: 0000000000000000 [ 214.836693][ T6464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.844653][ T6464] R13: 00007fa9f9fc7038 R14: 00007fa9f9fc6fa0 R15: 00007ffd070e8858 [ 214.852625][ T6464] [ 214.910930][ T6217] usb 2-1: Using ep0 maxpacket: 16 [ 214.938431][ T6468] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 214.997410][ T6468] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,norecovery,dioread_nolock,resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 215.031072][ T6217] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.041392][ T6468] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.060901][ T6217] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 215.085877][ T6217] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 215.115860][ T6217] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 215.130941][ T6217] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.382477][ T6217] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 215.397570][ T6476] FAULT_INJECTION: forcing a failure. [ 215.397570][ T6476] name failslab, interval 1, probability 0, space 0, times 0 [ 215.410279][ T6476] CPU: 0 PID: 6476 Comm: syz.0.574 Not tainted syzkaller #0 [ 215.417571][ T6476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 215.427615][ T6476] Call Trace: [ 215.430895][ T6476] [ 215.433825][ T6476] dump_stack_lvl+0x188/0x250 [ 215.438495][ T6476] ? show_regs_print_info+0x20/0x20 [ 215.443688][ T6476] ? load_image+0x410/0x410 [ 215.448186][ T6476] ? __might_sleep+0xf0/0xf0 [ 215.452765][ T6476] ? __lock_acquire+0x7d40/0x7d40 [ 215.457784][ T6476] should_fail+0x383/0x4b0 [ 215.462203][ T6476] should_failslab+0x5/0x20 [ 215.466719][ T6476] slab_pre_alloc_hook+0x51/0xc0 [ 215.471674][ T6476] kmem_cache_alloc_node+0x47/0x2c0 [ 215.476889][ T6476] ? alloc_vmap_area+0x199/0x1b30 [ 215.481918][ T6476] ? __x64_sys_openat+0x135/0x160 [ 215.486961][ T6476] alloc_vmap_area+0x199/0x1b30 [ 215.491841][ T6476] ? vm_map_ram+0xba0/0xba0 [ 215.496356][ T6476] __get_vm_area_node+0x14f/0x2d0 [ 215.501382][ T6476] __vmalloc_node_range+0xef/0x8b0 [ 215.506517][ T6476] ? n_tty_open+0x19/0x150 [ 215.510951][ T6476] ? read_lock_is_recursive+0x10/0x10 [ 215.516330][ T6476] ? remove_wait_queue+0x120/0x120 [ 215.521447][ T6476] ? n_tty_open+0x19/0x150 [ 215.525876][ T6476] vzalloc+0x75/0x80 [ 215.529779][ T6476] ? n_tty_open+0x19/0x150 [ 215.534199][ T6476] n_tty_open+0x19/0x150 [ 215.538430][ T6476] tty_ldisc_setup+0xbf/0x250 [ 215.543112][ T6476] tty_init_dev+0x239/0x470 [ 215.547635][ T6476] tty_open+0x7e8/0xcd0 [ 215.551807][ T6476] ? __lock_acquire+0x7d40/0x7d40 [ 215.556847][ T6476] ? tty_compat_ioctl+0x570/0x570 [ 215.561863][ T6476] ? memset+0x1e/0x40 [ 215.565867][ T6476] ? do_raw_spin_unlock+0x11d/0x230 [ 215.571087][ T6476] chrdev_open+0x585/0x5f0 [ 215.575512][ T6476] ? cd_forget+0x160/0x160 [ 215.579918][ T6476] ? fsnotify_perm+0x3a7/0x560 [ 215.584676][ T6476] ? cd_forget+0x160/0x160 [ 215.589106][ T6476] do_dentry_open+0x7f7/0xf90 [ 215.593785][ T6476] ? vfs_open+0x2b/0x80 [ 215.597931][ T6476] path_openat+0x2718/0x2fb0 [ 215.602535][ T6476] ? __kasan_slab_alloc+0xa9/0xc0 [ 215.607578][ T6476] ? do_filp_open+0x400/0x400 [ 215.612285][ T6476] do_filp_open+0x1df/0x400 [ 215.616796][ T6476] ? vfs_tmpfile+0x300/0x300 [ 215.621397][ T6476] ? _raw_spin_unlock+0x24/0x40 [ 215.626259][ T6476] ? alloc_fd+0x59e/0x650 [ 215.630628][ T6476] do_sys_openat2+0x14b/0x500 [ 215.635314][ T6476] ? __lock_acquire+0x7d40/0x7d40 [ 215.640334][ T6476] ? do_sys_open+0xe0/0xe0 [ 215.644744][ T6476] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 215.650745][ T6476] ? lock_chain_count+0x20/0x20 [ 215.655615][ T6476] __x64_sys_openat+0x135/0x160 [ 215.660460][ T6476] do_syscall_64+0x4c/0xa0 [ 215.664877][ T6476] ? clear_bhb_loop+0x30/0x80 [ 215.669568][ T6476] ? clear_bhb_loop+0x30/0x80 [ 215.674255][ T6476] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 215.680136][ T6476] RIP: 0033:0x7fe85ab90d8e [ 215.684543][ T6476] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 215.704152][ T6476] RSP: 002b:00007fe858e27b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 215.712575][ T6476] RAX: ffffffffffffffda RBX: 00007fe858e286c0 RCX: 00007fe85ab90d8e [ 215.720534][ T6476] RDX: 0000000000000002 RSI: 00007fe858e27c00 RDI: ffffffffffffff9c [ 215.728494][ T6476] RBP: 00007fe85ac67ab8 R08: 0000000000000000 R09: 0000000000000000 [ 215.736454][ T6476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.744434][ T6476] R13: 00007fe85ae58038 R14: 00007fe85ae57fa0 R15: 00007ffefbb16818 [ 215.752417][ T6476] [ 215.757057][ T6476] warn_alloc: 2 callbacks suppressed [ 215.757069][ T6476] syz.0.574: vmalloc error: size 9120, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 215.777421][ T6476] CPU: 0 PID: 6476 Comm: syz.0.574 Not tainted syzkaller #0 [ 215.784720][ T6476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 215.794779][ T6476] Call Trace: [ 215.798050][ T6476] [ 215.800980][ T6476] dump_stack_lvl+0x188/0x250 [ 215.805655][ T6476] ? rcu_lock_release+0x5/0x20 [ 215.810413][ T6476] ? show_regs_print_info+0x20/0x20 [ 215.815601][ T6476] ? load_image+0x410/0x410 [ 215.820100][ T6476] warn_alloc+0x245/0x320 [ 215.824431][ T6476] ? zone_watermark_ok_safe+0x250/0x250 [ 215.829966][ T6476] ? __get_vm_area_node+0x164/0x2d0 [ 215.835157][ T6476] ? kfree+0xef/0x2a0 [ 215.839171][ T6476] __vmalloc_node_range+0x2b1/0x8b0 [ 215.844375][ T6476] ? read_lock_is_recursive+0x10/0x10 [ 215.849759][ T6476] ? remove_wait_queue+0x120/0x120 [ 215.854881][ T6476] ? n_tty_open+0x19/0x150 [ 215.859312][ T6476] vzalloc+0x75/0x80 [ 215.863224][ T6476] ? n_tty_open+0x19/0x150 [ 215.867655][ T6476] n_tty_open+0x19/0x150 [ 215.871900][ T6476] tty_ldisc_setup+0xbf/0x250 [ 215.876588][ T6476] tty_init_dev+0x239/0x470 [ 215.881108][ T6476] tty_open+0x7e8/0xcd0 [ 215.885293][ T6476] ? __lock_acquire+0x7d40/0x7d40 [ 215.890329][ T6476] ? tty_compat_ioctl+0x570/0x570 [ 215.895362][ T6476] ? memset+0x1e/0x40 [ 215.899354][ T6476] ? do_raw_spin_unlock+0x11d/0x230 [ 215.904568][ T6476] chrdev_open+0x585/0x5f0 [ 215.908984][ T6476] ? cd_forget+0x160/0x160 [ 215.913400][ T6476] ? fsnotify_perm+0x3a7/0x560 [ 215.918180][ T6476] ? cd_forget+0x160/0x160 [ 215.922608][ T6476] do_dentry_open+0x7f7/0xf90 [ 215.927297][ T6476] ? vfs_open+0x2b/0x80 [ 215.931459][ T6476] path_openat+0x2718/0x2fb0 [ 215.936056][ T6476] ? __kasan_slab_alloc+0xa9/0xc0 [ 215.941090][ T6476] ? do_filp_open+0x400/0x400 [ 215.945801][ T6476] do_filp_open+0x1df/0x400 [ 215.950322][ T6476] ? vfs_tmpfile+0x300/0x300 [ 215.954932][ T6476] ? _raw_spin_unlock+0x24/0x40 [ 215.959773][ T6476] ? alloc_fd+0x59e/0x650 [ 215.964104][ T6476] do_sys_openat2+0x14b/0x500 [ 215.968796][ T6476] ? __lock_acquire+0x7d40/0x7d40 [ 215.973830][ T6476] ? do_sys_open+0xe0/0xe0 [ 215.978233][ T6476] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 215.984214][ T6476] ? lock_chain_count+0x20/0x20 [ 215.989083][ T6476] __x64_sys_openat+0x135/0x160 [ 215.993943][ T6476] do_syscall_64+0x4c/0xa0 [ 215.998349][ T6476] ? clear_bhb_loop+0x30/0x80 [ 216.003016][ T6476] ? clear_bhb_loop+0x30/0x80 [ 216.007687][ T6476] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 216.013569][ T6476] RIP: 0033:0x7fe85ab90d8e [ 216.017972][ T6476] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 216.037571][ T6476] RSP: 002b:00007fe858e27b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 216.045997][ T6476] RAX: ffffffffffffffda RBX: 00007fe858e286c0 RCX: 00007fe85ab90d8e [ 216.053994][ T6476] RDX: 0000000000000002 RSI: 00007fe858e27c00 RDI: ffffffffffffff9c [ 216.061981][ T6476] RBP: 00007fe85ac67ab8 R08: 0000000000000000 R09: 0000000000000000 [ 216.069955][ T6476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.077920][ T6476] R13: 00007fe85ae58038 R14: 00007fe85ae57fa0 R15: 00007ffefbb16818 [ 216.085927][ T6476] [ 216.089015][ T6476] Mem-Info: [ 216.092166][ T6476] active_anon:328 inactive_anon:9573 isolated_anon:0 [ 216.092166][ T6476] active_file:5031 inactive_file:46492 isolated_file:0 [ 216.092166][ T6476] unevictable:768 dirty:41 writeback:0 [ 216.092166][ T6476] slab_reclaimable:21266 slab_unreclaimable:97213 [ 216.092166][ T6476] mapped:33269 shmem:4516 pagetables:839 bounce:0 [ 216.092166][ T6476] kernel_misc_reclaimable:0 [ 216.092166][ T6476] free:1365709 free_pcp:1436 free_cma:0 [ 216.133638][ T6476] Node 0 active_anon:1280kB inactive_anon:37780kB active_file:19920kB inactive_file:185968kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133076kB dirty:160kB writeback:0kB shmem:15984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11424kB pagetables:3356kB all_unreclaimable? no [ 216.164849][ T6476] Node 1 active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 216.193898][ T6476] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 216.220113][ T6476] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 216.225898][ T6476] Node 0 DMA32 free:1527280kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1280kB inactive_anon:37780kB active_file:19920kB inactive_file:185968kB unevictable:1536kB writepending:160kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:5696kB local_pcp:4004kB free_cma:0kB [ 216.255635][ T6476] lowmem_reserve[]: 0 0 0 0 0 [ 216.260370][ T6476] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 216.286206][ T6476] lowmem_reserve[]: 0 0 0 0 0 [ 216.290962][ T6476] Node 1 Normal free:3920196kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 216.319175][ T6476] lowmem_reserve[]: 0 0 0 0 0 [ 216.323936][ T6476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 216.336640][ T6476] Node 0 DMA32: 336*4kB (UME) 556*8kB (UME) 397*16kB (UME) 634*32kB (UME) 133*64kB (UME) 60*128kB (UME) 10*256kB (UM) 5*512kB (UM) 3*1024kB (UME) 4*2048kB (M) 357*4096kB (UM) = 1527280kB [ 216.355199][ T6476] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 216.366743][ T6476] Node 1 Normal: 245*4kB (UME) 58*8kB (UME) 26*16kB (UME) 184*32kB (UME) 80*64kB (UME) 16*128kB (U) 13*256kB (UME) 9*512kB (UE) 0*1024kB 3*2048kB (UME) 950*4096kB (M) = 3920196kB [ 216.384616][ T6476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 216.394207][ T6476] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 216.403558][ T6476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 216.413147][ T6476] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 216.422479][ T6476] 56016 total pagecache pages [ 216.427165][ T6476] 0 pages in swap cache [ 216.431365][ T6476] Swap cache stats: add 490, delete 490, find 1/17 [ 216.437867][ T6476] Free swap = 124796kB [ 216.442052][ T6476] Total swap = 124996kB [ 216.446213][ T6476] 2097051 pages RAM [ 216.450002][ T6476] 0 pages HighMem/MovableOnly [ 216.454720][ T6476] 415313 pages reserved [ 216.458892][ T6476] 0 pages cma reserved [ 216.463017][ T6476] tty tty20: ldisc open failed (-12), clearing slot 19 [ 216.693949][ T6217] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 216.734260][ T6217] usb 2-1: config 0 descriptor?? [ 216.761012][ T6217] usb 2-1: can't set config #0, error -71 [ 216.769442][ T6217] usb 2-1: USB disconnect, device number 18 [ 218.249772][ T19] IRQ fixup: irq 33 move in progress, old vector 49 [ 218.268423][ T6489] smpboot: CPU 1 is now offline [ 218.301523][ T6492] x86: Booting SMP configuration: [ 218.361544][ T6497] netlink: 32 bytes leftover after parsing attributes in process `syz.5.570'. [ 218.379707][ T6492] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 218.401660][ T6501] FAULT_INJECTION: forcing a failure. [ 218.401660][ T6501] name failslab, interval 1, probability 0, space 0, times 0 [ 218.422050][ T0] kvm-clock: cpu 1, msr ff0a041, secondary cpu clock [ 218.431705][ T18] kvm-guest: stealtime: cpu 1, msr b8f27440 [ 218.455177][ T6500] FAULT_INJECTION: forcing a failure. [ 218.455177][ T6500] name failslab, interval 1, probability 0, space 0, times 0 [ 218.467910][ T6500] CPU: 0 PID: 6500 Comm: syz.0.569 Not tainted syzkaller #0 [ 218.475205][ T6500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.485249][ T6500] Call Trace: [ 218.488516][ T6500] [ 218.491449][ T6500] dump_stack_lvl+0x188/0x250 [ 218.496119][ T6500] ? show_regs_print_info+0x20/0x20 [ 218.501304][ T6500] ? load_image+0x410/0x410 [ 218.505802][ T6500] ? __might_sleep+0xf0/0xf0 [ 218.510390][ T6500] ? __lock_acquire+0x7d40/0x7d40 [ 218.515406][ T6500] should_fail+0x383/0x4b0 [ 218.519815][ T6500] should_failslab+0x5/0x20 [ 218.524315][ T6500] slab_pre_alloc_hook+0x51/0xc0 [ 218.529273][ T6500] kmem_cache_alloc_node+0x47/0x2c0 [ 218.534487][ T6500] ? alloc_vmap_area+0x199/0x1b30 [ 218.539519][ T6500] ? __x64_sys_openat+0x135/0x160 [ 218.544547][ T6500] alloc_vmap_area+0x199/0x1b30 [ 218.549395][ T6500] ? vm_map_ram+0xba0/0xba0 [ 218.553890][ T6500] __get_vm_area_node+0x14f/0x2d0 [ 218.558907][ T6500] __vmalloc_node_range+0xef/0x8b0 [ 218.564005][ T6500] ? n_tty_open+0x19/0x150 [ 218.568409][ T6500] ? read_lock_is_recursive+0x10/0x10 [ 218.573776][ T6500] ? remove_wait_queue+0x120/0x120 [ 218.578909][ T6500] ? n_tty_open+0x19/0x150 [ 218.583337][ T6500] vzalloc+0x75/0x80 [ 218.587224][ T6500] ? n_tty_open+0x19/0x150 [ 218.591635][ T6500] n_tty_open+0x19/0x150 [ 218.595873][ T6500] tty_ldisc_setup+0xbf/0x250 [ 218.600536][ T6500] tty_init_dev+0x239/0x470 [ 218.605034][ T6500] tty_open+0x7e8/0xcd0 [ 218.609182][ T6500] ? __lock_acquire+0x7d40/0x7d40 [ 218.614208][ T6500] ? tty_compat_ioctl+0x570/0x570 [ 218.619221][ T6500] ? memset+0x1e/0x40 [ 218.623284][ T6500] ? do_raw_spin_unlock+0x11d/0x230 [ 218.628500][ T6500] chrdev_open+0x585/0x5f0 [ 218.632926][ T6500] ? cd_forget+0x160/0x160 [ 218.637335][ T6500] ? fsnotify_perm+0x3a7/0x560 [ 218.642228][ T6500] ? cd_forget+0x160/0x160 [ 218.646647][ T6500] do_dentry_open+0x7f7/0xf90 [ 218.651326][ T6500] ? vfs_open+0x2b/0x80 [ 218.655488][ T6500] path_openat+0x2718/0x2fb0 [ 218.660081][ T6500] ? __kasan_slab_alloc+0xa9/0xc0 [ 218.665094][ T6500] ? do_filp_open+0x400/0x400 [ 218.669769][ T6500] do_filp_open+0x1df/0x400 [ 218.674276][ T6500] ? vfs_tmpfile+0x300/0x300 [ 218.678903][ T6500] ? _raw_spin_unlock+0x24/0x40 [ 218.683778][ T6500] ? alloc_fd+0x59e/0x650 [ 218.688101][ T6500] do_sys_openat2+0x14b/0x500 [ 218.692761][ T6500] ? __lock_acquire+0x7d40/0x7d40 [ 218.697774][ T6500] ? do_sys_open+0xe0/0xe0 [ 218.702173][ T6500] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 218.708145][ T6500] ? lock_chain_count+0x20/0x20 [ 218.712984][ T6500] __x64_sys_openat+0x135/0x160 [ 218.717827][ T6500] do_syscall_64+0x4c/0xa0 [ 218.722233][ T6500] ? clear_bhb_loop+0x30/0x80 [ 218.726924][ T6500] ? clear_bhb_loop+0x30/0x80 [ 218.731702][ T6500] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 218.737604][ T6500] RIP: 0033:0x7fe85ab90d8e [ 218.742009][ T6500] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 218.761599][ T6500] RSP: 002b:00007fe858e27b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 218.769995][ T6500] RAX: ffffffffffffffda RBX: 00007fe858e286c0 RCX: 00007fe85ab90d8e [ 218.777956][ T6500] RDX: 0000000000000002 RSI: 00007fe858e27c00 RDI: ffffffffffffff9c [ 218.785932][ T6500] RBP: 00007fe85ac67ab8 R08: 0000000000000000 R09: 0000000000000000 [ 218.793888][ T6500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.801843][ T6500] R13: 00007fe85ae58038 R14: 00007fe85ae57fa0 R15: 00007ffefbb16818 [ 218.809811][ T6500] [ 218.813962][ T6500] tty tty20: ldisc open failed (-12), clearing slot 19 [ 218.856383][ T6501] CPU: 0 PID: 6501 Comm: syz.2.572 Not tainted syzkaller #0 [ 218.863703][ T6501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.873771][ T6501] Call Trace: [ 218.877062][ T6501] [ 218.880018][ T6501] dump_stack_lvl+0x188/0x250 [ 218.884716][ T6501] ? show_regs_print_info+0x20/0x20 [ 218.889936][ T6501] ? load_image+0x410/0x410 [ 218.894459][ T6501] ? __might_sleep+0xf0/0xf0 [ 218.899063][ T6501] ? __lock_acquire+0x7d40/0x7d40 [ 218.904101][ T6501] ? netlink_insert+0xe90/0x11f0 [ 218.909057][ T6501] should_fail+0x383/0x4b0 [ 218.913486][ T6501] should_failslab+0x5/0x20 [ 218.918008][ T6501] slab_pre_alloc_hook+0x51/0xc0 [ 218.922959][ T6501] kmem_cache_alloc_node+0x47/0x2c0 [ 218.928147][ T6501] ? __alloc_skb+0xf4/0x750 [ 218.932639][ T6501] __alloc_skb+0xf4/0x750 [ 218.936959][ T6501] netlink_sendmsg+0x654/0xbe0 [ 218.941712][ T6501] ? netlink_getsockopt+0x570/0x570 [ 218.946890][ T6501] ? aa_sock_msg_perm+0x94/0x150 [ 218.951817][ T6501] ? apparmor_socket_sendmsg+0x173/0x230 [ 218.957460][ T6501] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 218.962752][ T6501] ? security_socket_sendmsg+0x7c/0xa0 [ 218.968200][ T6501] ? netlink_getsockopt+0x570/0x570 [ 218.973386][ T6501] ____sys_sendmsg+0x5be/0x8f0 [ 218.978145][ T6501] ? __sys_sendmsg_sock+0x30/0x30 [ 218.983158][ T6501] ? import_iovec+0x6f/0xa0 [ 218.987661][ T6501] ___sys_sendmsg+0x236/0x2e0 [ 218.992331][ T6501] ? __sys_sendmsg+0x290/0x290 [ 218.997102][ T6501] __se_sys_sendmsg+0x1b7/0x2a0 [ 219.001949][ T6501] ? __x64_sys_sendmsg+0x80/0x80 [ 219.006895][ T6501] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 219.012904][ T6501] ? lockdep_hardirqs_on+0x94/0x140 [ 219.018111][ T6501] do_syscall_64+0x4c/0xa0 [ 219.022511][ T6501] ? clear_bhb_loop+0x30/0x80 [ 219.027174][ T6501] ? clear_bhb_loop+0x30/0x80 [ 219.031852][ T6501] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 219.037730][ T6501] RIP: 0033:0x7f9392ebb559 [ 219.042128][ T6501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.061720][ T6501] RSP: 002b:00007f9391113028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.070137][ T6501] RAX: ffffffffffffffda RBX: 00007f9393142fa0 RCX: 00007f9392ebb559 [ 219.078096][ T6501] RDX: 00000000200080c4 RSI: 0000200000001d40 RDI: 0000000000000003 [ 219.086059][ T6501] RBP: 00007f9391113090 R08: 0000000000000000 R09: 0000000000000000 [ 219.094015][ T6501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.101976][ T6501] R13: 00007f9393143038 R14: 00007f9393142fa0 R15: 00007fff82d20468 [ 219.109969][ T6501] [ 219.231871][ T6511] loop3: detected capacity change from 0 to 4096 [ 219.738695][ T6511] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 219.802430][ T6217] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 219.953576][ T6522] FAULT_INJECTION: forcing a failure. [ 219.953576][ T6522] name failslab, interval 1, probability 0, space 0, times 0 [ 219.966277][ T6522] CPU: 0 PID: 6522 Comm: syz.2.580 Not tainted syzkaller #0 [ 219.973567][ T6522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 219.983608][ T6522] Call Trace: [ 219.986874][ T6522] [ 219.989792][ T6522] dump_stack_lvl+0x188/0x250 [ 219.994475][ T6522] ? show_regs_print_info+0x20/0x20 [ 219.999662][ T6522] ? load_image+0x410/0x410 [ 220.004157][ T6522] ? __might_sleep+0xf0/0xf0 [ 220.008738][ T6522] ? __lock_acquire+0x7d40/0x7d40 [ 220.013769][ T6522] should_fail+0x383/0x4b0 [ 220.018185][ T6522] should_failslab+0x5/0x20 [ 220.022837][ T6522] slab_pre_alloc_hook+0x51/0xc0 [ 220.027799][ T6522] kmem_cache_alloc_node+0x47/0x2c0 [ 220.033005][ T6522] ? alloc_vmap_area+0x199/0x1b30 [ 220.038016][ T6522] ? __x64_sys_openat+0x135/0x160 [ 220.043040][ T6522] alloc_vmap_area+0x199/0x1b30 [ 220.047926][ T6522] ? vm_map_ram+0xba0/0xba0 [ 220.052448][ T6522] __get_vm_area_node+0x14f/0x2d0 [ 220.057480][ T6522] __vmalloc_node_range+0xef/0x8b0 [ 220.062583][ T6522] ? n_tty_open+0x19/0x150 [ 220.067012][ T6522] ? read_lock_is_recursive+0x10/0x10 [ 220.072503][ T6522] ? remove_wait_queue+0x120/0x120 [ 220.077634][ T6522] ? n_tty_open+0x19/0x150 [ 220.082049][ T6522] vzalloc+0x75/0x80 [ 220.085960][ T6522] ? n_tty_open+0x19/0x150 [ 220.090385][ T6522] n_tty_open+0x19/0x150 [ 220.094637][ T6522] tty_ldisc_setup+0xbf/0x250 [ 220.099303][ T6522] tty_init_dev+0x239/0x470 [ 220.103811][ T6522] tty_open+0x7e8/0xcd0 [ 220.107987][ T6522] ? __lock_acquire+0x7d40/0x7d40 [ 220.113026][ T6522] ? tty_compat_ioctl+0x570/0x570 [ 220.118054][ T6522] ? memset+0x1e/0x40 [ 220.122031][ T6522] ? do_raw_spin_unlock+0x11d/0x230 [ 220.127249][ T6522] chrdev_open+0x585/0x5f0 [ 220.131680][ T6522] ? cd_forget+0x160/0x160 [ 220.136104][ T6522] ? fsnotify_perm+0x3a7/0x560 [ 220.140870][ T6522] ? cd_forget+0x160/0x160 [ 220.145301][ T6522] do_dentry_open+0x7f7/0xf90 [ 220.149987][ T6522] ? vfs_open+0x2b/0x80 [ 220.154150][ T6522] path_openat+0x2718/0x2fb0 [ 220.158767][ T6522] ? __kasan_slab_alloc+0xa9/0xc0 [ 220.163780][ T6522] ? do_filp_open+0x400/0x400 [ 220.168472][ T6522] do_filp_open+0x1df/0x400 [ 220.172967][ T6522] ? vfs_tmpfile+0x300/0x300 [ 220.177555][ T6522] ? _raw_spin_unlock+0x24/0x40 [ 220.182398][ T6522] ? alloc_fd+0x59e/0x650 [ 220.186717][ T6522] do_sys_openat2+0x14b/0x500 [ 220.191389][ T6522] ? __lock_acquire+0x7d40/0x7d40 [ 220.196445][ T6522] ? do_sys_open+0xe0/0xe0 [ 220.200877][ T6522] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 220.206886][ T6522] ? lock_chain_count+0x20/0x20 [ 220.211770][ T6522] __x64_sys_openat+0x135/0x160 [ 220.216628][ T6522] do_syscall_64+0x4c/0xa0 [ 220.221040][ T6522] ? clear_bhb_loop+0x30/0x80 [ 220.225727][ T6522] ? clear_bhb_loop+0x30/0x80 [ 220.230418][ T6522] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 220.236335][ T6522] RIP: 0033:0x7f9392e7bd8e [ 220.240739][ T6522] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 220.260328][ T6522] RSP: 002b:00007f9391112b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 220.268729][ T6522] RAX: ffffffffffffffda RBX: 00007f93911136c0 RCX: 00007f9392e7bd8e [ 220.276702][ T6522] RDX: 0000000000000002 RSI: 00007f9391112c00 RDI: ffffffffffffff9c [ 220.284701][ T6522] RBP: 00007f9392f52ab8 R08: 0000000000000000 R09: 0000000000000000 [ 220.292686][ T6522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.300657][ T6522] R13: 00007f9393143038 R14: 00007f9393142fa0 R15: 00007fff82d20468 [ 220.308636][ T6522] [ 220.313789][ T6522] tty tty24: ldisc open failed (-12), clearing slot 23 [ 220.586292][ T6525] netlink: 16 bytes leftover after parsing attributes in process `syz.1.582'. [ 220.600681][ T6525] netlink: 28 bytes leftover after parsing attributes in process `syz.1.582'. [ 220.633777][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'. [ 221.960157][ T6217] usb 6-1: Using ep0 maxpacket: 16 [ 222.021713][ T19] IRQ fixup: irq 33 move in progress, old vector 49 [ 222.032228][ T6532] smpboot: CPU 1 is now offline [ 222.049774][ T6532] x86: Booting SMP configuration: [ 222.055208][ T6532] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 222.086168][ T6217] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.096887][ T6537] netlink: 32 bytes leftover after parsing attributes in process `syz.1.586'. [ 222.115251][ T0] kvm-clock: cpu 1, msr ff0a041, secondary cpu clock [ 222.124493][ T18] kvm-guest: stealtime: cpu 1, msr b8f27440 [ 222.130511][ T6217] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 222.147715][ T6217] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 222.160365][ T6217] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 222.177361][ T6217] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.252363][ T6217] usb 6-1: string descriptor 0 read error: -71 [ 222.269678][ T6545] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 222.293781][ T6217] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 222.313159][ T6217] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 222.334250][ T6217] usb 6-1: config 0 descriptor?? [ 222.375833][ T6549] loop3: detected capacity change from 0 to 512 [ 222.405768][ T6217] usb 6-1: can't set config #0, error -71 [ 222.423522][ T6551] FAULT_INJECTION: forcing a failure. [ 222.423522][ T6551] name failslab, interval 1, probability 0, space 0, times 0 [ 222.441085][ T6217] usb 6-1: USB disconnect, device number 8 [ 222.493175][ T6551] CPU: 0 PID: 6551 Comm: syz.1.591 Not tainted syzkaller #0 [ 222.500475][ T6551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 222.510517][ T6551] Call Trace: [ 222.513783][ T6551] [ 222.516701][ T6551] dump_stack_lvl+0x188/0x250 [ 222.521371][ T6551] ? show_regs_print_info+0x20/0x20 [ 222.526559][ T6551] ? load_image+0x410/0x410 [ 222.531049][ T6551] ? __lock_acquire+0x7d40/0x7d40 [ 222.536061][ T6551] ? ipv4_dst_check+0x57/0x80 [ 222.540726][ T6551] should_fail+0x383/0x4b0 [ 222.545134][ T6551] should_failslab+0x5/0x20 [ 222.549631][ T6551] slab_pre_alloc_hook+0x51/0xc0 [ 222.554561][ T6551] kmem_cache_alloc_node+0x47/0x2c0 [ 222.559769][ T6551] ? __alloc_skb+0xf4/0x750 [ 222.564277][ T6551] __alloc_skb+0xf4/0x750 [ 222.568599][ T6551] sk_stream_alloc_skb+0x204/0xb50 [ 222.573699][ T6551] tcp_connect+0x16d6/0x4970 [ 222.578298][ T6551] ? prandom_u32+0x217/0x250 [ 222.582880][ T6551] tcp_v4_connect+0xf42/0x1990 [ 222.587643][ T6551] ? tcp_twsk_unique+0x970/0x970 [ 222.592570][ T6551] ? mark_lock+0x94/0x320 [ 222.596892][ T6551] __inet_stream_connect+0x244/0xd80 [ 222.602181][ T6551] ? lock_chain_count+0x20/0x20 [ 222.607048][ T6551] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 222.613101][ T6551] ? __local_bh_enable_ip+0x136/0x1c0 [ 222.618467][ T6551] ? inet_dgram_connect+0x340/0x340 [ 222.623655][ T6551] ? __local_bh_enable_ip+0x136/0x1c0 [ 222.629016][ T6551] ? _local_bh_enable+0xa0/0xa0 [ 222.633861][ T6551] inet_stream_connect+0x62/0xa0 [ 222.638788][ T6551] ? __inet_stream_connect+0xd80/0xd80 [ 222.644239][ T6551] __sys_connect+0x3cb/0x450 [ 222.648817][ T6551] ? __sys_connect_file+0x170/0x170 [ 222.654027][ T6551] __x64_sys_connect+0x76/0x80 [ 222.658806][ T6551] do_syscall_64+0x4c/0xa0 [ 222.663228][ T6551] ? clear_bhb_loop+0x30/0x80 [ 222.667892][ T6551] ? clear_bhb_loop+0x30/0x80 [ 222.672573][ T6551] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 222.678458][ T6551] RIP: 0033:0x7f7d4253e559 [ 222.682857][ T6551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.702455][ T6551] RSP: 002b:00007f7d40796028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 222.710968][ T6551] RAX: ffffffffffffffda RBX: 00007f7d427c5fa0 RCX: 00007f7d4253e559 [ 222.718954][ T6551] RDX: 0000000000000010 RSI: 00002000000002c0 RDI: 0000000000000003 [ 222.726914][ T6551] RBP: 00007f7d40796090 R08: 0000000000000000 R09: 0000000000000000 [ 222.734872][ T6551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.742836][ T6551] R13: 00007f7d427c6038 R14: 00007f7d427c5fa0 R15: 00007fff0c9d07a8 [ 222.750814][ T6551] [ 222.774979][ T6549] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 222.799041][ T6549] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 222.819299][ T6549] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 222.901280][ T6221] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 223.058290][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.589'. [ 223.082246][ T6563] ip_tables: iptables: counters copy to user failed while replacing table [ 223.091463][ T6217] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 223.198092][ T6221] usb 3-1: device descriptor read/64, error -71 [ 223.386697][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.597'. [ 223.396440][ T6563] netlink: 16 bytes leftover after parsing attributes in process `syz.0.596'. [ 223.406048][ T6563] netlink: 28 bytes leftover after parsing attributes in process `syz.0.596'. [ 223.509688][ T6573] smpboot: CPU 1 is now offline [ 223.524183][ T6217] usb 6-1: Using ep0 maxpacket: 16 [ 223.534126][ T6573] x86: Booting SMP configuration: [ 223.539143][ T6573] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 223.549077][ T0] kvm-clock: cpu 1, msr ff0a041, secondary cpu clock [ 224.521056][ T6221] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 224.538354][ T18] kvm-guest: stealtime: cpu 1, msr b8f27440 [ 224.801085][ T6217] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 224.819773][ T6580] netlink: 32 bytes leftover after parsing attributes in process `syz.3.601'. [ 224.841007][ T5141] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 224.921043][ T6221] usb 3-1: device descriptor read/64, error -71 [ 224.981174][ T6217] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 224.990416][ T6217] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.998492][ T6217] usb 6-1: Product: syz [ 225.002829][ T6217] usb 6-1: Manufacturer: syz [ 225.007424][ T6217] usb 6-1: SerialNumber: syz [ 225.013840][ T6217] usb 6-1: config 0 descriptor?? [ 225.041074][ T6221] usb usb3-port1: attempt power cycle [ 225.052678][ T6217] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 225.062125][ T6217] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 225.100900][ T5141] usb 2-1: Using ep0 maxpacket: 16 [ 225.221047][ T5141] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.231639][ T5141] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 225.242975][ T5141] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 225.254721][ T5141] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 225.265179][ T5141] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.350951][ T5141] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 225.360229][ T5141] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 225.371840][ T5141] usb 2-1: Manufacturer: syz [ 225.377735][ T5141] usb 2-1: config 0 descriptor?? [ 225.450975][ T6221] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 225.516287][ T6586] FAULT_INJECTION: forcing a failure. [ 225.516287][ T6586] name failslab, interval 1, probability 0, space 0, times 0 [ 225.529123][ T6586] CPU: 0 PID: 6586 Comm: syz.3.604 Not tainted syzkaller #0 [ 225.536557][ T6586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.546600][ T6586] Call Trace: [ 225.549871][ T6586] [ 225.552804][ T6586] dump_stack_lvl+0x188/0x250 [ 225.557481][ T6586] ? show_regs_print_info+0x20/0x20 [ 225.562669][ T6586] ? load_image+0x410/0x410 [ 225.567159][ T6586] ? __might_sleep+0xf0/0xf0 [ 225.571735][ T6586] ? __lock_acquire+0x7d40/0x7d40 [ 225.576752][ T6586] should_fail+0x383/0x4b0 [ 225.581169][ T6586] should_failslab+0x5/0x20 [ 225.585679][ T6586] slab_pre_alloc_hook+0x51/0xc0 [ 225.590642][ T6586] kmem_cache_alloc_node+0x47/0x2c0 [ 225.595879][ T6586] ? alloc_vmap_area+0x199/0x1b30 [ 225.600899][ T6586] ? __x64_sys_openat+0x135/0x160 [ 225.605939][ T6586] alloc_vmap_area+0x199/0x1b30 [ 225.610824][ T6586] ? vm_map_ram+0xba0/0xba0 [ 225.615342][ T6586] __get_vm_area_node+0x14f/0x2d0 [ 225.620359][ T6586] __vmalloc_node_range+0xef/0x8b0 [ 225.625463][ T6586] ? n_tty_open+0x19/0x150 [ 225.629891][ T6586] ? read_lock_is_recursive+0x10/0x10 [ 225.635271][ T6586] ? remove_wait_queue+0x120/0x120 [ 225.640375][ T6586] ? n_tty_open+0x19/0x150 [ 225.644790][ T6586] vzalloc+0x75/0x80 [ 225.648700][ T6586] ? n_tty_open+0x19/0x150 [ 225.653123][ T6586] n_tty_open+0x19/0x150 [ 225.657356][ T6586] tty_ldisc_setup+0xbf/0x250 [ 225.662027][ T6586] tty_init_dev+0x239/0x470 [ 225.666546][ T6586] tty_open+0x7e8/0xcd0 [ 225.670722][ T6586] ? __lock_acquire+0x7d40/0x7d40 [ 225.675761][ T6586] ? tty_compat_ioctl+0x570/0x570 [ 225.680778][ T6586] ? memset+0x1e/0x40 [ 225.684759][ T6586] ? do_raw_spin_unlock+0x11d/0x230 [ 225.689978][ T6586] chrdev_open+0x585/0x5f0 [ 225.694406][ T6586] ? cd_forget+0x160/0x160 [ 225.698827][ T6586] ? fsnotify_perm+0x3a7/0x560 [ 225.703589][ T6586] ? cd_forget+0x160/0x160 [ 225.708033][ T6586] do_dentry_open+0x7f7/0xf90 [ 225.712731][ T6586] ? vfs_open+0x2b/0x80 [ 225.716896][ T6586] path_openat+0x2718/0x2fb0 [ 225.721625][ T6586] ? __kasan_slab_alloc+0xa9/0xc0 [ 225.726669][ T6586] ? do_filp_open+0x400/0x400 [ 225.731373][ T6586] do_filp_open+0x1df/0x400 [ 225.735887][ T6586] ? vfs_tmpfile+0x300/0x300 [ 225.740476][ T6586] ? _raw_spin_unlock+0x24/0x40 [ 225.745316][ T6586] ? alloc_fd+0x59e/0x650 [ 225.749668][ T6586] do_sys_openat2+0x14b/0x500 [ 225.754348][ T6586] ? __lock_acquire+0x7d40/0x7d40 [ 225.759364][ T6586] ? do_sys_open+0xe0/0xe0 [ 225.763777][ T6586] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 225.769776][ T6586] ? lock_chain_count+0x20/0x20 [ 225.774636][ T6586] __x64_sys_openat+0x135/0x160 [ 225.779488][ T6586] do_syscall_64+0x4c/0xa0 [ 225.783899][ T6586] ? clear_bhb_loop+0x30/0x80 [ 225.788589][ T6586] ? clear_bhb_loop+0x30/0x80 [ 225.793281][ T6586] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 225.799164][ T6586] RIP: 0033:0x7f874cfbcd8e [ 225.803570][ T6586] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 225.823188][ T6586] RSP: 002b:00007f874b253b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 225.831612][ T6586] RAX: ffffffffffffffda RBX: 00007f874b2546c0 RCX: 00007f874cfbcd8e [ 225.839589][ T6586] RDX: 0000000000000002 RSI: 00007f874b253c00 RDI: ffffffffffffff9c [ 225.847552][ T6586] RBP: 00007f874d093ab8 R08: 0000000000000000 R09: 0000000000000000 [ 225.855508][ T6586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.863465][ T6586] R13: 00007f874d284038 R14: 00007f874d283fa0 R15: 00007ffcc06f9778 [ 225.871442][ T6586] [ 225.875935][ T6586] warn_alloc: 2 callbacks suppressed [ 225.875947][ T6586] syz.3.604: vmalloc error: size 9120, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 225.896289][ T6586] CPU: 0 PID: 6586 Comm: syz.3.604 Not tainted syzkaller #0 [ 225.903591][ T6586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.913663][ T6586] Call Trace: [ 225.916950][ T6586] [ 225.919870][ T6586] dump_stack_lvl+0x188/0x250 [ 225.924537][ T6586] ? rcu_lock_release+0x5/0x20 [ 225.929298][ T6586] ? show_regs_print_info+0x20/0x20 [ 225.934482][ T6586] ? load_image+0x410/0x410 [ 225.938988][ T6586] warn_alloc+0x245/0x320 [ 225.943308][ T6586] ? zone_watermark_ok_safe+0x250/0x250 [ 225.948845][ T6586] ? __get_vm_area_node+0x164/0x2d0 [ 225.954038][ T6586] ? kfree+0xef/0x2a0 [ 225.958063][ T6586] __vmalloc_node_range+0x2b1/0x8b0 [ 225.963268][ T6586] ? read_lock_is_recursive+0x10/0x10 [ 225.968627][ T6586] ? remove_wait_queue+0x120/0x120 [ 225.973742][ T6586] ? n_tty_open+0x19/0x150 [ 225.978176][ T6586] vzalloc+0x75/0x80 [ 225.982086][ T6586] ? n_tty_open+0x19/0x150 [ 225.986514][ T6586] n_tty_open+0x19/0x150 [ 225.990749][ T6586] tty_ldisc_setup+0xbf/0x250 [ 225.995430][ T6586] tty_init_dev+0x239/0x470 [ 225.999952][ T6586] tty_open+0x7e8/0xcd0 [ 226.004117][ T6586] ? __lock_acquire+0x7d40/0x7d40 [ 226.009134][ T6586] ? tty_compat_ioctl+0x570/0x570 [ 226.014149][ T6586] ? memset+0x1e/0x40 [ 226.018153][ T6586] ? do_raw_spin_unlock+0x11d/0x230 [ 226.023362][ T6586] chrdev_open+0x585/0x5f0 [ 226.027785][ T6586] ? cd_forget+0x160/0x160 [ 226.032194][ T6586] ? fsnotify_perm+0x3a7/0x560 [ 226.036947][ T6586] ? cd_forget+0x160/0x160 [ 226.041354][ T6586] do_dentry_open+0x7f7/0xf90 [ 226.046019][ T6586] ? vfs_open+0x2b/0x80 [ 226.050164][ T6586] path_openat+0x2718/0x2fb0 [ 226.054753][ T6586] ? __kasan_slab_alloc+0xa9/0xc0 [ 226.059775][ T6586] ? do_filp_open+0x400/0x400 [ 226.064468][ T6586] do_filp_open+0x1df/0x400 [ 226.068990][ T6586] ? vfs_tmpfile+0x300/0x300 [ 226.073599][ T6586] ? _raw_spin_unlock+0x24/0x40 [ 226.078440][ T6586] ? alloc_fd+0x59e/0x650 [ 226.082772][ T6586] do_sys_openat2+0x14b/0x500 [ 226.087456][ T6586] ? __lock_acquire+0x7d40/0x7d40 [ 226.092495][ T6586] ? do_sys_open+0xe0/0xe0 [ 226.096914][ T6586] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 226.102898][ T6586] ? lock_chain_count+0x20/0x20 [ 226.107753][ T6586] __x64_sys_openat+0x135/0x160 [ 226.112592][ T6586] do_syscall_64+0x4c/0xa0 [ 226.116993][ T6586] ? clear_bhb_loop+0x30/0x80 [ 226.121658][ T6586] ? clear_bhb_loop+0x30/0x80 [ 226.126326][ T6586] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 226.132218][ T6586] RIP: 0033:0x7f874cfbcd8e [ 226.136645][ T6586] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 226.156256][ T6586] RSP: 002b:00007f874b253b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 226.164687][ T6586] RAX: ffffffffffffffda RBX: 00007f874b2546c0 RCX: 00007f874cfbcd8e [ 226.172652][ T6586] RDX: 0000000000000002 RSI: 00007f874b253c00 RDI: ffffffffffffff9c [ 226.180637][ T6586] RBP: 00007f874d093ab8 R08: 0000000000000000 R09: 0000000000000000 [ 226.188611][ T6586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.196576][ T6586] R13: 00007f874d284038 R14: 00007f874d283fa0 R15: 00007ffcc06f9778 [ 226.204564][ T6586] [ 226.208743][ T6586] Mem-Info: [ 226.211887][ T6586] active_anon:327 inactive_anon:6707 isolated_anon:0 [ 226.211887][ T6586] active_file:5057 inactive_file:46472 isolated_file:0 [ 226.211887][ T6586] unevictable:768 dirty:144 writeback:0 [ 226.211887][ T6586] slab_reclaimable:21410 slab_unreclaimable:97382 [ 226.211887][ T6586] mapped:30431 shmem:1646 pagetables:821 bounce:0 [ 226.211887][ T6586] kernel_misc_reclaimable:0 [ 226.211887][ T6586] free:1365363 free_pcp:5050 free_cma:0 [ 226.253466][ T6586] Node 0 active_anon:1276kB inactive_anon:26316kB active_file:20024kB inactive_file:185888kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121724kB dirty:572kB writeback:0kB shmem:4504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11360kB pagetables:3284kB all_unreclaimable? no [ 226.284614][ T6586] Node 1 active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 226.313692][ T6586] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 226.339927][ T6586] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 226.345748][ T6586] Node 0 DMA32 free:1525644kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1276kB inactive_anon:26416kB active_file:20024kB inactive_file:185888kB unevictable:1536kB writepending:572kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:20224kB local_pcp:19236kB free_cma:0kB [ 226.375703][ T6586] lowmem_reserve[]: 0 0 0 0 0 [ 226.380449][ T6586] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 226.406291][ T6586] lowmem_reserve[]: 0 0 0 0 0 [ 226.411058][ T6586] Node 1 Normal free:3920196kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 226.439378][ T6586] lowmem_reserve[]: 0 0 0 0 0 [ 226.444150][ T6586] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 226.456840][ T6586] Node 0 DMA32: 431*4kB (ME) 592*8kB (ME) 403*16kB (UME) 569*32kB (UME) 138*64kB (UME) 61*128kB (UME) 11*256kB (UME) 5*512kB (UM) 2*1024kB (UM) 4*2048kB (M) 357*4096kB (UM) = 1525644kB [ 226.475220][ T6586] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 226.486765][ T6586] Node 1 Normal: 245*4kB (UME) 58*8kB (UME) 26*16kB (UME) 184*32kB (UME) 80*64kB (UME) 16*128kB (U) 13*256kB (UME) 9*512kB (UE) 0*1024kB 3*2048kB (UME) 950*4096kB (M) = 3920196kB [ 226.504671][ T6586] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 226.514252][ T6586] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 226.523587][ T6586] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 226.533175][ T6586] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 226.542502][ T6586] 53175 total pagecache pages [ 226.547184][ T6586] 0 pages in swap cache [ 226.551381][ T6586] Swap cache stats: add 490, delete 490, find 1/17 [ 226.557901][ T6586] Free swap = 124796kB [ 226.562084][ T6586] Total swap = 124996kB [ 226.566252][ T6586] 2097051 pages RAM [ 226.570059][ T6586] 0 pages HighMem/MovableOnly [ 226.574769][ T6586] 415313 pages reserved [ 226.578927][ T6586] 0 pages cma reserved [ 226.583037][ T6586] tty tty26: ldisc open failed (-12), clearing slot 25 [ 226.595546][ T6221] usb 3-1: device descriptor read/8, error -71 [ 226.651073][ T6217] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 226.675812][ T6594] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 226.701269][ T6599] loop1: detected capacity change from 0 to 512 [ 226.712007][ T6587] netlink: 64 bytes leftover after parsing attributes in process `syz.0.613'. [ 226.745005][ T6587] nvme_fabrics: unknown parameter or missing value 'tr!Tsport=rdma' in ctrl creation request [ 226.771056][ T5141] rc_core: IR keymap rc-hauppauge not found [ 226.777073][ T5141] Registered IR keymap rc-empty [ 226.801209][ T6217] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 226.812164][ T5141] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 226.821579][ T6217] em28xx 6-1:0.0: board has no eeprom [ 226.837016][ T6599] EXT4-fs (loop1): Ignoring removed oldalloc option [ 226.848329][ T6599] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 226.858349][ T5141] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 226.894380][ T6599] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 4)! [ 226.905351][ T5141] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 226.934660][ T6606] loop0: detected capacity change from 0 to 512 [ 226.941229][ T6599] EXT4-fs (loop1): group descriptors corrupted! [ 226.948169][ T5141] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input31 [ 226.968040][ T5141] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 226.975417][ T6217] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 226.984069][ T6217] em28xx 6-1:0.0: dvb set to bulk mode. [ 226.993417][ T4261] em28xx 6-1:0.0: Binding DVB extension [ 227.004242][ T6217] usb 6-1: USB disconnect, device number 9 [ 227.011025][ T5141] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 227.020248][ T6217] em28xx 6-1:0.0: Disconnecting em28xx [ 227.041022][ T5141] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 227.061464][ T6606] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 227.079154][ T4261] em28xx 6-1:0.0: Registering input extension [ 227.097792][ T6217] em28xx 6-1:0.0: Closing input extension [ 227.121955][ T5141] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 227.142150][ T6606] EXT4-fs (loop0): ea_inode feature is not supported for Hurd [ 227.201992][ T5141] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 227.226262][ T6217] em28xx 6-1:0.0: Freeing device [ 227.234043][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.610'. [ 227.260973][ T5141] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 227.311278][ T5141] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 227.325940][ T19] IRQ fixup: irq 33 move in progress, old vector 49 [ 227.335660][ T6615] smpboot: CPU 1 is now offline [ 227.357316][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.608'. [ 227.403733][ T6618] x86: Booting SMP configuration: [ 227.411232][ T5141] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 227.444158][ T6618] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 227.470962][ T5141] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 227.484477][ T0] kvm-clock: cpu 1, msr ff0a041, secondary cpu clock [ 227.494819][ T6625] netlink: 32 bytes leftover after parsing attributes in process `syz.5.612'. [ 227.508347][ T18] kvm-guest: stealtime: cpu 1, msr b8f27440 [ 227.530953][ T5141] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 227.581909][ T5141] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 227.610255][ T5141] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 228.894453][ T6636] 0: reclassify loop, rule prio 0, protocol 03 [ 228.903601][ T5141] usb 2-1: USB disconnect, device number 19 [ 228.929432][ T6624] device syzkaller1 entered promiscuous mode [ 229.078415][ T1108] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 229.139398][ T6647] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 229.163538][ T6643] netlink: 64 bytes leftover after parsing attributes in process `syz.1.620'. [ 229.191005][ T4264] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 229.239749][ T6643] nvme_fabrics: unknown parameter or missing value 'tr!Tsport=rdma' in ctrl creation request [ 229.266165][ T6649] loop2: detected capacity change from 0 to 4096 [ 229.330941][ T1108] usb 1-1: Using ep0 maxpacket: 16 [ 229.367332][ T6658] loop1: detected capacity change from 0 to 512 [ 229.450979][ T1108] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.481600][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 229.521191][ T6649] ntfs3: loop2: failed to convert "0080" to cp869 [ 229.536828][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 229.551191][ T1108] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 229.562796][ T1108] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.578972][ T6649] ntfs3: loop2: failed to convert name for inode 1e. [ 229.585953][ T4264] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 229.628759][ T4264] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.681207][ T1108] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 229.701802][ T1108] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 229.713721][ T1108] usb 1-1: Manufacturer: syz [ 229.723102][ T1108] usb 1-1: config 0 descriptor?? [ 229.771169][ T4264] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 229.790476][ T4264] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 229.809387][ T4264] usb 4-1: Product: syz [ 229.814045][ T4264] usb 4-1: Manufacturer: syz [ 229.862087][ T4264] hub 4-1:4.0: USB hub found [ 230.071066][ T4264] hub 4-1:4.0: 2 ports detected [ 230.076030][ T1108] rc_core: IR keymap rc-hauppauge not found [ 230.083358][ T1108] Registered IR keymap rc-empty [ 230.097757][ T1108] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 230.105332][ T4264] hub 4-1:4.0: insufficient power available to use all downstream ports [ 230.150991][ T1108] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 230.191630][ T1108] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 230.210187][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 230.210199][ T26] audit: type=1326 audit(1792365277.735:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.0.616" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85abd0559 code=0x7ffc0000 [ 230.242766][ T6629] udc-core: couldn't find an available UDC or it's busy [ 230.249719][ T6629] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 230.268479][ T1108] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input33 [ 230.282597][ T6631] udc-core: couldn't find an available UDC or it's busy [ 230.289556][ T6631] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 230.291281][ T26] audit: type=1326 audit(1792365277.775:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.0.616" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85abd0559 code=0x7ffc0000 [ 230.329811][ T26] audit: type=1326 audit(1792365277.775:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.0.616" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85abd0559 code=0x7ffc0000 [ 230.338407][ T1108] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 230.354686][ T26] audit: type=1326 audit(1792365277.775:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.0.616" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7fe85abd0559 code=0x7ffc0000 [ 230.371370][ T4264] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 230.395714][ T26] audit: type=1326 audit(1792365277.775:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.0.616" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85abd0559 code=0x7ffc0000 [ 230.424755][ T4264] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 230.425309][ T26] audit: type=1326 audit(1792365277.775:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.0.616" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85abd0559 code=0x7ffc0000 [ 230.472721][ T1108] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 230.479963][ T5141] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 230.491897][ T4264] usb 4-1: USB disconnect, device number 14 [ 230.497071][ T26] audit: type=1326 audit(1792365277.775:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.0.616" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85abd0559 code=0x7ffc0000 [ 230.521938][ T1108] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 230.531744][ T26] audit: type=1326 audit(1792365277.775:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.0.616" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe85ab90d8e code=0x7ffc0000 [ 230.566023][ T26] audit: type=1326 audit(1792365277.775:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.0.616" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe85abd01eb code=0x7ffc0000 [ 230.583748][ T1108] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 230.599491][ T26] audit: type=1326 audit(1792365277.775:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.0.616" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe85abd01eb code=0x7ffc0000 [ 230.640948][ T1108] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 230.681021][ T1108] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 230.711324][ T1108] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 230.718672][ T6698] smpboot: CPU 1 is now offline [ 230.733907][ T5141] usb 3-1: Using ep0 maxpacket: 32 [ 230.741530][ T1108] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 230.759191][ T6700] x86: Booting SMP configuration: [ 230.768914][ T6700] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 230.781718][ T1108] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 230.799340][ T0] kvm-clock: cpu 1, msr ff0a041, secondary cpu clock [ 230.809875][ T18] kvm-guest: stealtime: cpu 1, msr b8f27440 [ 230.821653][ T1108] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 230.861076][ T5141] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 230.869286][ T5141] usb 3-1: config 0 has no interface number 0 [ 230.882295][ T1108] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 230.920969][ T1108] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 230.931757][ T5141] usb 3-1: config 0 interface 184 has no altsetting 0 [ 230.969951][ T1108] usb 1-1: USB disconnect, device number 10 [ 231.004454][ T6702] netlink: 32 bytes leftover after parsing attributes in process `syz.0.628'. [ 232.339525][ T6709] loop1: detected capacity change from 0 to 512 [ 232.351535][ T5141] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 232.363790][ T5141] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.382277][ T5141] usb 3-1: Product: syz [ 232.391826][ T5141] usb 3-1: Manufacturer: syz [ 232.429627][ T5141] usb 3-1: SerialNumber: syz [ 232.482293][ T5141] usb 3-1: config 0 descriptor?? [ 232.487359][ T6709] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 232.511037][ T6709] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 232.551991][ T5141] smsc75xx v1.0.0 [ 232.573018][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.629'. [ 233.911470][ T5141] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 233.966412][ T5141] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 233.976909][ T6716] 0: reclassify loop, rule prio 0, protocol 03 [ 234.007157][ T6713] device syzkaller1 entered promiscuous mode [ 234.013498][ T5141] usb 3-1: USB disconnect, device number 14 [ 234.247754][ T6730] FAULT_INJECTION: forcing a failure. [ 234.247754][ T6730] name failslab, interval 1, probability 0, space 0, times 0 [ 234.304199][ T6730] CPU: 0 PID: 6730 Comm: syz.3.635 Not tainted syzkaller #0 [ 234.311500][ T6730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 234.321541][ T6730] Call Trace: [ 234.324805][ T6730] [ 234.327723][ T6730] dump_stack_lvl+0x188/0x250 [ 234.332393][ T6730] ? show_regs_print_info+0x20/0x20 [ 234.337595][ T6730] ? load_image+0x410/0x410 [ 234.342093][ T6730] ? __might_sleep+0xf0/0xf0 [ 234.346681][ T6730] ? __lock_acquire+0x7d40/0x7d40 [ 234.351702][ T6730] should_fail+0x383/0x4b0 [ 234.356135][ T6730] should_failslab+0x5/0x20 [ 234.360645][ T6730] slab_pre_alloc_hook+0x51/0xc0 [ 234.365584][ T6730] ? kvm_mmu_topup_memory_cache+0xd4/0x200 [ 234.371383][ T6730] kmem_cache_alloc+0x3d/0x280 [ 234.376172][ T6730] kvm_mmu_topup_memory_cache+0xd4/0x200 [ 234.381826][ T6730] kvm_mmu_load+0x88/0x1aa0 [ 234.386336][ T6730] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 234.392316][ T6730] ? lockdep_hardirqs_on+0x94/0x140 [ 234.397526][ T6730] ? kvm_apic_accept_events+0x576/0x580 [ 234.403088][ T6730] ? lock_chain_count+0x20/0x20 [ 234.407944][ T6730] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 234.413856][ T6730] ? kvm_apic_has_interrupt+0x72d/0x740 [ 234.419411][ T6730] ? kvm_lapic_enable_pv_eoi+0x140/0x140 [ 234.425073][ T6730] vcpu_enter_guest+0x60da/0x6f70 [ 234.430107][ T6730] ? local_bh_enable+0x20/0x20 [ 234.434862][ T6730] ? is_bpf_text_address+0x254/0x270 [ 234.440159][ T6730] ? mark_lock+0x94/0x320 [ 234.444490][ T6730] ? __lock_acquire+0x13b3/0x7d40 [ 234.449530][ T6730] ? kfree+0xef/0x2a0 [ 234.453516][ T6730] ? mark_lock+0x94/0x320 [ 234.457831][ T6730] ? __lock_acquire+0x12df/0x7d40 [ 234.462852][ T6730] ? __lock_acquire+0x12df/0x7d40 [ 234.467881][ T6730] ? verify_lock_unused+0x140/0x140 [ 234.473069][ T6730] ? verify_lock_unused+0x140/0x140 [ 234.478262][ T6730] ? vmx_vcpu_load_vmcs+0x4ac/0x790 [ 234.483454][ T6730] ? mark_lock+0x94/0x320 [ 234.487792][ T6730] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 234.493795][ T6730] ? __local_bh_enable_ip+0x136/0x1c0 [ 234.499165][ T6730] ? lockdep_hardirqs_on+0x94/0x140 [ 234.504361][ T6730] ? read_lock_is_recursive+0x10/0x10 [ 234.509745][ T6730] ? __local_bh_enable_ip+0x136/0x1c0 [ 234.515141][ T6730] ? _local_bh_enable+0xa0/0xa0 [ 234.519995][ T6730] kvm_arch_vcpu_ioctl_run+0x804/0x1e40 [ 234.525560][ T6730] kvm_vcpu_ioctl+0x8f2/0xc10 [ 234.530260][ T6730] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 234.535912][ T6730] ? bpf_lsm_file_ioctl+0x5/0x10 [ 234.540850][ T6730] ? security_file_ioctl+0x7c/0xa0 [ 234.545973][ T6730] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 234.551613][ T6730] __se_sys_ioctl+0xfa/0x170 [ 234.556211][ T6730] do_syscall_64+0x4c/0xa0 [ 234.560624][ T6730] ? clear_bhb_loop+0x30/0x80 [ 234.565293][ T6730] ? clear_bhb_loop+0x30/0x80 [ 234.569980][ T6730] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 234.575879][ T6730] RIP: 0033:0x7f874cffc559 [ 234.580278][ T6730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.599880][ T6730] RSP: 002b:00007f874b233028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.608280][ T6730] RAX: ffffffffffffffda RBX: 00007f874d284090 RCX: 00007f874cffc559 [ 234.616239][ T6730] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 234.624198][ T6730] RBP: 00007f874b233090 R08: 0000000000000000 R09: 0000000000000000 [ 234.632163][ T6730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.640293][ T6730] R13: 00007f874d284128 R14: 00007f874d284090 R15: 00007ffcc06f9778 [ 234.648281][ T6730] [ 234.675244][ T6728] loop1: detected capacity change from 0 to 4096 [ 234.689189][ T6731] loop5: detected capacity change from 0 to 4096 [ 234.849830][ T6735] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.867182][ T6734] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.877173][ T6728] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 234.984188][ T6731] NILFS (loop5): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 235.005130][ T6728] NILFS (loop1): mounting fs with errors [ 235.070993][ T6221] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 235.277052][ T19] IRQ fixup: irq 33 move in progress, old vector 49 [ 235.287218][ T6739] smpboot: CPU 1 is now offline [ 235.305574][ T6739] x86: Booting SMP configuration: [ 235.313888][ T5141] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 235.333906][ T6221] usb 1-1: Using ep0 maxpacket: 16 [ 235.339140][ T6739] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 235.370096][ T0] kvm-clock: cpu 1, msr ff0a041, secondary cpu clock [ 235.379339][ T18] kvm-guest: stealtime: cpu 1, msr b8f27440 [ 235.451195][ T6221] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.573799][ T5141] usb 2-1: device descriptor read/64, error -71 [ 235.580102][ T6221] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 235.600940][ T6221] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 235.620789][ T6221] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 235.847370][ T6744] netlink: 16 bytes leftover after parsing attributes in process `syz.5.640'. [ 235.867048][ T6221] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.971079][ T6221] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 235.983328][ T6221] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 236.001008][ T5141] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 236.008757][ T6221] usb 1-1: Manufacturer: syz [ 236.035998][ T6221] usb 1-1: config 0 descriptor?? [ 236.200915][ T5141] usb 2-1: device descriptor read/64, error -71 [ 236.348174][ T5141] usb usb2-port1: attempt power cycle [ 236.388780][ T6754] netlink: 32 bytes leftover after parsing attributes in process `syz.5.642'. [ 236.410986][ T6221] rc_core: IR keymap rc-hauppauge not found [ 236.416892][ T6221] Registered IR keymap rc-empty [ 236.433370][ T6221] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 236.465142][ T6221] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 236.511388][ T6221] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 236.535253][ T6221] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input34 [ 237.838684][ T4261] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 237.889906][ T1108] Bluetooth: hci5: command 0x0406 tx timeout [ 237.898692][ T6221] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 237.911086][ T5141] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 237.982490][ T6221] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 238.059930][ T6221] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 238.090969][ T6221] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 238.117992][ T6766] loop5: detected capacity change from 0 to 512 [ 238.124920][ T6221] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 238.171160][ T6221] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 238.178377][ T5141] usb 2-1: device not accepting address 22, error -71 [ 239.464177][ T6221] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 239.484944][ T6766] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 239.506905][ T6766] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 239.531936][ T6221] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 239.556923][ T4261] usb 4-1: unable to read config index 0 descriptor/all [ 239.570995][ T6221] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 239.578641][ T4261] usb 4-1: can't read configurations, error -71 [ 239.609641][ T6766] netlink: 8 bytes leftover after parsing attributes in process `syz.5.647'. [ 239.665360][ T6221] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 239.724453][ T6221] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 239.760906][ T6221] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 239.809895][ T6221] usb 1-1: USB disconnect, device number 11 [ 239.862949][ T19] IRQ fixup: irq 33 move in progress, old vector 49 [ 239.876566][ T6775] smpboot: CPU 1 is now offline [ 239.920669][ T6777] x86: Booting SMP configuration: [ 239.948298][ T6777] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 239.983058][ T0] kvm-clock: cpu 1, msr ff0a041, secondary cpu clock [ 239.995231][ T18] kvm-guest: stealtime: cpu 1, msr b8f27440 [ 240.040198][ T6760] loop0: detected capacity change from 0 to 32768 [ 240.176498][ T6760] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.644 (6760) [ 240.271553][ T6760] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 240.324551][ T6760] BTRFS info (device loop0): turning on async discard [ 240.361787][ T6760] BTRFS info (device loop0): using free space tree [ 240.375894][ T6787] netlink: 32 bytes leftover after parsing attributes in process `syz.1.653'. [ 240.410937][ T6760] BTRFS info (device loop0): has skinny extents [ 240.436627][ T6770] loop3: detected capacity change from 0 to 32768 [ 240.509958][ T6770] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.648 (6770) [ 240.638317][ T6814] comedi comedi0: comedi_test: 1000000 microvolt, 100000 microsecond waveform attached [ 240.650897][ T6760] BTRFS info (device loop0): enabling ssd optimizations [ 240.651479][ T4177] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (4177) [ 240.711021][ T6221] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 240.737941][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 240.737953][ T26] audit: type=1800 audit(1792365288.265:813): pid=6760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.644" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 240.867014][ T6816] loop1: detected capacity change from 0 to 2048 [ 240.954442][ T6816] NILFS (loop1): invalid segment: Magic number mismatch [ 240.962070][ T6221] usb 6-1: Using ep0 maxpacket: 16 [ 241.021513][ T6816] NILFS (loop1): trying rollback from an earlier position [ 241.082372][ T6221] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.099318][ T6221] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 241.127701][ T6816] NILFS (loop1): recovery complete [ 241.143830][ T6221] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 241.153787][ T6824] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 241.170949][ T6221] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 241.191058][ T6221] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.616417][ T6221] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 242.635831][ T6221] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 242.654110][ T6221] usb 6-1: Manufacturer: syz [ 242.707542][ T6221] usb 6-1: config 0 descriptor?? [ 244.170490][ T19] IRQ fixup: irq 33 move in progress, old vector 49 [ 244.181559][ T6834] smpboot: CPU 1 is now offline [ 244.254497][ T6843] netlink: 32 bytes leftover after parsing attributes in process `syz.5.663'. [ 244.286851][ T6846] x86: Booting SMP configuration: [ 244.316277][ T6846] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 244.340957][ T6221] rc_core: IR keymap rc-hauppauge not found [ 244.353830][ T0] kvm-clock: cpu 1, msr ff0a041, secondary cpu clock [ 245.512387][ T6221] Registered IR keymap rc-empty [ 245.522950][ T18] kvm-guest: stealtime: cpu 1, msr b8f27440 [ 245.530524][ T6221] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 245.580999][ T6221] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 245.607039][ T6856] netlink: 32 bytes leftover after parsing attributes in process `syz.0.665'. [ 245.656925][ T6221] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 245.712150][ T6221] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input35 [ 245.737273][ T6863] binder: BINDER_SET_CONTEXT_MGR already set [ 245.753296][ T6863] binder: 6861:6863 ioctl 4018620d 2000000002c0 returned -16 [ 245.822086][ T6221] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 245.892474][ T6221] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 245.944756][ T6872] FAULT_INJECTION: forcing a failure. [ 245.944756][ T6872] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 245.960928][ T6221] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 246.009915][ T6221] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 246.041198][ T6869] loop1: detected capacity change from 0 to 4096 [ 246.049694][ T6872] CPU: 0 PID: 6872 Comm: syz.2.669 Not tainted syzkaller #0 [ 246.056973][ T6872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 246.067020][ T6872] Call Trace: [ 246.070288][ T6872] [ 246.073206][ T6872] dump_stack_lvl+0x188/0x250 [ 246.077879][ T6872] ? show_regs_print_info+0x20/0x20 [ 246.083078][ T6872] ? load_image+0x410/0x410 [ 246.087575][ T6872] should_fail+0x383/0x4b0 [ 246.091993][ T6872] prepare_alloc_pages+0x1e3/0x5b0 [ 246.097122][ T6872] __alloc_pages+0x11b/0x480 [ 246.101726][ T6872] ? zone_statistics+0x170/0x170 [ 246.106677][ T6872] ? alloc_pages+0x452/0x560 [ 246.111267][ T6872] skb_page_frag_refill+0x225/0x4c0 [ 246.116483][ T6872] tun_get_user+0x1907/0x3b10 [ 246.121185][ T6872] ? tun_ring_recv+0xc90/0xc90 [ 246.125962][ T6872] ? rcu_lock_release+0x5/0x20 [ 246.130712][ T6872] ? __lock_acquire+0x7d40/0x7d40 [ 246.135761][ T6872] tun_chr_write_iter+0x112/0x1e0 [ 246.140798][ T6872] vfs_write+0x748/0xd70 [ 246.145047][ T6872] ? file_end_write+0x250/0x250 [ 246.149900][ T6872] ? __fget_files+0x402/0x470 [ 246.154574][ T6872] ? __fdget_pos+0x1e2/0x370 [ 246.159179][ T6872] ? ksys_write+0x70/0x260 [ 246.163609][ T6872] ksys_write+0x153/0x260 [ 246.167949][ T6872] ? __ia32_sys_read+0x80/0x80 [ 246.172709][ T6872] ? lockdep_hardirqs_on+0x94/0x140 [ 246.177921][ T6872] do_syscall_64+0x4c/0xa0 [ 246.182345][ T6872] ? clear_bhb_loop+0x30/0x80 [ 246.187026][ T6872] ? clear_bhb_loop+0x30/0x80 [ 246.191708][ T6872] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 246.197612][ T6872] RIP: 0033:0x7f9392e7bd8e [ 246.202042][ T6872] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 246.221648][ T6872] RSP: 002b:00007f9391112fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 246.230053][ T6872] RAX: ffffffffffffffda RBX: 00007f93911136c0 RCX: 00007f9392e7bd8e [ 246.238012][ T6872] RDX: 000000000000007e RSI: 0000200000000e40 RDI: 00000000000000c8 [ 246.245976][ T6872] RBP: 00007f9391113090 R08: 0000000000000000 R09: 0000000000000000 [ 246.253951][ T6872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.261918][ T6872] R13: 00007f9393143038 R14: 00007f9393142fa0 R15: 00007fff82d20468 [ 246.269915][ T6872] [ 246.278297][ T6221] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 246.318550][ T6878] FAULT_INJECTION: forcing a failure. [ 246.318550][ T6878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.331906][ T6221] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 246.349437][ T6878] CPU: 0 PID: 6878 Comm: syz.0.672 Not tainted syzkaller #0 [ 246.356822][ T6878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 246.366872][ T6878] Call Trace: [ 246.370160][ T6878] [ 246.373097][ T6878] dump_stack_lvl+0x188/0x250 [ 246.377783][ T6878] ? show_regs_print_info+0x20/0x20 [ 246.382973][ T6878] ? load_image+0x410/0x410 [ 246.387488][ T6878] ? __lock_acquire+0x7d40/0x7d40 [ 246.392528][ T6878] should_fail+0x383/0x4b0 [ 246.396952][ T6878] __kvm_read_guest_page+0x135/0x1c0 [ 246.402235][ T6878] kvm_fetch_guest_virt+0x11b/0x160 [ 246.407448][ T6878] ? emulator_write_std+0x1d0/0x1d0 [ 246.412653][ T6878] __do_insn_fetch_bytes+0x2a3/0x660 [ 246.417932][ T6878] ? x86_decode_insn+0x4730/0x4730 [ 246.423043][ T6878] ? vmx_get_segment+0x389/0x800 [ 246.427993][ T6878] x86_decode_insn+0x329/0x4730 [ 246.432858][ T6878] ? mark_lock+0x94/0x320 [ 246.437181][ T6878] ? emulator_task_switch+0x1040/0x1040 [ 246.442727][ T6878] ? verify_lock_unused+0x140/0x140 [ 246.447939][ T6878] ? clear_bhb_loop+0x30/0x80 [ 246.452616][ T6878] ? clear_bhb_loop+0x30/0x80 [ 246.457285][ T6878] ? clear_bhb_loop+0x30/0x80 [ 246.461960][ T6878] x86_emulate_instruction+0x220/0x20d0 [ 246.467529][ T6878] ? vmx_vcpu_run+0x123a/0x22b0 [ 246.472396][ T6878] handle_ud+0x2b1/0x400 [ 246.476649][ T6878] ? kvm_write_guest_virt_system+0x1b0/0x1b0 [ 246.482633][ T6878] ? handle_exception_nmi+0x1c5/0xe40 [ 246.488019][ T6878] ? cpu_has_vmx_intel_pt+0xd0/0xd0 [ 246.493226][ T6878] vmx_handle_exit+0xc44/0x18a0 [ 246.498072][ T6878] ? vtime_guest_exit+0x1fa/0x2f0 [ 246.503097][ T6878] vcpu_enter_guest+0x60cd/0x6f70 [ 246.508145][ T6878] ? local_bh_enable+0x20/0x20 [ 246.512915][ T6878] ? push+0x660/0x660 [ 246.516885][ T6878] ? emulator_get_segment+0x2c5/0x5d0 [ 246.522260][ T6878] ? segmented_read+0x5d/0x300 [ 246.527031][ T6878] ? mark_lock+0x94/0x320 [ 246.531376][ T6878] ? mark_lock+0x94/0x320 [ 246.535706][ T6878] ? __lock_acquire+0x12df/0x7d40 [ 246.540723][ T6878] ? tomoyo_path_number_perm+0x55c/0x6b0 [ 246.546351][ T6878] ? em_pop_sreg+0xd7/0x6a0 [ 246.550859][ T6878] ? em_push_sreg+0x5c0/0x5c0 [ 246.555536][ T6878] ? verify_lock_unused+0x140/0x140 [ 246.560730][ T6878] ? x86_emulate_insn+0x428/0x3680 [ 246.565837][ T6878] ? __lock_acquire+0x7d40/0x7d40 [ 246.570859][ T6878] ? read_lock_is_recursive+0x10/0x10 [ 246.576245][ T6878] ? complete_emulated_mmio+0x5bd/0x8d0 [ 246.581822][ T6878] kvm_arch_vcpu_ioctl_run+0x804/0x1e40 [ 246.587376][ T6878] kvm_vcpu_ioctl+0x8f2/0xc10 [ 246.592051][ T6878] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 246.597716][ T6878] ? bpf_lsm_file_ioctl+0x5/0x10 [ 246.602674][ T6878] ? security_file_ioctl+0x7c/0xa0 [ 246.607772][ T6878] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 246.613400][ T6878] __se_sys_ioctl+0xfa/0x170 [ 246.618003][ T6878] do_syscall_64+0x4c/0xa0 [ 246.622427][ T6878] ? clear_bhb_loop+0x30/0x80 [ 246.627106][ T6878] ? clear_bhb_loop+0x30/0x80 [ 246.631781][ T6878] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 246.637683][ T6878] RIP: 0033:0x7fe85abd0559 [ 246.642102][ T6878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.661713][ T6878] RSP: 002b:00007fe858e28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.670149][ T6878] RAX: ffffffffffffffda RBX: 00007fe85ae57fa0 RCX: 00007fe85abd0559 [ 246.678116][ T6878] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 246.686090][ T6878] RBP: 00007fe858e28090 R08: 0000000000000000 R09: 0000000000000000 [ 246.694068][ T6878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.702050][ T6878] R13: 00007fe85ae58038 R14: 00007fe85ae57fa0 R15: 00007ffefbb16818 [ 246.710034][ T6878] [ 246.715138][ T6221] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 246.750952][ T6221] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 246.761634][ T6869] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 246.801050][ T6221] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 246.827809][ T6869] ntfs: volume version 3.1. [ 246.840931][ T6221] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 246.872015][ T6221] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 246.881453][ T5139] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 246.906425][ T6221] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 246.931398][ T6864] loop5: detected capacity change from 0 to 32768 [ 246.938061][ T6221] usb 6-1: USB disconnect, device number 10 [ 247.007922][ T6864] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.667 (6864) [ 247.051430][ T6864] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 247.067468][ T6864] BTRFS info (device loop5): turning on async discard [ 247.075933][ T6864] BTRFS info (device loop5): using free space tree [ 247.082796][ T6864] BTRFS info (device loop5): has skinny extents [ 247.121073][ T5139] usb 4-1: Using ep0 maxpacket: 8 [ 247.241076][ T5139] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 247.260717][ T5139] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 247.284871][ T6864] BTRFS info (device loop5): enabling ssd optimizations [ 247.299717][ T5139] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 247.318825][ T5139] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 247.333827][ T6909] FAULT_INJECTION: forcing a failure. [ 247.333827][ T6909] name failslab, interval 1, probability 0, space 0, times 0 [ 247.347632][ T4334] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 247.355320][ T5139] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 247.369212][ T6909] CPU: 0 PID: 6909 Comm: syz.0.677 Not tainted syzkaller #0 [ 247.376509][ T6909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.386579][ T6909] Call Trace: [ 247.389881][ T6909] [ 247.392825][ T6909] dump_stack_lvl+0x188/0x250 [ 247.397528][ T6909] ? show_regs_print_info+0x20/0x20 [ 247.402757][ T6909] ? load_image+0x410/0x410 [ 247.407293][ T6909] ? __might_sleep+0xf0/0xf0 [ 247.411905][ T6909] ? __lock_acquire+0x7d40/0x7d40 [ 247.416956][ T6909] should_fail+0x383/0x4b0 [ 247.421394][ T6909] should_failslab+0x5/0x20 [ 247.425911][ T6909] slab_pre_alloc_hook+0x51/0xc0 [ 247.430859][ T6909] kmem_cache_alloc_trace+0x47/0x290 [ 247.436164][ T6909] ? __list_lru_init+0x535/0xac0 [ 247.441123][ T6909] __list_lru_init+0x535/0xac0 [ 247.445920][ T6909] alloc_super+0x787/0x970 [ 247.450362][ T6909] ? kill_litter_super+0xa0/0xa0 [ 247.455317][ T6909] sget_fc+0x2d4/0x6f0 [ 247.459401][ T6909] ? kill_litter_super+0xa0/0xa0 [ 247.464350][ T6909] ? mqueue_get_tree+0xe0/0xe0 [ 247.469131][ T6909] get_tree_nodev+0x26/0x160 [ 247.473746][ T6909] vfs_get_tree+0x88/0x270 [ 247.478184][ T6909] fc_mount+0x18/0xa0 [ 247.482177][ T6909] mq_init_ns+0x39d/0x510 [ 247.486538][ T6909] copy_ipcs+0x2ea/0x4b0 [ 247.490852][ T6909] create_new_namespaces+0x212/0x700 [ 247.496175][ T6909] unshare_nsproxy_namespaces+0x116/0x160 [ 247.501920][ T6909] ksys_unshare+0x4f6/0x8e0 [ 247.506435][ T6909] ? __lock_acquire+0x7d40/0x7d40 [ 247.511493][ T6909] ? sighand_ctor+0x40/0x40 [ 247.516041][ T6909] ? lock_chain_count+0x20/0x20 [ 247.520921][ T6909] ? syscall_enter_from_user_mode+0x21/0x70 [ 247.526846][ T6909] __x64_sys_unshare+0x34/0x40 [ 247.531624][ T6909] do_syscall_64+0x4c/0xa0 [ 247.536058][ T6909] ? clear_bhb_loop+0x30/0x80 [ 247.540751][ T6909] ? clear_bhb_loop+0x30/0x80 [ 247.545454][ T6909] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 247.551367][ T6909] RIP: 0033:0x7fe85abd0559 [ 247.555797][ T6909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.575414][ T6909] RSP: 002b:00007fe858e28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 247.583846][ T6909] RAX: ffffffffffffffda RBX: 00007fe85ae57fa0 RCX: 00007fe85abd0559 [ 247.591837][ T6909] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000400 [ 247.599824][ T6909] RBP: 00007fe85ac67ab8 R08: 0000000000000000 R09: 0000000000000000 [ 247.607808][ T6909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.615789][ T6909] R13: 00007fe85ae58038 R14: 00007fe85ae57fa0 R15: 00007ffefbb16818 [ 247.623790][ T6909] [ 247.631251][ T5139] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 247.640484][ T5139] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.724125][ T26] audit: type=1800 audit(1792365551.260:814): pid=6864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.667" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 247.769168][ T6912] smpboot: CPU 1 is now offline [ 247.794057][ T6912] x86: Booting SMP configuration: [ 247.814307][ T6912] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 247.830344][ T0] kvm-clock: cpu 1, msr ff0a041, secondary cpu clock [ 247.847350][ T4334] usb 2-1: Using ep0 maxpacket: 16 [ 247.856161][ T18] kvm-guest: stealtime: cpu 1, msr b8f27440 [ 247.972029][ T4334] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.985817][ T4334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 247.997362][ T4334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 248.007269][ T4334] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 248.017072][ T4334] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 248.121152][ T4334] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 248.140394][ T4334] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 249.429247][ T4334] usb 2-1: Manufacturer: syz [ 249.441928][ T4334] usb 2-1: config 0 descriptor?? [ 249.491477][ T6217] usb 4-1: USB disconnect, device number 17 [ 249.770983][ T4334] rc_core: IR keymap rc-hauppauge not found [ 249.780905][ T4334] Registered IR keymap rc-empty [ 249.785848][ T4334] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 249.836458][ T6933] loop3: detected capacity change from 0 to 512 [ 249.852531][ T4334] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 249.901372][ T4334] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 249.915382][ T26] audit: type=1326 audit(1792365553.450:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.1.673" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4253e559 code=0x7ffc0000 [ 249.944698][ T26] audit: type=1326 audit(1792365553.450:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.1.673" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4253e559 code=0x7ffc0000 [ 249.974055][ T26] audit: type=1326 audit(1792365553.450:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.1.673" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4253e559 code=0x7ffc0000 [ 250.002983][ T26] audit: type=1326 audit(1792365553.450:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.1.673" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f7d4253e559 code=0x7ffc0000 [ 250.031935][ T26] audit: type=1326 audit(1792365553.450:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.1.673" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4253e559 code=0x7ffc0000 [ 250.061249][ T26] audit: type=1326 audit(1792365553.450:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.1.673" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4253e559 code=0x7ffc0000 [ 250.090205][ T26] audit: type=1326 audit(1792365553.450:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.1.673" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4253e559 code=0x7ffc0000 [ 250.119112][ T26] audit: type=1326 audit(1792365553.450:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.1.673" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d424fed8e code=0x7ffc0000 [ 251.061052][ T6883] udc-core: couldn't find an available UDC or it's busy [ 251.069573][ T6933] loop3: detected capacity change from 0 to 164 [ 251.091963][ T6883] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 251.392265][ T4334] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input36 [ 251.410723][ T6943] loop0: detected capacity change from 0 to 512 [ 251.457851][ T4334] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 251.520976][ T4334] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 251.570951][ T4334] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 251.611128][ T4334] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 251.642226][ T6955] sctp: [Deprecated]: syz.5.689 (pid 6955) Use of int in maxseg socket option. [ 251.642226][ T6955] Use struct sctp_assoc_value instead [ 251.659714][ T4334] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 251.677294][ T6943] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 251.721715][ T4334] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 251.732185][ T6943] EXT4-fs (loop0): mount failed [ 251.753656][ T19] IRQ fixup: irq 33 move in progress, old vector 49 [ 251.763384][ T4334] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 251.770604][ T6962] smpboot: CPU 1 is now offline [ 251.801082][ T4334] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 251.809416][ T6966] x86: Booting SMP configuration: [ 251.829276][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 251.829284][ T26] audit: type=1326 audit(1792365555.360:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.1.673" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7d424fed8e code=0x7ffc0000 [ 251.876400][ T6966] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 251.890888][ T4334] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 251.904209][ T0] kvm-clock: cpu 1, msr ff0a041, secondary cpu clock [ 251.914619][ T18] kvm-guest: stealtime: cpu 1, msr b8f27440 [ 251.931003][ T4334] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 251.942137][ T6943] loop0: detected capacity change from 0 to 512 [ 251.961162][ T26] audit: type=1326 audit(1792365555.460:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.1.673" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7d4253e559 code=0x7ffc0000 [ 251.992084][ T4334] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 252.030122][ T4334] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 252.065472][ T4334] usb 2-1: USB disconnect, device number 24 [ 255.275763][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.282118][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.374655][ T7008] smpboot: CPU 1 is now offline [ 255.414457][ T7008] x86: Booting SMP configuration: [ 255.440123][ T7008] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 255.469373][ T0] kvm-clock: cpu 1, msr ff0a041, secondary cpu clock [ 255.480121][ T18] kvm-guest: stealtime: cpu 1, msr b8f27440 [ 255.506139][ T7009] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 255.534220][ T7009] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 255.581035][ T4334] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 255.601117][ T7] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 255.663875][ T7021] FAULT_INJECTION: forcing a failure. [ 255.663875][ T7021] name failslab, interval 1, probability 0, space 0, times 0 [ 255.685967][ T7021] CPU: 0 PID: 7021 Comm: syz.1.708 Not tainted syzkaller #0 [ 255.693279][ T7021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 255.703331][ T7021] Call Trace: [ 255.706706][ T7021] [ 255.709655][ T7021] dump_stack_lvl+0x188/0x250 [ 255.714363][ T7021] ? show_regs_print_info+0x20/0x20 [ 255.719562][ T7021] ? load_image+0x410/0x410 [ 255.724058][ T7021] ? __might_sleep+0xf0/0xf0 [ 255.728664][ T7021] ? __lock_acquire+0x7d40/0x7d40 [ 255.733707][ T7021] should_fail+0x383/0x4b0 [ 255.738129][ T7021] should_failslab+0x5/0x20 [ 255.742633][ T7021] slab_pre_alloc_hook+0x51/0xc0 [ 255.747582][ T7021] kmem_cache_alloc_trace+0x47/0x290 [ 255.752873][ T7021] ? __list_lru_init+0x535/0xac0 [ 255.757803][ T7021] __list_lru_init+0x535/0xac0 [ 255.762574][ T7021] alloc_super+0x787/0x970 [ 255.767008][ T7021] ? kill_litter_super+0xa0/0xa0 [ 255.771954][ T7021] sget_fc+0x2d4/0x6f0 [ 255.776028][ T7021] ? kill_litter_super+0xa0/0xa0 [ 255.780962][ T7021] ? mqueue_get_tree+0xe0/0xe0 [ 255.785747][ T7021] get_tree_nodev+0x26/0x160 [ 255.790352][ T7021] vfs_get_tree+0x88/0x270 [ 255.794774][ T7021] fc_mount+0x18/0xa0 [ 255.798743][ T7021] mq_init_ns+0x39d/0x510 [ 255.803068][ T7021] copy_ipcs+0x2ea/0x4b0 [ 255.807327][ T7021] create_new_namespaces+0x212/0x700 [ 255.812633][ T7021] unshare_nsproxy_namespaces+0x116/0x160 [ 255.818341][ T7021] ksys_unshare+0x4f6/0x8e0 [ 255.822839][ T7021] ? __lock_acquire+0x7d40/0x7d40 [ 255.827861][ T7021] ? sighand_ctor+0x40/0x40 [ 255.832357][ T7021] ? lock_chain_count+0x20/0x20 [ 255.837204][ T7021] ? syscall_enter_from_user_mode+0x21/0x70 [ 255.843100][ T7021] __x64_sys_unshare+0x34/0x40 [ 255.847850][ T7021] do_syscall_64+0x4c/0xa0 [ 255.852258][ T7021] ? clear_bhb_loop+0x30/0x80 [ 255.856957][ T7021] ? clear_bhb_loop+0x30/0x80 [ 255.861650][ T7021] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 255.867550][ T7021] RIP: 0033:0x7f7d4253e559 [ 255.871960][ T7021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.891575][ T7021] RSP: 002b:00007f7d40796028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 255.900001][ T7021] RAX: ffffffffffffffda RBX: 00007f7d427c5fa0 RCX: 00007f7d4253e559 [ 255.907975][ T7021] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000400 [ 255.915945][ T7021] RBP: 00007f7d425d5ab8 R08: 0000000000000000 R09: 0000000000000000 [ 255.923923][ T7021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.931894][ T7021] R13: 00007f7d427c6038 R14: 00007f7d427c5fa0 R15: 00007fff0c9d07a8 [ 255.939901][ T7021] [ 255.943009][ C0] vkms_vblank_simulate: vblank timer overrun [ 257.072714][ T19] IRQ fixup: irq 33 move in progress, old vector 49 [ 257.083187][ T7020] smpboot: CPU 1 is now offline [ 257.258178][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 257.263516][ T4334] usb 6-1: Using ep0 maxpacket: 16 [ 257.282150][ T7026] x86: Booting SMP configuration: [ 257.298631][ T7026] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 257.324627][ T0] kvm-clock: cpu 1, msr ff0a041, secondary cpu clock [ 257.340702][ T18] kvm-guest: stealtime: cpu 1, msr b8f27440 [ 257.391670][ T4334] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.391707][ T4334] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 257.391736][ T4334] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 257.391758][ T4334] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 257.391780][ T4334] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 257.391888][ T7] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 257.391908][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.391926][ T7] usb 1-1: config 1 has no interface number 0 [ 257.391951][ T7] usb 1-1: config 1 interface 105 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 257.391973][ T7] usb 1-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.391997][ T7] usb 1-1: config 1 interface 105 has no altsetting 0 [ 257.475649][ T4334] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 257.475677][ T4334] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 257.475697][ T4334] usb 6-1: Manufacturer: syz [ 257.479270][ T4334] usb 6-1: config 0 descriptor?? [ 257.564057][ T7] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 257.564076][ T7] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 257.564094][ T7] usb 1-1: Product: syz [ 257.564104][ T7] usb 1-1: Manufacturer: syz [ 257.564114][ T7] usb 1-1: SerialNumber: syz [ 257.729527][ T26] audit: type=1326 audit(1792365561.260:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7005 comm="syz.5.702" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f9d3f559 code=0x7ffc0000 [ 257.735542][ T7006] udc-core: couldn't find an available UDC or it's busy [ 257.761048][ T26] audit: type=1326 audit(1792365561.260:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7005 comm="syz.5.702" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f9d3f559 code=0x7ffc0000 [ 257.804262][ T26] audit: type=1326 audit(1792365561.260:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7005 comm="syz.5.702" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f9d3f559 code=0x7ffc0000 [ 257.839073][ T26] audit: type=1326 audit(1792365561.260:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7005 comm="syz.5.702" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7fa9f9d3f559 code=0x7ffc0000 [ 257.875772][ T26] audit: type=1326 audit(1792365561.270:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7005 comm="syz.5.702" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f9d3f559 code=0x7ffc0000 [ 257.909214][ T26] audit: type=1326 audit(1792365561.270:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7005 comm="syz.5.702" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f9d3f559 code=0x7ffc0000 [ 257.918695][ T7006] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 257.934436][ T26] audit: type=1326 audit(1792365561.270:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7005 comm="syz.5.702" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f9d3f559 code=0x7ffc0000 [ 257.940795][ C0] vkms_vblank_simulate: vblank timer overrun [ 257.974488][ T26] audit: type=1326 audit(1792365561.270:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7005 comm="syz.5.702" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa9f9cffd8e code=0x7ffc0000 [ 258.003919][ T26] audit: type=1326 audit(1792365561.270:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7005 comm="syz.5.702" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa9f9d3f1eb code=0x7ffc0000 [ 258.029043][ T7048] capability: warning: `syz.2.713' uses 32-bit capabilities (legacy support in use) [ 258.044998][ T26] audit: type=1326 audit(1792365561.270:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7005 comm="syz.5.702" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa9f9d3f1eb code=0x7ffc0000 [ 258.121032][ T4264] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 258.181200][ T7] aqc111: probe of 1-1:1.105 failed with error -22 [ 258.197026][ T7] usb 1-1: USB disconnect, device number 12 [ 259.623714][ T4334] rc_core: IR keymap rc-hauppauge not found [ 259.629618][ T4334] Registered IR keymap rc-empty [ 259.650920][ T4264] usb 2-1: Using ep0 maxpacket: 16 [ 259.656335][ T4334] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 259.701421][ T4334] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 259.738599][ T4334] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 259.791428][ T4264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 259.802395][ T4334] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input38 [ 259.851177][ T4334] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 259.900942][ T4334] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 259.931278][ T4334] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 259.971087][ T4264] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 259.983126][ T4334] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 260.000455][ T4264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.029480][ T4264] usb 2-1: Product: syz [ 260.039573][ T4264] usb 2-1: Manufacturer: syz [ 260.044329][ T4334] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 260.061013][ T4264] usb 2-1: SerialNumber: syz [ 260.077558][ T4264] usb 2-1: config 0 descriptor?? [ 260.090925][ T4334] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 260.131140][ T4334] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 260.141235][ T7064] loop3: detected capacity change from 0 to 32768 [ 260.152591][ T4264] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 260.162164][ T4334] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 260.178369][ T4264] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 260.190940][ T4334] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 260.220937][ T4334] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 260.240424][ T7064] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.716 (7064) [ 260.253639][ T4334] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 260.270888][ T4334] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 260.279856][ T7066] loop0: detected capacity change from 0 to 40427 [ 260.296795][ T4334] usb 6-1: USB disconnect, device number 11 [ 260.310784][ T7064] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 260.330618][ T7064] BTRFS info (device loop3): turning on async discard [ 260.338137][ T7064] BTRFS info (device loop3): using free space tree [ 260.346943][ T7064] BTRFS info (device loop3): has skinny extents [ 260.353344][ T7066] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 260.363259][ T7066] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 260.385328][ T7066] F2FS-fs (loop0): Unrecognized mount option "" or missing value [ 260.400473][ T7066] ------------[ cut here ]------------ [ 260.405948][ T7066] WARNING: CPU: 0 PID: 7066 at kernel/locking/lockdep.c:6467 lockdep_unregister_key+0x4d7/0x520 [ 260.416384][ T7066] Modules linked in: [ 260.420281][ T7066] CPU: 0 PID: 7066 Comm: syz.0.718 Not tainted syzkaller #0 [ 260.427561][ T7066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.437600][ T7066] RIP: 0010:lockdep_unregister_key+0x4d7/0x520 [ 260.443754][ T7066] Code: 80 00 00 00 75 39 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 79 7d 64 08 41 f7 c4 00 02 00 00 74 90 fb 84 db 75 8f eb a0 <0f> 0b e9 44 ff ff ff 0f 0b e9 b0 fe ff ff 0f 0b e9 fd fe ff ff e8 [ 260.463350][ T7066] RSP: 0018:ffffc900030bf9c0 EFLAGS: 00010002 [ 260.469399][ T7066] RAX: 0000000000000000 RBX: ffff8880259e1728 RCX: dffffc0000000000 [ 260.477376][ T7066] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc900030bf940 [ 260.485330][ T7066] RBP: ffffc900030bfa90 R08: 0000000000000003 R09: 0000000000000004 [ 260.493288][ T7066] R10: dffffc0000000000 R11: fffff52000617f28 R12: 0000000000000a07 [ 260.501252][ T7066] R13: ffff8880259e0000 R14: 0000000000000000 R15: 1ffff92000617f3c [ 260.509220][ T7066] FS: 00007fe858e286c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 260.518130][ T7066] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.524700][ T7066] CR2: 00007fdb85025b08 CR3: 000000007e157000 CR4: 00000000003526f0 [ 260.532661][ T7066] Call Trace: [ 260.535923][ T7066] [ 260.538866][ T7066] ? lockdep_reset_lock+0x300/0x300 [ 260.544053][ T7066] ? kfree+0xef/0x2a0 [ 260.548020][ T7066] ? __phys_addr+0xb6/0x170 [ 260.552525][ T7066] f2fs_fill_super+0x3ce4/0x7050 [ 260.557453][ T7066] ? vsnprintf+0x1b22/0x1c20 [ 260.562044][ T7066] ? kill_f2fs_super+0x3d0/0x3d0 [ 260.566975][ T7066] ? up_write+0x1b6/0x410 [ 260.571293][ T7066] ? set_blocksize+0x1f1/0x360 [ 260.576042][ T7066] ? sb_set_blocksize+0xa5/0xe0 [ 260.580879][ T7066] mount_bdev+0x28a/0x3c0 [ 260.585193][ T7066] ? kill_f2fs_super+0x3d0/0x3d0 [ 260.590117][ T7066] legacy_get_tree+0xe6/0x180 [ 260.594781][ T7066] ? trace_raw_output_f2fs_fiemap+0x220/0x220 [ 260.600831][ T7066] vfs_get_tree+0x88/0x270 [ 260.605242][ T7066] do_new_mount+0x247/0xa40 [ 260.609745][ T7066] __se_sys_mount+0x2e3/0x3d0 [ 260.614412][ T7066] ? __x64_sys_mount+0xc0/0xc0 [ 260.619168][ T7066] ? lockdep_hardirqs_on+0x94/0x140 [ 260.624458][ T7066] ? __x64_sys_mount+0x1c/0xc0 [ 260.629217][ T7066] do_syscall_64+0x4c/0xa0 [ 260.633618][ T7066] ? clear_bhb_loop+0x30/0x80 [ 260.638288][ T7066] ? clear_bhb_loop+0x30/0x80 [ 260.642954][ T7066] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 260.648836][ T7066] RIP: 0033:0x7fe85abd17ca [ 260.653235][ T7066] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.672834][ T7066] RSP: 002b:00007fe858e27e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 260.681241][ T7066] RAX: ffffffffffffffda RBX: 00007fe858e27ee0 RCX: 00007fe85abd17ca [ 260.689216][ T7066] RDX: 00002000000007c0 RSI: 0000200000000880 RDI: 00007fe858e27ea0 [ 260.697176][ T7066] RBP: 00002000000007c0 R08: 00007fe858e27ee0 R09: 0000000001808014 [ 260.705143][ T7066] R10: 0000000001808014 R11: 0000000000000246 R12: 0000200000000880 [ 260.713109][ T7066] R13: 00007fe858e27ea0 R14: 00000000000055b2 R15: 0000200000000980 [ 260.721072][ T7066] [ 260.724084][ T7066] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 260.731341][ T7066] CPU: 0 PID: 7066 Comm: syz.0.718 Not tainted syzkaller #0 [ 260.738637][ T7066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.748674][ T7066] Call Trace: [ 260.751951][ T7066] [ 260.754866][ T7066] dump_stack_lvl+0x188/0x250 [ 260.759538][ T7066] ? show_regs_print_info+0x20/0x20 [ 260.764727][ T7066] ? load_image+0x410/0x410 [ 260.769217][ T7066] panic+0x2f8/0x850 [ 260.773099][ T7066] ? bpf_jit_dump+0xd0/0xd0 [ 260.777600][ T7066] ? lockdep_unregister_key+0x4d7/0x520 [ 260.783137][ T7066] __warn+0x248/0x2b0 [ 260.787113][ T7066] ? lockdep_unregister_key+0x4d7/0x520 [ 260.792650][ T7066] report_bug+0x1b9/0x2e0 [ 260.796966][ T7066] handle_bug+0x3a/0x70 [ 260.801109][ T7066] exc_invalid_op+0x16/0x40 [ 260.805596][ T7066] asm_exc_invalid_op+0x16/0x20 [ 260.810434][ T7066] RIP: 0010:lockdep_unregister_key+0x4d7/0x520 [ 260.816573][ T7066] Code: 80 00 00 00 75 39 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 79 7d 64 08 41 f7 c4 00 02 00 00 74 90 fb 84 db 75 8f eb a0 <0f> 0b e9 44 ff ff ff 0f 0b e9 b0 fe ff ff 0f 0b e9 fd fe ff ff e8 [ 260.836159][ T7066] RSP: 0018:ffffc900030bf9c0 EFLAGS: 00010002 [ 260.842208][ T7066] RAX: 0000000000000000 RBX: ffff8880259e1728 RCX: dffffc0000000000 [ 260.850177][ T7066] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc900030bf940 [ 260.858131][ T7066] RBP: ffffc900030bfa90 R08: 0000000000000003 R09: 0000000000000004 [ 260.866090][ T7066] R10: dffffc0000000000 R11: fffff52000617f28 R12: 0000000000000a07 [ 260.874045][ T7066] R13: ffff8880259e0000 R14: 0000000000000000 R15: 1ffff92000617f3c [ 260.882019][ T7066] ? lockdep_reset_lock+0x300/0x300 [ 260.887207][ T7066] ? kfree+0xef/0x2a0 [ 260.891176][ T7066] ? __phys_addr+0xb6/0x170 [ 260.895663][ T7066] f2fs_fill_super+0x3ce4/0x7050 [ 260.900599][ T7066] ? vsnprintf+0x1b22/0x1c20 [ 260.905189][ T7066] ? kill_f2fs_super+0x3d0/0x3d0 [ 260.910109][ T7066] ? up_write+0x1b6/0x410 [ 260.914432][ T7066] ? set_blocksize+0x1f1/0x360 [ 260.919183][ T7066] ? sb_set_blocksize+0xa5/0xe0 [ 260.924019][ T7066] mount_bdev+0x28a/0x3c0 [ 260.928334][ T7066] ? kill_f2fs_super+0x3d0/0x3d0 [ 260.933255][ T7066] legacy_get_tree+0xe6/0x180 [ 260.937923][ T7066] ? trace_raw_output_f2fs_fiemap+0x220/0x220 [ 260.943975][ T7066] vfs_get_tree+0x88/0x270 [ 260.948380][ T7066] do_new_mount+0x247/0xa40 [ 260.952874][ T7066] __se_sys_mount+0x2e3/0x3d0 [ 260.957538][ T7066] ? __x64_sys_mount+0xc0/0xc0 [ 260.962289][ T7066] ? lockdep_hardirqs_on+0x94/0x140 [ 260.967473][ T7066] ? __x64_sys_mount+0x1c/0xc0 [ 260.972223][ T7066] do_syscall_64+0x4c/0xa0 [ 260.976625][ T7066] ? clear_bhb_loop+0x30/0x80 [ 260.981289][ T7066] ? clear_bhb_loop+0x30/0x80 [ 260.985963][ T7066] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 260.991843][ T7066] RIP: 0033:0x7fe85abd17ca [ 260.996245][ T7066] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.015834][ T7066] RSP: 002b:00007fe858e27e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 261.024231][ T7066] RAX: ffffffffffffffda RBX: 00007fe858e27ee0 RCX: 00007fe85abd17ca [ 261.032188][ T7066] RDX: 00002000000007c0 RSI: 0000200000000880 RDI: 00007fe858e27ea0 [ 261.040145][ T7066] RBP: 00002000000007c0 R08: 00007fe858e27ee0 R09: 0000000001808014 [ 261.048102][ T7066] R10: 0000000001808014 R11: 0000000000000246 R12: 0000200000000880 [ 261.056056][ T7066] R13: 00007fe858e27ea0 R14: 00000000000055b2 R15: 0000200000000980 [ 261.064016][ T7066] [ 262.205064][ T7066] Shutting down cpus with NMI [ 262.210172][ T7066] Kernel Offset: disabled [ 262.214501][ T7066] Rebooting in 86400 seconds..