Extracting prog: 3h28m27.557978843s Minimizing prog: 1h54m38.83282445s Simplifying prog options: 0s Extracting C: 2m44.392268303s Simplifying C: 15m36.920121774s extracting reproducer from 86 programs testing a last program of every proc single: executing 36 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-close_range-openat$kvm-ioctl$KVM_CHECK_EXTENSION-ioctl$KVM_CREATE_VM-dup2-syz_genetlink_get_family_id$devlink-sendmsg$DEVLINK_CMD_TRAP_SET-syz_kvm_setup_syzos_vm$x86-openat-symlink-renameat2-syz_kvm_add_vcpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x9b) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup2(r0, r2) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x58, r4, 0x300, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r5 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x143142, 0x103) symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f00000001c0)={0x0, &(0x7f00000004c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest16=0x80a, 0x10, 0x1}}], 0x68}) ioctl$KVM_RUN(r6, 0xae80, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mprotect-sendto-mkdirat-pipe-fsetxattr$security_selinux-mount-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-close_range-mmap$IORING_OFF_SQ_RING-mkdirat-mount-openat-syz_ublk_add_dev-syz_ublk_setup_io_uring-syz_ublk_add_dev-socket$inet6_tcp-dup-syz_ublk_setup_queues-socket$netlink-sendmsg$nl_generic-openat-write$UHID_INPUT-ioctl detailed listing: executing program 0: r0 = socket(0xa, 0x3, 0x87) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) sendto(r0, &(0x7f0000001100)="e1118ce4", 0x4, 0x812, &(0x7f0000001140)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) pipe(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r1, &(0x7f0000001080), &(0x7f00000010c0)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x100000000000000) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001280)={0x1, &(0x7f00000012c0)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001340)='./sys\x00', &(0x7f0000001380)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000001400)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000001480), &(0x7f00000014c0), &(0x7f0000001500)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r3, &(0x7f0000001540)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000015c0)=@any_dev={0x2, 0xc25, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0x4}}}, &(0x7f0000001600)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000001640)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x100, 0x2, 0x33d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7395, 0x20, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x36a7, 0x80000, 0x2, 0x22c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2000002, 0x4000, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)={0x1c, 0x15, 0x1, 0x4, 0x25dfdbfe, {0xa}, [@typed={0x4}, @nested={0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) r8 = openat(r1, &(0x7f0000000100)='./proc\x00', 0x82, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) ioctl(r8, 0xc0184d08, &(0x7f0000000a00)) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-setsockopt$inet_tcp_int-bind$inet-fcntl$dupfd-setsockopt$SO_ATTACH_FILTER-sendto$inet-write$binfmt_elf64-socket$nl_sock_diag-sendmsg$TCPDIAG_GETSOCK-syz_genetlink_get_family_id$nl80211-shutdown-openat$kvm-madvise-ioctl$KVM_CREATE_VM-recvfrom$inet-msync-openat$kvm-ioctl$F2FS_IOC_MOVE_RANGE-gettid-syz_open_procfs-ioctl$KVM_CREATE_VM-openat-write-recvfrom$inet detailed listing: executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x78, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x400, 0x9, 0x8}, {0x4, 0x72, 0x7f, 0xf1b}, {0xfff7, 0x9, 0x0, 0x7}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000500)=ANY=[], 0x540) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a09007f0000000000000000000000000000ffff"], 0x4c}}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) shutdown(r0, 0x1) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) recvfrom$inet(r0, &(0x7f0000000500)=""/196, 0xc4, 0x2, &(0x7f0000000600)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5) r4 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000240)={r1, 0xffffffffffffffef, 0x3, 0x3}) r5 = gettid() syz_open_procfs(r5, &(0x7f00000002c0)='fdinfo/3\x00') ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x22) write(r6, &(0x7f00000001c0)='4', 0x1) recvfrom$inet(r6, &(0x7f0000000300)=""/209, 0xd1, 0x101, &(0x7f0000000400)={0x2, 0x4e24, @loopback}, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$incfs-socket$nl_generic-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_SET_TID_CONFIG-socket$nl_generic-syz_usb_connect-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_START_AP-sendmsg$NL80211_CMD_CONTROL_PORT_FRAME-openat$kvm-mkdirat-setresuid-openat$fuse-mount$fuse-chown-ioctl$KVM_CREATE_VM-sendmsg$ETHTOOL_MSG_PAUSE_SET-eventfd2-ioctl$KVM_IOEVENTFD-ioctl$KVM_CREATE_VCPU-syz_usb_connect-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_SET_REGS-ioctl$KVM_RUN detailed listing: executing program 0: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000400)='.pending_reads\x00', 0x400000, 0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x28, r2, 0xc4fc9e906872338b, 0x70bf2c, 0x0, {{0x15}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000800)=ANY=[@ANYBLOB="050100008ddfb240490b4f06fdd4010203010902120001f38d00000904"], 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0xa4, r4, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x49, 0xe, {{{}, {}, @device_a, @device_a, @from_mac=@broadcast}, 0x0, @random=0xc9e, 0x3, @void, @void, @val={0x3, 0x1, 0x68}, @void, @void, @val={0x5, 0x3, {0x2, 0x8e, 0xa2}}, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x7, 0x48}}, @val={0x76, 0x6, {0x0, 0x6, 0x41, 0x101}}}}, @NL80211_ATTR_IE_ASSOC_RESP={0x29, 0x80, [@mesh_id={0x72, 0x6}, @link_id={0x65, 0x12, {@random="62860ba166b3", @broadcast, @device_b}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x40}}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @crypto_settings]}, 0xa4}}, 0x39db77225c63fa4c) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000007c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r2, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8089}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0xc005) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) setresuid(0x0, 0x0, 0xee00) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c677f6d75705f69643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000f9dbdf25160000002000018008000100", @ANYBLOB="14000200626f6e"], 0x34}, 0x1, 0x0, 0x0, 0x40006}, 0x808) r9 = eventfd2(0x2, 0x801) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000000)={0x7, 0x2, 0x1, r9, 0xb}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_usb_connect(0x2, 0xc7, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902b5000201008030080b00020e03000009040000010e0100000d240100013400000000000501122402010102000000000000000003c9bbbf4224030201010003"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xffffffffffffffff, 0x2, 0x5, 0x0, 0x4002004c5, 0x8001, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2], 0x1, 0x1144}) ioctl$KVM_RUN(r10, 0xae80, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-bind$inet6-connect$inet6-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CAP_SPLIT_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_VAPIC_ADDR-listen-socket$netlink-sendmsg$netlink-syz_init_net_socket$bt_hci-socket$nl_audit-socket$nl_route-setsockopt$inet6_IPV6_FLOWLABEL_MGR-sendmsg$netlink-getsockopt$netlink-ioctl$sock_bt_hci detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x4, @private1, 0x5}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, 0x78b}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, 0x0) listen(r0, 0x80000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)={0x24, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x14, 0x0, 0x0, 0x0, [@typed={0xd, 0x0, 0x0, 0x0, @binary="2cc2ecdb28f85230a9"}]}]}, 0x24}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$nl_audit(0x10, 0x3, 0x9) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x4, 0x0, 0x103, 0x2}, 0x20) sendmsg$netlink(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="18000000680015"], 0x1c}], 0x1, 0x0, 0x0, 0x4000844}, 0x0) getsockopt$netlink(r6, 0x10e, 0x8, &(0x7f0000000000)=""/60, &(0x7f0000000040)=0x3c) ioctl$sock_bt_hci(r5, 0x400448c9, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-setsockopt$netlink_NETLINK_TX_RING-sendto-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mmap-openat$kvm-fchmodat-madvise-mremap-syz_kvm_setup_cpu$x86-syz_kvm_setup_syzos_vm$x86-syz_kvm_add_vcpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x1000, 0x4, 0x10000000, 0xc}, 0x10) sendto(r0, &(0x7f0000000140)="340000001a000100010000000000000002202000000000000000000008001c0001000000080002000001010108000100e1010203", 0x34, 0x10, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000f31000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="2edeebf3a50fc768ab66b87d4600000f23c00f21f8663501000f000f23f82e0f01c5baf80c66b8d401fb8c66efbafc0cb848ddef360f01d166b9040200000f3264660f3a0f4d1b05ba4200ed", 0x4c}], 0x1, 0x4, &(0x7f0000000100), 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f00000001c0)={0x0, &(0x7f0000000200)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x5b9, 0x40, 0x11, 0x7f}}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401a, 0x0, 0x82}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x90, 0x0, 0x0, 0x4}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_vmlaunch={0x12f, 0x18}], 0xf0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open_tree-sendmmsg$inet6-recvmsg$unix-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_int detailed listing: executing program 0: r0 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80000) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="3be1be4e88c7c93c094919bd4ea5ce4a73468d0987685a4ce168c65f818fd31c000b61c08194f7233a0d91a6", 0x2c}], 0x1, &(0x7f0000000180)=[@hoplimit={{0x5, 0x29, 0x34, 0x4}}], 0x18}}], 0x1, 0x4) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000240)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000080), 0x12) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open_tree-sendmmsg$inet6-recvmsg$unix-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_int detailed listing: executing program 0: r0 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80000) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="3be1be4e88c7c93c094919bd4ea5ce4a73468d0987685a4ce168c65f818fd31c000b61c08194f7233a0d91a6", 0x2c}], 0x1, &(0x7f0000000180)=[@hoplimit={{0x5, 0x29, 0x34, 0x4}}], 0x18}}], 0x1, 0x4) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000240)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000080), 0x12) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-signalfd4-ioctl$KVM_GET_IRQCHIP-ioctl$KVM_CREATE_VM-syz_init_net_socket$nl_generic-ioctl$KVM_CREATE_VCPU-syz_io_uring_setup-syz_io_uring_setup-syz_genetlink_get_family_id$tipc2-close-openat$binderfs-syz_init_net_socket$bt_sco-bind$bt_sco-setsockopt$bt_BT_DEFER_SETUP-ioctl$BINDER_WRITE_READ-socketpair$unix-sendmmsg$unix-syz_kvm_setup_cpu$x86-ioctl$KVM_SET_REGS-ioctl$KVM_RUN detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r1 = signalfd4(r0, &(0x7f00000004c0)={[0x7fffffffffffffff]}, 0x8, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000640)={0x1, 0x0, @pic={0x4, 0xf4, 0x8, 0x6, 0x7f, 0x80, 0x4, 0x3, 0xa, 0x3, 0x4, 0x56, 0x9, 0x5, 0x4, 0x4}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_io_uring_setup(0x7ae7, &(0x7f0000000300)={0x0, 0x4005f28, 0x10806, 0x1, 0x2}, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) syz_io_uring_setup(0x3009, &(0x7f0000000000)={0x0, 0xe962, 0x8, 0xfffffffd, 0x138}, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r1) close(0x3) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000440), 0x8) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000480)=0x1, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x100, 0x0, &(0x7f0000000200)=@reply}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@cred={{0x1c}}], 0x20, 0x24000080}}], 0x2, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000580)={[0x9, 0x3, 0x100000000, 0x8000000000000001, 0x1, 0xfffffffffffffffe, 0xb3, 0x8, 0x2, 0x8, 0xffffffffe, 0x442b, 0x7, 0x1fd, 0xe5, 0x100000004], 0xeeee8000, 0x382fc6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-syz_kvm_setup_cpu$x86-bind$bt_sco-ioctl$KVM_RUN detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000680)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000006c0)=[@text16={0x10, &(0x7f0000000700)="ea9c00ae08660f6837660f3823aa0030b883008ee0f30fbdefea95fa1001b8f8008ed80f00d8360fb26bf60f076626660f2a4a3c", 0x34}], 0x1, 0x24, 0x0, 0x0) (async) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mprotect-sendto-mkdirat-pipe-fsetxattr$security_selinux-mount-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-close_range-mmap$IORING_OFF_SQ_RING-mkdirat-mount-openat-syz_ublk_add_dev-syz_ublk_setup_io_uring-syz_ublk_add_dev-socket$inet6_tcp-dup-syz_ublk_setup_queues-socket$netlink-sendmsg$nl_generic-openat-write$UHID_INPUT-ioctl detailed listing: executing program 0: r0 = socket(0xa, 0x3, 0x87) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) sendto(r0, &(0x7f0000001100)="e1118ce4", 0x4, 0x812, &(0x7f0000001140)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) pipe(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r1, &(0x7f0000001080), &(0x7f00000010c0)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x100000000000000) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001280)={0x1, &(0x7f00000012c0)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001340)='./sys\x00', &(0x7f0000001380)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000001400)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000001480), &(0x7f00000014c0), &(0x7f0000001500)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r3, &(0x7f0000001540)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000015c0)=@any_dev={0x2, 0xc25, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0x4}}}, &(0x7f0000001600)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000001640)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x100, 0x2, 0x33d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7395, 0x20, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x36a7, 0x80000, 0x2, 0x22c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2000002, 0x4000, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)={0x1c, 0x15, 0x1, 0x4, 0x25dfdbfe, {0xa}, [@typed={0x4}, @nested={0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) r8 = openat(r1, &(0x7f0000000100)='./proc\x00', 0x82, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) ioctl(r8, 0xc0184d08, &(0x7f0000000a00)) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$usbmon-openat$kvm-ioctl$KVM_CREATE_VM-syz_kvm_setup_syzos_vm$x86-syz_kvm_add_vcpu$x86-ioctl$KVM_RUN-syz_open_dev$usbfs-ioctl$USBDEVFS_DISCONNECT_CLAIM-socket$nl_route-socket$nl_generic-syz_genetlink_get_family_id$tipc2-sendmsg$TIPC_NL_MEDIA_GET-mlock-munlock-openat-unshare-memfd_create-eventfd2-read$eventfd-socket$netlink-pipe2-splice-write-sendmsg$netlink-dup3-ioctl$BINDER_WRITE_READ detailed listing: executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000580), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000005c0)={0x0, &(0x7f0000000600)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4002, 0x10200000}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control64=0x2013, 0x30002}}, @nested_vmlaunch={0x12f, 0x18}], 0xb8}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x20000007c, 0x80001) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x20, r7, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x4004000) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) munlock(&(0x7f0000f11000/0x1000)=nil, 0x1000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x22) unshare(0x22020600) r9 = memfd_create(&(0x7f0000000400)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) r10 = eventfd2(0x0, 0x0) read$eventfd(r10, &(0x7f00000004c0), 0x8) socket$netlink(0x10, 0x3, 0xf) pipe2(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) splice(r11, 0x0, r9, &(0x7f0000000540)=0x8008, 0x4, 0x0) write(r8, &(0x7f00000003c0)='4', 0x1) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)=ANY=[@ANYRES8=r0], 0x14}], 0x1, 0x0, 0x0, 0x20040080}, 0x4000880) r12 = dup3(r0, r5, 0x0) ioctl$BINDER_WRITE_READ(r12, 0x9205, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-setsockopt$netlink_NETLINK_TX_RING-sendto-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mmap-openat$kvm-fchmodat-madvise-mremap-syz_kvm_setup_cpu$x86-syz_kvm_setup_syzos_vm$x86-syz_kvm_add_vcpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x1000, 0x4, 0x10000000, 0xc}, 0x10) sendto(r0, &(0x7f0000000140)="340000001a000100010000000000000002202000000000000000000008001c0001000000080002000001010108000100e1010203", 0x34, 0x10, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000f31000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="2edeebf3a50fc768ab66b87d4600000f23c00f21f8663501000f000f23f82e0f01c5baf80c66b8d401fb8c66efbafc0cb848ddef360f01d166b9040200000f3264660f3a0f4d1b05ba4200ed", 0x4c}], 0x1, 0x4, &(0x7f0000000100), 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f00000001c0)={0x0, &(0x7f0000000200)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x5b9, 0x40, 0x11, 0x7f}}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401a, 0x0, 0x82}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x90, 0x0, 0x0, 0x4}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_vmlaunch={0x12f, 0x18}], 0xf0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-madvise-userfaultfd-syz_init_net_socket$bt_hci-bind$bt_hci-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-ioctl$UFFDIO_COPY-madvise detailed listing: executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = userfaultfd(0x801) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x1}, 0x6) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000800)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000840)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000880)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-signalfd4-ioctl$KVM_GET_IRQCHIP-ioctl$KVM_CREATE_VM-syz_init_net_socket$nl_generic-ioctl$KVM_CREATE_VCPU-syz_io_uring_setup-syz_io_uring_setup-syz_genetlink_get_family_id$tipc2-close-openat$binderfs-syz_init_net_socket$bt_sco-bind$bt_sco-setsockopt$bt_BT_DEFER_SETUP-ioctl$BINDER_WRITE_READ-socketpair$unix-sendmmsg$unix-syz_kvm_setup_cpu$x86-ioctl$KVM_SET_REGS-ioctl$KVM_RUN detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r1 = signalfd4(r0, &(0x7f00000004c0)={[0x7fffffffffffffff]}, 0x8, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000640)={0x1, 0x0, @pic={0x4, 0xf4, 0x8, 0x6, 0x7f, 0x80, 0x4, 0x3, 0xa, 0x3, 0x4, 0x56, 0x9, 0x5, 0x4, 0x4}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_io_uring_setup(0x7ae7, &(0x7f0000000300)={0x0, 0x4005f28, 0x10806, 0x1, 0x2}, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) syz_io_uring_setup(0x3009, &(0x7f0000000000)={0x0, 0xe962, 0x8, 0xfffffffd, 0x138}, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r1) close(0x3) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000440), 0x8) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000480)=0x1, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x100, 0x0, &(0x7f0000000200)=@reply}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@cred={{0x1c}}], 0x20, 0x24000080}}], 0x2, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000580)={[0x9, 0x3, 0x100000000, 0x8000000000000001, 0x1, 0xfffffffffffffffe, 0xb3, 0x8, 0x2, 0x8, 0xffffffffe, 0x442b, 0x7, 0x1fd, 0xe5, 0x100000004], 0xeeee8000, 0x382fc6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-openat-socket$nl_xfrm-socket$nl_xfrm-socket$nl_xfrm-socketpair$unix-mkdirat-socketpair$nbd-pipe2$9p-mount$9p_fd-syz_open_dev$ublk_chdev-syz_ublk_add_dev-syz_io_uring_setup-syz_ublk_add_dev-syz_ublk_setup_queues-write$P9_RVERSION-socket$nl_generic-syz_genetlink_get_family_id$tipc2-sendmsg$TIPC_NL_MON_SET detailed listing: executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) r4 = syz_open_dev$ublk_chdev(&(0x7f0000000280), 0x0, 0x440) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2e, 0x50, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@any_dev={0x7fff, 0x7bb, 0x0, 0x0, 0x1000, 0x1000}}}, &(0x7f0000000380)=0x0) r6 = syz_io_uring_setup(0x9, &(0x7f0000000440)={0x0, 0xd351, 0x3201, 0x3, 0x19a}, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000580)={0x2e, 0xb, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000600)=@any_dev={0x1, 0x3b7, 0x0, 0x0, 0x1000, 0x7}}}, 0x0) syz_ublk_setup_queues(r4, r5, &(0x7f00000003c0)={0x0, 0x8506, 0x8000, 0x3, 0x362, 0x0, r0}, &(0x7f0000000640)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5a6b, 0x1, 0x3, 0x2ec, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6ba8, 0x1000, 0x3, 0x252, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x768b, 0x400, 0x3, 0x295, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f82, 0x80, 0x0, 0x8c, 0x0, r6}}], 0x4, &(0x7f0000001e80)={0x2e, 0x15, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x47}, 0x0, 0x0, '\x00', {0x4, 0x1c3, 0x0, &(0x7f0000000e80)=@buf_1k="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"}}, &(0x7f0000001f00)) write$P9_RVERSION(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRESHEX=r3], 0x15) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), r10) sendmsg$TIPC_NL_MON_SET(r10, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000c00)={0x3c, r11, 0x38ffb987936eedd1, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-syz_kvm_setup_cpu$x86-bind$bt_sco-ioctl$KVM_RUN detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000680)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000006c0)=[@text16={0x10, &(0x7f0000000700)="ea9c00ae08660f6837660f3823aa0030b883008ee0f30fbdefea95fa1001b8f8008ed80f00d8360fb26bf60f076626660f2a4a3c", 0x34}], 0x1, 0x24, 0x0, 0x0) (async) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-mkdirat-mount-openat-write-lseek-ioctl$KVM_CREATE_VM-openat$cgroup_ro-ioctl$SIOCSIFHWADDR-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN-openat$kvm detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:05.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1', 0x1) lseek(r1, 0x3, 0x3) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x80086601, &(0x7f0000000080)={'lo\x00', @link_local={0x2, 0x80, 0xc2, 0xc}}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@text64={0x40, &(0x7f00000004c0)="48b801b89734000000004d9823c80f23f835080050000f23f8c744240004000000c744240200000000c7442406000000000f06670f2107c74424002a010000ff2c24b8010000000f01c10f23c00f21f835020002000f23f8260f01d1f341f4c4017d10e548b8c0770c90f03a5f344b0fc76f000f20e035004000000f22e035080000000f23f8", 0xfffffffffffffeec}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$SIOCSIFHWADDR-openat$kvm-write$tun-ioctl$KVM_CREATE_VM-openat$cgroup_ro-write$binfmt_script-mmap-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_GUEST_MEMFD-preadv-socket$netlink-writev-ioctl$KVM_SET_USER_MEMORY_REGION-ftruncate-syz_clone-syz_pidfd_open-syz_usb_connect-ioctl$EXT4_IOC_MIGRATE-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-socket$inet6_tcp-setsockopt$inet6_tcp_TCP_CONGESTION-bind$inet6-setsockopt$inet6_tcp_int-sendto$inet6-openat$ptmx-ioctl$TCXONC-ioctl$TCXONC-ioctl$KVM_SET_FPU-ioctl$KVM_RUN detailed listing: executing program 0: ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000001840)=ANY=[@ANYBLOB="010200000601000400000000000035bbbbbbbbbb1d"], 0x15) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xc) ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000480)={0x9000, 0x3}) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000001880)=[{&(0x7f00000018c0)="39000000120003474cbb65e1c3e4ffff07000d0001000000070000002500000004001d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ftruncate(0xffffffffffffffff, 0x3) r5 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) syz_usb_connect(0x5, 0x54, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) ioctl$EXT4_IOC_MIGRATE(r6, 0xff02) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000100)='lp', 0x2) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x2, 0x5, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r8, 0x0, 0x0, 0x200080c0, &(0x7f0000000440)={0xa, 0x2, 0x9000, @loopback, 0xffffff1e}, 0x1c) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001980), 0x0, 0x0) ioctl$TCXONC(r9, 0x540a, 0x0) ioctl$TCXONC(r9, 0x540a, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x99, 0x0, 0x0, 0x10000, 0xffffffff, '\x00', 0xc94}) ioctl$KVM_RUN(r7, 0xae80, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_SET_NESTED_STATE-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_SET_USER_MEMORY_REGION-accept$nfc_llcp-accept$nfc_llcp-ioctl$KVM_CREATE_VCPU-keyctl$reject-ioctl$KVM_RUN-socket$inet6-connect$inet6-sendmmsg$inet6-sendto$inet6-sendmmsg$inet-sendmsg$inet6-socket$inet6-connect$inet6-sendmmsg$inet6-ioctl$KVM_RUN detailed listing: executing program 0: ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000a80)=@vmx={0x0, 0x0, 0x2080, {0x70000, 0x100000, {0x2}, 0x0, 0x1}, {"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", "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"}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002b00), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000002b40)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000240)) accept$nfc_llcp(r2, &(0x7f0000000280), &(0x7f0000000300)=0x60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) keyctl$reject(0x13, 0x0, 0xfffffffffffffff7, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000040)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendto$inet6(r4, 0x0, 0x97, 0x8000, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2800c844) sendmsg$inet6(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x84) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r5, &(0x7f00000001c0)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) ioctl$KVM_RUN(r3, 0xae80, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$usbmon-openat$kvm-ioctl$KVM_CREATE_VM-syz_kvm_setup_syzos_vm$x86-syz_kvm_add_vcpu$x86-ioctl$KVM_RUN-syz_open_dev$usbfs-ioctl$USBDEVFS_DISCONNECT_CLAIM-socket$nl_route-socket$nl_generic-syz_genetlink_get_family_id$tipc2-sendmsg$TIPC_NL_MEDIA_GET-mlock-munlock-openat-unshare-memfd_create-eventfd2-read$eventfd-socket$netlink-pipe2-splice-write-sendmsg$netlink-dup3-ioctl$BINDER_WRITE_READ detailed listing: executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000580), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000005c0)={0x0, &(0x7f0000000600)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4002, 0x10200000}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control64=0x2013, 0x30002}}, @nested_vmlaunch={0x12f, 0x18}], 0xb8}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x20000007c, 0x80001) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x20, r7, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x4004000) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) munlock(&(0x7f0000f11000/0x1000)=nil, 0x1000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x22) unshare(0x22020600) r9 = memfd_create(&(0x7f0000000400)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) r10 = eventfd2(0x0, 0x0) read$eventfd(r10, &(0x7f00000004c0), 0x8) socket$netlink(0x10, 0x3, 0xf) pipe2(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) splice(r11, 0x0, r9, &(0x7f0000000540)=0x8008, 0x4, 0x0) write(r8, &(0x7f00000003c0)='4', 0x1) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)=ANY=[@ANYRES8=r0], 0x14}], 0x1, 0x0, 0x0, 0x20040080}, 0x4000880) r12 = dup3(r0, r5, 0x0) ioctl$BINDER_WRITE_READ(r12, 0x9205, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_ublk_setup_io_uring-openat$kvm-ioctl$KVM_CREATE_VM-openat$cgroup_ro-mmap-ioctl$KVM_MEMORY_ENCRYPT_REG_REGION-syz_ublk_add_dev-socket$inet6_tcp-dup-syz_usb_control_io$lan78xx-socketpair$nbd-getsockopt$sock_int-syz_ublk_setup_queues-io_setup-socket$inet_udp-ioctl$ifreq_SIOCGIFINDEX_wireguard-ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL detailed listing: executing program 0: r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) (async, rerun: 64) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2201, 0x0) (rerun: 64) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r5, 0x8010aebb, 0x0) (async) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) (async, rerun: 64) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) (rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r10, 0x1, 0x13, 0x0, &(0x7f00000000c0)) (async) syz_ublk_setup_queues(r9, r7, &(0x7f0000000340)={0x0, 0x1, 0x20, 0x1, 0xc8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6688, 0x40, 0x10fffff, 0x1a, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x40000, 0x2, 0x145, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x200, 0x1, 0x400000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb723, 0x4, 0xfffffffb, 0x34a, 0x0, r9}}], 0x1, &(0x7f0000001000)={0x2e, 0x6d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfffd, 0x3, 0x0, 0x0}}, 0x0) (async, rerun: 64) io_setup(0x4, &(0x7f00000001c0)) (async, rerun: 64) r11 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f0000000680)={'ip_vti0\x00', &(0x7f0000000580)={'sit0\x00', r12, 0x8000, 0x7, 0x400, 0x7, {{0x30, 0x4, 0x2, 0x20, 0xc0, 0x68, 0x0, 0xff, 0x29, 0x0, @remote, @empty, {[@ra={0x94, 0x4}, @end, @timestamp={0x44, 0x24, 0x57, 0x0, 0xf, [0x1, 0x8, 0x7, 0x1, 0x6, 0x3, 0x7ff, 0x4bad319b]}, @end, @timestamp_addr={0x44, 0x1c, 0xc3, 0x1, 0xa, [{@dev={0xac, 0x14, 0x14, 0x1b}, 0xa}, {@rand_addr=0x640100fd, 0x54bc}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0xfffffc00}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x62, 0x2, [{0x7, 0x6, "1f0619c6"}, {0x0, 0xf, "ce625a38ef4f9f237ca914a3fd"}, {0x1, 0xe, "08e6fa9a862c6ee9ff880910"}, {0x6, 0xb, "636d7120d4bd9b5bc0"}, {0x1, 0x7, "6f559ee7c2"}, {0x7, 0x10, "247f8c56fd8d9a7764c133f8c373"}, {0x5, 0xa, "cbfd81887e837ef7"}, {0x1, 0xd, "0ed9c385ef912df5eeb928"}]}]}}}}}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-socket$inet6_tcp-ioctl$sock_SIOCETHTOOL-syz_genetlink_get_family_id$SEG6-socket$nl_generic-sendmsg$SEG6_CMD_SET_TUNSRC-syz_kvm_setup_cpu$x86-openat$cgroup_ro-openat$cgroup_ro-mmap-openat$cgroup_ro-mmap-openat$cgroup_ro-mmap-openat$cgroup_ro-mmap-ioctl$FS_IOC_RESVSP-syz_kvm_setup_cpu$x86-ioctl$KVM_SET_VAPIC_ADDR-ioctl$KVM_SET_VCPU_EVENTS-ioctl$KVM_RUN detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000180)=@ethtool_coalesce={0xe, 0x4, 0x1, 0x4, 0x8, 0x4, 0x8001, 0xe, 0xa, 0x8001, 0x5, 0xe, 0x10001, 0x101, 0x1e, 0x7, 0x6000000, 0x2, 0x3d0, 0x4, 0x6000, 0xb, 0x7}}) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000400), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd30, 0x25dfdbfd}, 0x14}}, 0x4044010) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x3000)=nil, 0x3000, 0x0, 0x13, r7, 0xb795b000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x28011, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r9, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x1, 0x80012, r10, 0x3aa10000) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f00000003c0)={0x1100, 0x0, 0x52, 0x11000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x5, 0x8, 0xfe, 0x0, 0x200, 0x2, 0xf, 0xd, 0x9, 0x2, 0xe8, 0x6, 0x0, 0xe5, 0x74, 0x7, 0x2, 0xd, 0x9, '\x00', 0x2, 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-openat$uinput-syslog-ioctl$UI_DEV_SETUP-openat$tcp_mem-openat$kvm-ioctl$KVM_CREATE_VM-madvise-madvise-write$tcp_mem-ioctl$KVM_CREATE_VCPU-syz_usb_connect$uac3-ioctl$KVM_SET_REGS-syz_usb_connect$cdc_ncm-ioctl$KVM_SET_VCPU_EVENTS-socket$inet_tcp-ioctl$KVM_CAP_HYPERV_SYNIC2-ioctl$sock_SIOCGPGRP-capset-ioctl$sock_inet_SIOCSARP-syz_ublk_add_dev-socket$inet6_tcp-dup-syz_ublk_setup_queues-write$cgroup_pid-ioctl$KVM_RUN detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syslog(0xa, 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$tcp_mem(r3, &(0x7f00000006c0)={0x8001, 0x20, 0x1, 0x20, 0x3ff}, 0x48) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000080)=ANY=[@ANYBLOB="12010003000000403512100040000102030109028a000301046008080b0001012430010904000000010130000a2401f5260005000000132403050004030306070000000400010004000924050602"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000e80)={[0xec8, 0xfffffffffffffffe, 0x80, 0x40022, 0x2, 0x7b, 0x44234, 0x8000000000000007, 0x81, 0x9c3, 0xffbf, 0x1001, 0xc, 0x6, 0x0, 0xfffffdfffffffffd], 0x10000, 0x43712}) syz_usb_connect$cdc_ncm(0x0, 0x8d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201500202000008ebd9e02d508c17d2468d2505a1a440000102030109027b0002017b80030904000001020d00000724060001d7a305240006000d240f018687b541fcff06000306241a00105208241c0900087f00042402020a24070f630a07000000072414050006000905810300040204ff0904010000020d00000904010102020d00000905820210000509"], &(0x7f0000000580)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x8, 0x6, 0x0, 0x40, 0x4}, 0x91, &(0x7f0000000280)=ANY=[@ANYBLOB="050f9100040b10010c88000705f207066a10036fe92c34e06e4782ed183a9b49b595cfabea449c72202477e0059c52822edeed3649c322985ba50663df216b98e6363864ba7f01b08b3e2fffde388bc93316c8a8af20b42d422182acb9794761891e9091d8834b38893c7810100acde100000000e181000000000007100202280104"], 0x4, [{0x83, &(0x7f0000000340)=@string={0x83, 0x3, "cc3fd2d58a92da9fd2ae07cd8359c60ce5206e9e6c9ed212454f0e5c59e4361900ec88201e03a58ea6bde1f1bcdc2f106ac8aef836ad75f1665e79df5bf9c631e5d5296e452b07257cabc1abb948afd15327742732b51902ffe1b926b7b53a7a990cbbf8df1ae00badc3cbe876c6f54cf7019f292978cb9986645bdba6358c431a"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4}}, {0xba, &(0x7f0000000440)=@string={0xba, 0x3, "c64ccb092859235403937607bd5274eb9fe2af67e2111e49108e57a5d1b28743319e9672006b9466601a7203db14c9731e45f8462dbef8774d5eef42fa85b1394dc8fb1fc339e91362e5705b1313fe6de432e5dd161b0c8e505d46a821dd411d7bf77bd0723f610991a888046abf5bd1b8d4cf71e9cda87b0e2ae3a335294888487f101c03b3a001775c3994c3a01bb8b28022e4f16dfae9144b60d9a0502d1c93bb20b528d0c951eb9206ea2c55963c2f5e390756a0444b"}}, {0x51, &(0x7f0000000500)=@string={0x51, 0x3, "535620c31f117309070c78db0c528194e073f1b52b267d87e338dbed1dbf7d1c3561c6509f8254cbbde7bc2bdfd6e48de00fde5b39429dcda2a4d346a06f13f60e4b515638e780c2aba0a15cbf5743"}}]}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000c80)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x4, 0xfffffff8, 0x0, 0xff, 0xff}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, &(0x7f0000000600)) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000780)=0x0) capset(&(0x7f0000000000)={0x20080522, r8}, &(0x7f0000000040)={0x4, 0x10ffff, 0xfffffffd}) ioctl$sock_inet_SIOCSARP(r7, 0x8953, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000880)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f00000008c0)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000900)={0x0, 0xdeeb, 0x0, 0x3, 0x363, 0x0, r12}, 0x0, 0x1, &(0x7f0000000980)={0x2e, 0x51, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r9, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) write$cgroup_pid(r12, &(0x7f0000000a00)=r8, 0x12) ioctl$KVM_RUN(r6, 0xae80, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-syz_ublk_setup_queues-socket$netlink-sendmsg$netlink-syz_genetlink_get_family_id$ipvs-mmap$IORING_OFF_CQ_RING-syz_io_uring_setup-ioctl$UBLK_U_CMD_DEL_DEV-syz_io_uring_submit$UBLK-ioctl$KVM_SET_REGS-add_key-ioctl$KVM_SET_VCPU_EVENTS-ioctl$KVM_RUN detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x48800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x28, 0x2a, 0x503, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0xd}, @typed={0x8, 0x110, 0x0, 0x0, @ipv4=@remote}]}]}, 0x28}], 0x1}, 0x14008010) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) r4 = mmap$IORING_OFF_CQ_RING(0x0, 0x3, 0x300000d, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x6a74, &(0x7f00000001c0)={0x0, 0xc41d, 0x8, 0x0, 0x39d}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000003c0)=0x0) ioctl$UBLK_U_CMD_DEL_DEV(0xffffffffffffffff, 0xc0207505, &(0x7f0000000400)={0x0}) syz_io_uring_submit$UBLK(0x0, r4, r5, &(0x7f0000000480)=@ublk_start_user_recovery_sqe={0x2e, 0x2, 0x0, r1, 0xc0207510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {r6}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x100000000000000, 0x2, 0x180, 0x4, 0xcbc, 0xf1, 0x2, 0x0, 0x8002, 0x6, 0xa32, 0xfffffffffffffffd, 0x9, 0x9, 0x9], 0x58000, 0x3c4210}) add_key(0x0, 0x0, &(0x7f0000000380)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a", 0x31, 0xffffffffffffffff) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x3, 0x3, 0x4, 0x6, 0x1, 0xf7, 0x0, 0xfe, 0x0, 0x3, 0x3, 0x6, 0x8, 0x4, 0xfe, '\x00', 0x1, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_secret-ioctl$UFFDIO_REGISTER-openat$kvm-setfsuid-ioctl$KVM_CREATE_VM-write$uinput_user_dev-sendmsg$IPSET_CMD_CREATE-socket$nl_generic-socket$can_bcm-connect$can_bcm-sendmsg$netlink-syz_genetlink_get_family_id$ethtool-sendmsg$ETHTOOL_MSG_DEBUG_SET-ioctl$AUTOFS_IOC_PROTOVER-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_PIT-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN-syz_usb_connect$hid-socket$inet6_udp-sendmsg$inet6-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCSREPORT detailed listing: executing program 0: memfd_secret(0xb268d0c03f4ca9e8) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async, rerun: 32) setfsuid(0xee01) (rerun: 32) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000600)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x0, 0xf, 0xf, 0x8, 0x80, 0x4, 0x3, 0x80000000, 0x20000006, 0x4d, 0x5, 0x5d, 0xa, 0x5, 0xffff2d38, 0xffffff03, 0x6, 0x3, 0x0, 0xe, 0x7, 0x0, 0x7, 0x23c5b, 0x1, 0xf, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x6, 0xdb63, 0x4000008c, 0x6, 0x5, 0x0, 0x4, 0x0, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x6, 0x3, 0x1, 0xf], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x2, 0x9, 0x7f, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x0, 0x312, 0x78, 0xe, 0xfffffffe, 0x6, 0x7, 0x7fff, 0x5, 0x400, 0x401, 0x7, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0x1, 0x4e2, 0x8, 0x4, 0xb, 0x10000, 0x9, 0x8, 0x1009, 0x800, 0x47, 0x8000, 0xc25, 0xfe000000, 0xffff, 0x0, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x94f, 0x48c93690, 0x42, 0x3], [0x82, 0x408, 0x7, 0x5, 0xfffffffe, 0x6, 0x2, 0x9, 0x5, 0x8002, 0x4, 0x5, 0xb, 0x2, 0x5, 0x7, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x2, 0x4, 0x6d01, 0x13, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x3ff, 0x2950bfaf, 0xc8, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x1, 0x7b04, 0x7, 0x3, 0x3, 0x5, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0x0, 0x5, 0x93a, 0x5, 0x2, 0xfffffffc, 0xb9, 0xce7, 0x203, 0x2, 0x57, 0x2, 0x3, 0x0, 0x10000, 0xb8, 0x3, 0x28, 0xa620, 0x2, 0x5, 0x1, 0x7ff, 0x14c, 0x20a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x8, 0x9, 0xfffffff9, 0xfffff000, 0x10000, 0x10001, 0x7e, 0x100, 0x9606, 0x7, 0xaf, 0x5, 0xfffffff9, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xb1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async, rerun: 64) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x800) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) connect$can_bcm(r3, &(0x7f0000000300), 0x10) (async) sendmsg$netlink(r3, &(0x7f0000000340)={&(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdc00, 0x80000}, 0xc, &(0x7f0000000480)=[{&(0x7f00000004c0)=ANY=[], 0x38}], 0x1, 0x0, 0x0, 0x44011}, 0x4000000) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f00000002c0)) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 64) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0xf55, 0xef0, 0x8, 0x1, 0x5, 0xa3, 0x6, 0x7, 0xf, 0x2, 0xf, 0x3, 0x1086}, {0xfff, 0x2, 0x1, 0x8d, 0x55, 0x1d, 0xfe, 0x2, 0x7f, 0x3, 0x33, 0x8, 0x6}, {0x0, 0x401, 0xb, 0xcf, 0xfd, 0x0, 0x1b, 0x6, 0x3, 0xff, 0x7, 0x81, 0x1}], 0x401}) (rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000a52000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000200)="67f2e00d64360fae8197530f00cf64f75dd72e3edb3b0f38f173882e64640f01c5baf80c66b866878a8566efbafc0ced0fc72ff30fc7b30000", 0x39}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x17ef, 0x60a4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x2, 0x12, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x7, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x14, 0xf}}}}}]}}]}}, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r7, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x3c}}}, @hopopts={{0x18, 0x29, 0x36, {0xe44716a42bac69f7}}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x58}, 0x4) (async) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) (async) r8 = syz_open_dev$hiddev(&(0x7f0000000580), 0x0, 0x8041) ioctl$HIDIOCSREPORT(r8, 0x400c4808, &(0x7f00000005c0)={0x3, 0x200, 0x7fff}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-ioctl$TCSETAF-ioctl$TCSETAF-rt_tgsigqueueinfo-socket$packet-openat2-ioctl$TIOCL_SETSEL-ioctl$TIOCL_SETSEL-setsockopt$packet_fanout-setsockopt$packet_fanout-setregid-setregid-openat-openat-openat$fuse-mount$fuse-mount$fuse-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_CPUID-read$FUSE-getpeername-write$FUSE_INIT-syz_fuse_handle_req-openat-openat-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_IRQCHIP-syz_open_procfs-syz_open_procfs-ioctl$FS_IOC_FSSETXATTR-mount$cgroup-fcntl$F_GET_RW_HINT-signalfd-setsockopt$sock_int-setsockopt$sock_int detailed listing: executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000008, 0x10, 0xffffffffffffffff, 0xffffd000) ioctl$TCSETAF(0xffffffffffffffff, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x15, "8241cd032ae9da23"}) (async) ioctl$TCSETAF(0xffffffffffffffff, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x15, "8241cd032ae9da23"}) rt_tgsigqueueinfo(0x0, 0x0, 0x1c, &(0x7f0000000100)={0xfffffffe, 0x4, 0x27}) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat2(0xffffffffffffff9c, &(0x7f0000004600)='./file0\x00', &(0x7f0000004640)={0x101000, 0x140, 0x25}, 0x18) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000046c0)={0x2, {0x2, 0x3, 0x6, 0x5f83, 0x8, 0x4}}) (async) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000046c0)={0x2, {0x2, 0x3, 0x6, 0x5f83, 0x8, 0x4}}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x6}, 0x4) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x6}, 0x4) setregid(0xee01, 0xffffffffffffffff) (async) setregid(0xee01, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2c41, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2c41, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004780), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000047c0)={0x1, 0x0, [{0x80000008, 0xfffffff8, 0x9, 0x2000}]}) read$FUSE(r2, &(0x7f00000003c0)={0x2020, 0x0, 0x0}, 0x2020) getpeername(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000002400)={0x50, 0x0, r6, {0x7, 0x1f, 0x7, 0x408, 0x6, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000002480)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000004480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004540)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004580)='./file0\x00', 0xc01, 0x8) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000004580)='./file0\x00', 0xc01, 0x8) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) syz_open_procfs(0xffffffffffffffff, 0x0) (async) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f00000045c0)={0x0, 0x0, 0x5e1, 0x8c1}) mount$cgroup(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x208900f, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) signalfd(r0, &(0x7f0000000200)={[0x4]}, 0x8) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000080)=0x2, 0x4) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_REGISTER_COALESCED_MMIO-bind$inet-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_CREATE_DEVICE-ioctl$KVM_PRE_FAULT_MEMORY-syz_kvm_setup_cpu$x86-ioctl$KVM_SET_CPUID2-ioctl$KVM_RUN-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_REGISTER_COALESCED_MMIO-bind$inet-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_CREATE_DEVICE-ioctl$KVM_PRE_FAULT_MEMORY-syz_kvm_setup_cpu$x86-ioctl$KVM_SET_CPUID2-ioctl$KVM_RUN detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x1ffc, 0x4000}) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r4, 0xc018aec0, &(0x7f0000000100)={0x1}) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000280)={0x1000, 0x1b000}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000300)={0x2, 0x0, [{0x80000000, 0x9, 0x4, 0xffffff52, 0x362, 0x2, 0x10000}, {0x4, 0x3, 0x4, 0x94, 0x5, 0x7, 0x1ff}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x1ffc, 0x4000}) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) (async) ioctl$KVM_CREATE_DEVICE(r4, 0xc018aec0, &(0x7f0000000100)={0x1}) (async) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000280)={0x1000, 0x1b000}) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000300)={0x2, 0x0, [{0x80000000, 0x9, 0x4, 0xffffff52, 0x362, 0x2, 0x10000}, {0x4, 0x3, 0x4, 0x94, 0x5, 0x7, 0x1ff}]}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setns-socket$inet-setsockopt$inet_opts-connect$inet-ioctl$ifreq_SIOCGIFINDEX_wireguard-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CHECK_EXTENSION_VM-ioctl$sock_inet_tcp_SIOCOUTQ detailed listing: executing program 0: setns(0xc9, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0xe) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000002740)) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$tipc-sendmsg$TIPC_CMD_DISABLE_BEARER-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-writev-fsopen-openat-close-syz_open_dev$tty1-mount$9p_fd-ioctl$KVM_SET_SREGS-ioctl$KVM_SET_MSRS-syz_usb_connect$uac3 detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0065861411d75b0ff08f4ab41e26e283009eac764bbe06458b843b745d2eacdee8aa6dee6d6f3b9deaf58dd70f7a4e107c806de8e37311a193f1d3a4fb7c26546f0083df4479da3101556886158b57780b322e68ea962d734e5b865d5299f7607ebea4a1a0a3e59e9f21b24c70e3946c41d5af40123288d2f36296f09ab2e88eb8c71c1bef3d1e568de6bbe5145b790751c1178c828e9f8917e35eb37154df3ecee38c391fcb4f82bc9cf7819c02ceabd80992b44805eb486fb7a657a4224e38dbba016675", @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf25010000000000000002410000001000136574683a73797a5f74756e00"], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) writev(r4, &(0x7f0000001ac0)=[{&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="f6c76700014f0eaa838b1928c825cb767e523ecd0aaa653b984da23a3883df382c763135f70f44fbf609ba9f22db590fc0183d474db707dffc0023414be00ce85e4d0f5a28ede0bee6dbec3c9048c23ecee5a2643e90839965696ba9c03a9d21ba8532a45cb0bd3d7e0ad12c8ba92ce551130b735af66ffc39dd2f236eb270cba6b2363eaf796657dfd51bdf6906b0376f43bf59c4", 0x95}, {&(0x7f00000019c0)="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", 0xfa}], 0x3) r5 = fsopen(&(0x7f00000000c0)='pipefs\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x40042, 0x1) close(r6) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) (async) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000140)={{0x0, 0x50000, 0x0, 0x9b, 0x1, 0x0, 0x1, 0x1}, {0x0, 0xffff, 0x0, 0x93, 0x1, 0x0, 0x1, 0x1}, {0x0, 0xffff, 0x0, 0x93, 0x1, 0x0, 0x1, 0x1}, {0x0, 0xffff, 0x0, 0x93, 0x1, 0x0, 0x1, 0x1}, {0x0, 0xffff, 0x0, 0x93, 0x1, 0x0, 0x1, 0x1}, {0x0, 0x50000, 0x0, 0x93, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4}, {0x0, 0xffff, 0x0, 0x8b, 0x1, 0x0, 0x1, 0x1}, {0x3000, 0xffff, 0x0, 0x83, 0x1, 0x0, 0x1, 0x1}, {}, {}, 0x20, 0x0, 0x0, 0x30, 0x0, 0x1, 0xfe000000}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000280)={0x2, 0x0, [{0xc0010003, 0x0, 0x800}, {0x6e0, 0x0, 0x1}]}) (async, rerun: 32) syz_usb_connect$uac3(0x5, 0xa4, &(0x7f0000000840)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x9, 0x20, 0xc, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0xf7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x2e, 0x1003}, [@output_terminal={0x13, 0x24, 0x3, 0x3, 0x0, 0x0, 0x6, 0x0, 0x4, 0x8, 0x4, 0xa}, @extension_unit={0x11, 0x24, 0xa, 0x6, 0x2, [0x0, 0x173ea21786b5b7df, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x2b0, 0xa, 0x5, 0xf8, {0xa, 0x25, 0x25, 0x2, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x3, 0x2, 0x21, {0xa, 0x25, 0x25, 0x4, 0x2}}}}}}}}]}}, 0x0) (rerun: 32) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-getsockopt$inet_int-openat$dm_control-openat$kvm-ioctl$KVM_CREATE_VM-syz_kvm_setup_syzos_vm$x86-mkdirat-mkdirat-mkdirat-mount$overlay-openat$dir-getdents64-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$DM_DEV_CREATE-ioctl$DM_TABLE_LOAD detailed listing: executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x21, 0x0, &(0x7f0000000080)) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000740), 0x400, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x60002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xb8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file1\x00', 0x20400, 0x20) getdents64(r4, &(0x7f0000000280)=""/59, 0x3b) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3}) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000780)={0x4, 0x0, 0x0, 0x13c, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}, @uuid={'LVM-syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f00000008c0)={0x4, 0x0, 0x0, 0x1c0, 0x138, 0x1, 0x0, 0x20400, 0x0, 0x0, @by_dev={r5}, [@crypt={0x0, 0x2000, 0x0, 0x88, 'crypt\x00', {'aes:4-xts-plain64', 0x20, @hex16=[0x37, 0x62, 0x62, 0x65, 0x31, 0x64, 0x34, 0x61, 0x30, 0x32, 0x62, 0x39, 0x36, 0x38, 0x30, 0x35, 0x38, 0x33, 0x64, 0x34, 0x64, 0x64, 0x33, 0x30, 0x39, 0x63, 0x39, 0x39, 0x64, 0x65, 0x36, 0x34], 0x20, '0', 0x20, {@ram_num={'1:', 0x1}, 0x20, '8'}, ' 1 high_priority'}}]}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-openat$fuse-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_CAP_HYPERV_SYNIC2-ioctl$KVM_RUN-recvmsg$inet_nvme-syz_usb_connect$cdc_ecm-socketpair$tipc-recvmsg-sendmsg$tipc-sendmsg$inet-prctl$PR_SET_MM-syz_open_procfs-ioctl$KVM_SET_USER_MEMORY_REGION detailed listing: executing program 0: openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f00000003c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvmsg$inet_nvme(0xffffffffffffffff, 0x0, 0x494f3513d8250d4e) syz_usb_connect$cdc_ecm(0x0, 0x57, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090245000101000002090400000402"], 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000080)={&(0x7f00000000c0)=@hci, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r4, &(0x7f0000000300)={0x0, 0x18, &(0x7f0000000340), 0x31}, 0x0) sendmsg$inet(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4000000) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x2000)=nil) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000140)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): write$P9_RREAD-openat$kvm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_CAP_HALT_POLL-ioctl$KVM_CAP_HALT_POLL-socket-sendmsg$inet-syz_kvm_setup_cpu$x86-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VM-openat$cgroup_ro-openat$cgroup_ro-ioctl$FS_IOC_RESVSP-syz_kvm_setup_syzos_vm$x86-ioctl$KVM_SET_USER_MEMORY_REGION-syz_kvm_add_vcpu$x86-ioctl$KVM_RUN-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-mmap detailed listing: executing program 0: write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000300)={0xab, 0x75, 0x1, {0xa0, "76889b6ac1cc465058285d113e42954820ffcf62a1612e3927c4ed567c13c6fa9c81212be805b3d0e78fd0fc9d512eb491d9f5641acde82834c3a81173980520188935b6b50d5bb2845146c1c74cfddff93385be9bdb75f66b7bb7843ba3abfdbf5781472c9add32a3cb079fe3332edbd15109eac1f073370ee024618c4309cc1440a3718a517499395af67323703b1218946eaeb0dc877845d22368c565f079"}}, 0xab) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000000)={0xb6, 0x0, 0xffffffffffffff7b}) (async) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000000)={0xb6, 0x0, 0xffffffffffffff7b}) r3 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @loopback}}}], 0x20}, 0x400c804) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, 0x0}], 0x1, 0x43, 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305839, &(0x7f0000000240)={0x0, 0x2, 0xefff, 0xfa64}) r7 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x10003, 0x0, 0x2000, 0x1000, &(0x7f0000fdb000/0x1000)=nil}) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f00000001c0)={0x0, &(0x7f0000000280)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @wr_drn={0x68, 0x15, {0x4, 0xb}}], 0x50}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000580)={[0x106, 0x4, 0xebf, 0x1000000000002, 0xe, 0x83, 0x44233, 0x4, 0x7f, 0x9, 0x8, 0x1005, 0x9, 0x2000000004000005, 0x4000000, 0x5], 0x0, 0x84342}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000fe9000/0x1000)=nil, 0x1000, 0x3000004, 0x40010, r1, 0xbc66e000) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): read$FUSE-socket$nl_xfrm-prctl$PR_SCHED_CORE-sendmsg$nl_xfrm-mprotect-sendmsg$nl_xfrm-openat$tun-ioctl$TUNGETFEATURES-socket$nl_generic-mknod$loop-mkdir-mkdirat-mount$overlay-rmdir-chdir-mmap-link-syz_genetlink_get_family_id$nl80211-socket$nl_generic-openat$kvm-ioctl$KVM_CREATE_VM-openat$kvm-ioctl$KVM_CREATE_VM-setsockopt$bt_BT_DEFER_SETUP-mkdirat-mount-openat-write-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211 detailed listing: executing program 0: read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x23, 0x0, 0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="040100001600010000"], 0x104}, 0x1, 0x0, 0x0, 0xc1}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000b40)={[], [], 0x2c}) rmdir(&(0x7f00000006c0)='./file2\x00') chdir(&(0x7f0000000700)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) link(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000980), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000a40)='./sys\x00', &(0x7f0000000a80)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r5, &(0x7f0000000b00)='1', 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mount$fuse-ioctl$FUSE_DEV_IOC_BACKING_OPEN-prlimit64-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-poll-syz_clone-openat$kvm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_GET_MSRS_cpu-ioctl$KVM_CREATE_VM-inotify_init-mmap$IORING_OFF_SQ_RING-mkdirat-mount-openat-write-dup2-mprotect-syz_kvm_setup_syzos_vm$x86-ioctl$KVM_RUN detailed listing: executing program 0: r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000700)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x87) (async) mount$fuse(0x0, 0x0, &(0x7f00000007c0), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="1d02004a00"]) (async) ioctl$FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080)={0x0, 0x100}, 0x0) (async) r2 = memfd_create(&(0x7f0000000880)='y\x105\xfb\xf7u\x83%\x1f\xe09@:\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f59\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xaefN\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\x94\xfe\xc59\a\x89.\xe4\x18\xc0!\x18E\xe20\x9d\xf7\x9a6\xf3\xfah\x14\xad\x12d\xd9\x9a\xc9\x03\'\xedF\x98n\x18IW\x17E\x15U\xa9\x01\xbf6=\n\xb3\xe9F\xc9\x92\xc9\xe2xp-k\x9ct\xa9\x9f=\xab\xdeu\x81G\x93\x06?-S\xea\x7f\xe8\x94\xc1g&\xeb\xa8\x19\x00\xfa$(\xfc\x98\xc3\xb5q\x8f\xad\x9d^%\xcfj\x86\x92a:\xae\xb5\x8d\xdf\xc7\x16\x8b\xe0\x92\xccP\xd5\x91\xaa\x89-Id^m]v\xea+\xb0M\xec\xd7\xce\xc6\xda\r\x9a\xdcN\x99*|\xb2\xddX\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00[\x113$\xce1y\xef\xafP`\xe9{m\xef\xac\xe6\xdc\x04\xe7\xc4\xb6\x9e\xec\xe7\a%\xce\xc3\x83\xd3\xf6\xcb\xc4\xf6\xbd\xa2\xbb\xdb\x95', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r1, 0x409, 0x3) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000002c0)={r2, 0x1, 0x1000000, 0x2000}) poll(&(0x7f0000000300)=[{r3, 0x200c}], 0x1, 0x5) syz_clone(0x120400, &(0x7f0000000340)="676afbb0730f37121ece7eab924b26c9710fba119ae72e7691209609c6488ff8e694fa7aed73e32a763140460cfc0ad3bdf7b2f57abd227f590e7d9aacfe2b6113314e418e7cd50446c1c397ba5a7a9c5ed13fb0386e672f4e202ec26987fbcd5df6e3d9e7af2036e6d7dbe87773e1c56edd5f13f9b2d550f0605efacd0337383b6404e6811503361a3091d4840f1484893fccfbf2d1439f039501bd5de4e92c56d67e8a5d092de5c66280baf90a23ccb95cc156ff44df6c7488bbf6e1307bf1ff188f05934aa2ca529254fc09d2a5233806", 0xd2, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="7feb457bc7c5065e4d4fa6a0e237247fd2b6838a12b0f84ac50607f7847928f2eac1ea43d917a93c8b27b2d6f3fa3e3c0d62269dbd4fd648554737979e60264cb5cfa869fc907b1da852e95423b9364c330e79288b16e842da83cb07e0f922313491bbe2be22a39a40d8028aa1815b3322bc53cac2d857eb49") r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f00000001c0)={0x7, 0x0, [{0x368, 0x0, 0x7}, {0x2a, 0x0, 0x200000000000000}, {0xa4f, 0x0, 0xa}, {0x833, 0x0, 0x400}, {0xb66, 0x0, 0x8}, {0x199, 0x0, 0x40005}, {0x3a2, 0x0, 0x2}]}) (async) ioctl$KVM_CREATE_VM(r4, 0xae03, 0xc3) inotify_init() (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x24) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/mtrr\x00', 0x2, 0x0) write(r6, 0x0, 0x50) dup2(0xffffffffffffffff, r3) mprotect(0x0, 0x1000, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) program crashed: INFO: task hung in kvm_swap_active_memslots single: successfully extracted reproducer found reproducer with 30 syscalls minimizing guilty program testing program (duration=5m26.735537484s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mount$fuse-ioctl$FUSE_DEV_IOC_BACKING_OPEN-prlimit64-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-poll-syz_clone-openat$kvm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_GET_MSRS_cpu-ioctl$KVM_CREATE_VM-inotify_init-mmap$IORING_OFF_SQ_RING-mkdirat-mount-openat-write-dup2-mprotect-syz_kvm_setup_syzos_vm$x86 detailed listing: executing program 0: r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000700)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x87) (async) mount$fuse(0x0, 0x0, &(0x7f00000007c0), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="1d02004a00"]) (async) ioctl$FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080)={0x0, 0x100}, 0x0) (async) r2 = memfd_create(&(0x7f0000000880)='y\x105\xfb\xf7u\x83%\x1f\xe09@:\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f59\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xaefN\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\x94\xfe\xc59\a\x89.\xe4\x18\xc0!\x18E\xe20\x9d\xf7\x9a6\xf3\xfah\x14\xad\x12d\xd9\x9a\xc9\x03\'\xedF\x98n\x18IW\x17E\x15U\xa9\x01\xbf6=\n\xb3\xe9F\xc9\x92\xc9\xe2xp-k\x9ct\xa9\x9f=\xab\xdeu\x81G\x93\x06?-S\xea\x7f\xe8\x94\xc1g&\xeb\xa8\x19\x00\xfa$(\xfc\x98\xc3\xb5q\x8f\xad\x9d^%\xcfj\x86\x92a:\xae\xb5\x8d\xdf\xc7\x16\x8b\xe0\x92\xccP\xd5\x91\xaa\x89-Id^m]v\xea+\xb0M\xec\xd7\xce\xc6\xda\r\x9a\xdcN\x99*|\xb2\xddX\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00[\x113$\xce1y\xef\xafP`\xe9{m\xef\xac\xe6\xdc\x04\xe7\xc4\xb6\x9e\xec\xe7\a%\xce\xc3\x83\xd3\xf6\xcb\xc4\xf6\xbd\xa2\xbb\xdb\x95', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r1, 0x409, 0x3) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000002c0)={r2, 0x1, 0x1000000, 0x2000}) poll(&(0x7f0000000300)=[{r3, 0x200c}], 0x1, 0x5) syz_clone(0x120400, &(0x7f0000000340)="676afbb0730f37121ece7eab924b26c9710fba119ae72e7691209609c6488ff8e694fa7aed73e32a763140460cfc0ad3bdf7b2f57abd227f590e7d9aacfe2b6113314e418e7cd50446c1c397ba5a7a9c5ed13fb0386e672f4e202ec26987fbcd5df6e3d9e7af2036e6d7dbe87773e1c56edd5f13f9b2d550f0605efacd0337383b6404e6811503361a3091d4840f1484893fccfbf2d1439f039501bd5de4e92c56d67e8a5d092de5c66280baf90a23ccb95cc156ff44df6c7488bbf6e1307bf1ff188f05934aa2ca529254fc09d2a5233806", 0xd2, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="7feb457bc7c5065e4d4fa6a0e237247fd2b6838a12b0f84ac50607f7847928f2eac1ea43d917a93c8b27b2d6f3fa3e3c0d62269dbd4fd648554737979e60264cb5cfa869fc907b1da852e95423b9364c330e79288b16e842da83cb07e0f922313491bbe2be22a39a40d8028aa1815b3322bc53cac2d857eb49") r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f00000001c0)={0x7, 0x0, [{0x368, 0x0, 0x7}, {0x2a, 0x0, 0x200000000000000}, {0xa4f, 0x0, 0xa}, {0x833, 0x0, 0x400}, {0xb66, 0x0, 0x8}, {0x199, 0x0, 0x40005}, {0x3a2, 0x0, 0x2}]}) (async) ioctl$KVM_CREATE_VM(r4, 0xae03, 0xc3) inotify_init() (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x24) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/mtrr\x00', 0x2, 0x0) write(r6, 0x0, 0x50) dup2(0xffffffffffffffff, r3) mprotect(0x0, 0x1000, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) program crashed: INFO: task hung in kvm_swap_active_memslots testing program (duration=5m26.735537484s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mount$fuse-ioctl$FUSE_DEV_IOC_BACKING_OPEN-prlimit64-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-poll-syz_clone-openat$kvm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_GET_MSRS_cpu-ioctl$KVM_CREATE_VM-inotify_init-mmap$IORING_OFF_SQ_RING-mkdirat-mount-openat-write-dup2-mprotect detailed listing: executing program 0: r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000700)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x87) (async) mount$fuse(0x0, 0x0, &(0x7f00000007c0), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="1d02004a00"]) (async) ioctl$FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080)={0x0, 0x100}, 0x0) (async) r2 = memfd_create(&(0x7f0000000880)='y\x105\xfb\xf7u\x83%\x1f\xe09@:\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f59\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xaefN\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\x94\xfe\xc59\a\x89.\xe4\x18\xc0!\x18E\xe20\x9d\xf7\x9a6\xf3\xfah\x14\xad\x12d\xd9\x9a\xc9\x03\'\xedF\x98n\x18IW\x17E\x15U\xa9\x01\xbf6=\n\xb3\xe9F\xc9\x92\xc9\xe2xp-k\x9ct\xa9\x9f=\xab\xdeu\x81G\x93\x06?-S\xea\x7f\xe8\x94\xc1g&\xeb\xa8\x19\x00\xfa$(\xfc\x98\xc3\xb5q\x8f\xad\x9d^%\xcfj\x86\x92a:\xae\xb5\x8d\xdf\xc7\x16\x8b\xe0\x92\xccP\xd5\x91\xaa\x89-Id^m]v\xea+\xb0M\xec\xd7\xce\xc6\xda\r\x9a\xdcN\x99*|\xb2\xddX\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00[\x113$\xce1y\xef\xafP`\xe9{m\xef\xac\xe6\xdc\x04\xe7\xc4\xb6\x9e\xec\xe7\a%\xce\xc3\x83\xd3\xf6\xcb\xc4\xf6\xbd\xa2\xbb\xdb\x95', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r1, 0x409, 0x3) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000002c0)={r2, 0x1, 0x1000000, 0x2000}) poll(&(0x7f0000000300)=[{r3, 0x200c}], 0x1, 0x5) syz_clone(0x120400, &(0x7f0000000340)="676afbb0730f37121ece7eab924b26c9710fba119ae72e7691209609c6488ff8e694fa7aed73e32a763140460cfc0ad3bdf7b2f57abd227f590e7d9aacfe2b6113314e418e7cd50446c1c397ba5a7a9c5ed13fb0386e672f4e202ec26987fbcd5df6e3d9e7af2036e6d7dbe87773e1c56edd5f13f9b2d550f0605efacd0337383b6404e6811503361a3091d4840f1484893fccfbf2d1439f039501bd5de4e92c56d67e8a5d092de5c66280baf90a23ccb95cc156ff44df6c7488bbf6e1307bf1ff188f05934aa2ca529254fc09d2a5233806", 0xd2, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="7feb457bc7c5065e4d4fa6a0e237247fd2b6838a12b0f84ac50607f7847928f2eac1ea43d917a93c8b27b2d6f3fa3e3c0d62269dbd4fd648554737979e60264cb5cfa869fc907b1da852e95423b9364c330e79288b16e842da83cb07e0f922313491bbe2be22a39a40d8028aa1815b3322bc53cac2d857eb49") r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f00000001c0)={0x7, 0x0, [{0x368, 0x0, 0x7}, {0x2a, 0x0, 0x200000000000000}, {0xa4f, 0x0, 0xa}, {0x833, 0x0, 0x400}, {0xb66, 0x0, 0x8}, {0x199, 0x0, 0x40005}, {0x3a2, 0x0, 0x2}]}) (async) ioctl$KVM_CREATE_VM(r4, 0xae03, 0xc3) inotify_init() (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x24) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/mtrr\x00', 0x2, 0x0) write(r6, 0x0, 0x50) dup2(0xffffffffffffffff, r3) mprotect(0x0, 0x1000, 0x0) program did not crash testing program (duration=5m26.735537484s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mount$fuse-ioctl$FUSE_DEV_IOC_BACKING_OPEN-prlimit64-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-poll-syz_clone-openat$kvm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_GET_MSRS_cpu-ioctl$KVM_CREATE_VM-inotify_init-mmap$IORING_OFF_SQ_RING-mkdirat-mount-openat-write-dup2-syz_kvm_setup_syzos_vm$x86 detailed listing: executing program 0: r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000700)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x87) (async) mount$fuse(0x0, 0x0, &(0x7f00000007c0), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="1d02004a00"]) (async) ioctl$FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080)={0x0, 0x100}, 0x0) (async) r2 = memfd_create(&(0x7f0000000880)='y\x105\xfb\xf7u\x83%\x1f\xe09@:\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f59\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xaefN\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\x94\xfe\xc59\a\x89.\xe4\x18\xc0!\x18E\xe20\x9d\xf7\x9a6\xf3\xfah\x14\xad\x12d\xd9\x9a\xc9\x03\'\xedF\x98n\x18IW\x17E\x15U\xa9\x01\xbf6=\n\xb3\xe9F\xc9\x92\xc9\xe2xp-k\x9ct\xa9\x9f=\xab\xdeu\x81G\x93\x06?-S\xea\x7f\xe8\x94\xc1g&\xeb\xa8\x19\x00\xfa$(\xfc\x98\xc3\xb5q\x8f\xad\x9d^%\xcfj\x86\x92a:\xae\xb5\x8d\xdf\xc7\x16\x8b\xe0\x92\xccP\xd5\x91\xaa\x89-Id^m]v\xea+\xb0M\xec\xd7\xce\xc6\xda\r\x9a\xdcN\x99*|\xb2\xddX\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00[\x113$\xce1y\xef\xafP`\xe9{m\xef\xac\xe6\xdc\x04\xe7\xc4\xb6\x9e\xec\xe7\a%\xce\xc3\x83\xd3\xf6\xcb\xc4\xf6\xbd\xa2\xbb\xdb\x95', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r1, 0x409, 0x3) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000002c0)={r2, 0x1, 0x1000000, 0x2000}) poll(&(0x7f0000000300)=[{r3, 0x200c}], 0x1, 0x5) syz_clone(0x120400, &(0x7f0000000340)="676afbb0730f37121ece7eab924b26c9710fba119ae72e7691209609c6488ff8e694fa7aed73e32a763140460cfc0ad3bdf7b2f57abd227f590e7d9aacfe2b6113314e418e7cd50446c1c397ba5a7a9c5ed13fb0386e672f4e202ec26987fbcd5df6e3d9e7af2036e6d7dbe87773e1c56edd5f13f9b2d550f0605efacd0337383b6404e6811503361a3091d4840f1484893fccfbf2d1439f039501bd5de4e92c56d67e8a5d092de5c66280baf90a23ccb95cc156ff44df6c7488bbf6e1307bf1ff188f05934aa2ca529254fc09d2a5233806", 0xd2, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="7feb457bc7c5065e4d4fa6a0e237247fd2b6838a12b0f84ac50607f7847928f2eac1ea43d917a93c8b27b2d6f3fa3e3c0d62269dbd4fd648554737979e60264cb5cfa869fc907b1da852e95423b9364c330e79288b16e842da83cb07e0f922313491bbe2be22a39a40d8028aa1815b3322bc53cac2d857eb49") r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f00000001c0)={0x7, 0x0, [{0x368, 0x0, 0x7}, {0x2a, 0x0, 0x200000000000000}, {0xa4f, 0x0, 0xa}, {0x833, 0x0, 0x400}, {0xb66, 0x0, 0x8}, {0x199, 0x0, 0x40005}, {0x3a2, 0x0, 0x2}]}) (async) ioctl$KVM_CREATE_VM(r4, 0xae03, 0xc3) inotify_init() (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x24) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/mtrr\x00', 0x2, 0x0) write(r6, 0x0, 0x50) dup2(0xffffffffffffffff, r3) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) program did not crash testing program (duration=5m26.735537484s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mount$fuse-ioctl$FUSE_DEV_IOC_BACKING_OPEN-prlimit64-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-poll-syz_clone-openat$kvm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_GET_MSRS_cpu-ioctl$KVM_CREATE_VM-inotify_init-mmap$IORING_OFF_SQ_RING-mkdirat-mount-openat-write-mprotect-syz_kvm_setup_syzos_vm$x86 detailed listing: executing program 0: r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000700)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x87) (async) mount$fuse(0x0, 0x0, &(0x7f00000007c0), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="1d02004a00"]) (async) ioctl$FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080)={0x0, 0x100}, 0x0) (async) r2 = memfd_create(&(0x7f0000000880)='y\x105\xfb\xf7u\x83%\x1f\xe09@:\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f59\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xaefN\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\x94\xfe\xc59\a\x89.\xe4\x18\xc0!\x18E\xe20\x9d\xf7\x9a6\xf3\xfah\x14\xad\x12d\xd9\x9a\xc9\x03\'\xedF\x98n\x18IW\x17E\x15U\xa9\x01\xbf6=\n\xb3\xe9F\xc9\x92\xc9\xe2xp-k\x9ct\xa9\x9f=\xab\xdeu\x81G\x93\x06?-S\xea\x7f\xe8\x94\xc1g&\xeb\xa8\x19\x00\xfa$(\xfc\x98\xc3\xb5q\x8f\xad\x9d^%\xcfj\x86\x92a:\xae\xb5\x8d\xdf\xc7\x16\x8b\xe0\x92\xccP\xd5\x91\xaa\x89-Id^m]v\xea+\xb0M\xec\xd7\xce\xc6\xda\r\x9a\xdcN\x99*|\xb2\xddX\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00[\x113$\xce1y\xef\xafP`\xe9{m\xef\xac\xe6\xdc\x04\xe7\xc4\xb6\x9e\xec\xe7\a%\xce\xc3\x83\xd3\xf6\xcb\xc4\xf6\xbd\xa2\xbb\xdb\x95', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r1, 0x409, 0x3) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000002c0)={r2, 0x1, 0x1000000, 0x2000}) poll(&(0x7f0000000300)=[{r3, 0x200c}], 0x1, 0x5) syz_clone(0x120400, &(0x7f0000000340)="676afbb0730f37121ece7eab924b26c9710fba119ae72e7691209609c6488ff8e694fa7aed73e32a763140460cfc0ad3bdf7b2f57abd227f590e7d9aacfe2b6113314e418e7cd50446c1c397ba5a7a9c5ed13fb0386e672f4e202ec26987fbcd5df6e3d9e7af2036e6d7dbe87773e1c56edd5f13f9b2d550f0605efacd0337383b6404e6811503361a3091d4840f1484893fccfbf2d1439f039501bd5de4e92c56d67e8a5d092de5c66280baf90a23ccb95cc156ff44df6c7488bbf6e1307bf1ff188f05934aa2ca529254fc09d2a5233806", 0xd2, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="7feb457bc7c5065e4d4fa6a0e237247fd2b6838a12b0f84ac50607f7847928f2eac1ea43d917a93c8b27b2d6f3fa3e3c0d62269dbd4fd648554737979e60264cb5cfa869fc907b1da852e95423b9364c330e79288b16e842da83cb07e0f922313491bbe2be22a39a40d8028aa1815b3322bc53cac2d857eb49") r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f00000001c0)={0x7, 0x0, [{0x368, 0x0, 0x7}, {0x2a, 0x0, 0x200000000000000}, {0xa4f, 0x0, 0xa}, {0x833, 0x0, 0x400}, {0xb66, 0x0, 0x8}, {0x199, 0x0, 0x40005}, {0x3a2, 0x0, 0x2}]}) (async) ioctl$KVM_CREATE_VM(r4, 0xae03, 0xc3) inotify_init() (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x24) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/mtrr\x00', 0x2, 0x0) write(r6, 0x0, 0x50) mprotect(0x0, 0x1000, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) program crashed: INFO: task hung in kvm_swap_active_memslots testing program (duration=5m26.735537484s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mount$fuse-ioctl$FUSE_DEV_IOC_BACKING_OPEN-prlimit64-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-poll-syz_clone-openat$kvm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_GET_MSRS_cpu-ioctl$KVM_CREATE_VM-inotify_init-mmap$IORING_OFF_SQ_RING-mkdirat-mount-openat-mprotect-syz_kvm_setup_syzos_vm$x86 detailed listing: executing program 0: r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000700)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x87) (async) mount$fuse(0x0, 0x0, &(0x7f00000007c0), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="1d02004a00"]) (async) ioctl$FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080)={0x0, 0x100}, 0x0) (async) r2 = memfd_create(&(0x7f0000000880)='y\x105\xfb\xf7u\x83%\x1f\xe09@:\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f59\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xaefN\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\x94\xfe\xc59\a\x89.\xe4\x18\xc0!\x18E\xe20\x9d\xf7\x9a6\xf3\xfah\x14\xad\x12d\xd9\x9a\xc9\x03\'\xedF\x98n\x18IW\x17E\x15U\xa9\x01\xbf6=\n\xb3\xe9F\xc9\x92\xc9\xe2xp-k\x9ct\xa9\x9f=\xab\xdeu\x81G\x93\x06?-S\xea\x7f\xe8\x94\xc1g&\xeb\xa8\x19\x00\xfa$(\xfc\x98\xc3\xb5q\x8f\xad\x9d^%\xcfj\x86\x92a:\xae\xb5\x8d\xdf\xc7\x16\x8b\xe0\x92\xccP\xd5\x91\xaa\x89-Id^m]v\xea+\xb0M\xec\xd7\xce\xc6\xda\r\x9a\xdcN\x99*|\xb2\xddX\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00[\x113$\xce1y\xef\xafP`\xe9{m\xef\xac\xe6\xdc\x04\xe7\xc4\xb6\x9e\xec\xe7\a%\xce\xc3\x83\xd3\xf6\xcb\xc4\xf6\xbd\xa2\xbb\xdb\x95', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r1, 0x409, 0x3) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000002c0)={r2, 0x1, 0x1000000, 0x2000}) poll(&(0x7f0000000300)=[{r3, 0x200c}], 0x1, 0x5) syz_clone(0x120400, &(0x7f0000000340)="676afbb0730f37121ece7eab924b26c9710fba119ae72e7691209609c6488ff8e694fa7aed73e32a763140460cfc0ad3bdf7b2f57abd227f590e7d9aacfe2b6113314e418e7cd50446c1c397ba5a7a9c5ed13fb0386e672f4e202ec26987fbcd5df6e3d9e7af2036e6d7dbe87773e1c56edd5f13f9b2d550f0605efacd0337383b6404e6811503361a3091d4840f1484893fccfbf2d1439f039501bd5de4e92c56d67e8a5d092de5c66280baf90a23ccb95cc156ff44df6c7488bbf6e1307bf1ff188f05934aa2ca529254fc09d2a5233806", 0xd2, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="7feb457bc7c5065e4d4fa6a0e237247fd2b6838a12b0f84ac50607f7847928f2eac1ea43d917a93c8b27b2d6f3fa3e3c0d62269dbd4fd648554737979e60264cb5cfa869fc907b1da852e95423b9364c330e79288b16e842da83cb07e0f922313491bbe2be22a39a40d8028aa1815b3322bc53cac2d857eb49") r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f00000001c0)={0x7, 0x0, [{0x368, 0x0, 0x7}, {0x2a, 0x0, 0x200000000000000}, {0xa4f, 0x0, 0xa}, {0x833, 0x0, 0x400}, {0xb66, 0x0, 0x8}, {0x199, 0x0, 0x40005}, {0x3a2, 0x0, 0x2}]}) (async) ioctl$KVM_CREATE_VM(r4, 0xae03, 0xc3) inotify_init() (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x24) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/mtrr\x00', 0x2, 0x0) mprotect(0x0, 0x1000, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) program crashed: INFO: task hung in kvm_swap_active_memslots testing program (duration=5m26.735537484s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mount$fuse-ioctl$FUSE_DEV_IOC_BACKING_OPEN-prlimit64-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-poll-syz_clone-openat$kvm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_GET_MSRS_cpu-ioctl$KVM_CREATE_VM-inotify_init-mmap$IORING_OFF_SQ_RING-mkdirat-mount-mprotect-syz_kvm_setup_syzos_vm$x86 detailed listing: executing program 0: r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000700)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x87) (async) mount$fuse(0x0, 0x0, &(0x7f00000007c0), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="1d02004a00"]) (async) ioctl$FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080)={0x0, 0x100}, 0x0) (async) r2 = memfd_create(&(0x7f0000000880)='y\x105\xfb\xf7u\x83%\x1f\xe09@:\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f59\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xaefN\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\x94\xfe\xc59\a\x89.\xe4\x18\xc0!\x18E\xe20\x9d\xf7\x9a6\xf3\xfah\x14\xad\x12d\xd9\x9a\xc9\x03\'\xedF\x98n\x18IW\x17E\x15U\xa9\x01\xbf6=\n\xb3\xe9F\xc9\x92\xc9\xe2xp-k\x9ct\xa9\x9f=\xab\xdeu\x81G\x93\x06?-S\xea\x7f\xe8\x94\xc1g&\xeb\xa8\x19\x00\xfa$(\xfc\x98\xc3\xb5q\x8f\xad\x9d^%\xcfj\x86\x92a:\xae\xb5\x8d\xdf\xc7\x16\x8b\xe0\x92\xccP\xd5\x91\xaa\x89-Id^m]v\xea+\xb0M\xec\xd7\xce\xc6\xda\r\x9a\xdcN\x99*|\xb2\xddX\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00[\x113$\xce1y\xef\xafP`\xe9{m\xef\xac\xe6\xdc\x04\xe7\xc4\xb6\x9e\xec\xe7\a%\xce\xc3\x83\xd3\xf6\xcb\xc4\xf6\xbd\xa2\xbb\xdb\x95', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r1, 0x409, 0x3) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000002c0)={r2, 0x1, 0x1000000, 0x2000}) poll(&(0x7f0000000300)=[{r3, 0x200c}], 0x1, 0x5) syz_clone(0x120400, &(0x7f0000000340)="676afbb0730f37121ece7eab924b26c9710fba119ae72e7691209609c6488ff8e694fa7aed73e32a763140460cfc0ad3bdf7b2f57abd227f590e7d9aacfe2b6113314e418e7cd50446c1c397ba5a7a9c5ed13fb0386e672f4e202ec26987fbcd5df6e3d9e7af2036e6d7dbe87773e1c56edd5f13f9b2d550f0605efacd0337383b6404e6811503361a3091d4840f1484893fccfbf2d1439f039501bd5de4e92c56d67e8a5d092de5c66280baf90a23ccb95cc156ff44df6c7488bbf6e1307bf1ff188f05934aa2ca529254fc09d2a5233806", 0xd2, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="7feb457bc7c5065e4d4fa6a0e237247fd2b6838a12b0f84ac50607f7847928f2eac1ea43d917a93c8b27b2d6f3fa3e3c0d62269dbd4fd648554737979e60264cb5cfa869fc907b1da852e95423b9364c330e79288b16e842da83cb07e0f922313491bbe2be22a39a40d8028aa1815b3322bc53cac2d857eb49") r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f00000001c0)={0x7, 0x0, [{0x368, 0x0, 0x7}, {0x2a, 0x0, 0x200000000000000}, {0xa4f, 0x0, 0xa}, {0x833, 0x0, 0x400}, {0xb66, 0x0, 0x8}, {0x199, 0x0, 0x40005}, {0x3a2, 0x0, 0x2}]}) (async) ioctl$KVM_CREATE_VM(r4, 0xae03, 0xc3) inotify_init() (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x24) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) mprotect(0x0, 0x1000, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) program crashed: INFO: task hung in kvm_swap_active_memslots testing program (duration=5m26.735537484s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mount$fuse-ioctl$FUSE_DEV_IOC_BACKING_OPEN-prlimit64-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-poll-syz_clone-openat$kvm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_GET_MSRS_cpu-ioctl$KVM_CREATE_VM-inotify_init-mmap$IORING_OFF_SQ_RING-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 detailed listing: executing program 0: r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000700)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x87) (async) mount$fuse(0x0, 0x0, &(0x7f00000007c0), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="1d02004a00"]) (async) ioctl$FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080)={0x0, 0x100}, 0x0) (async) r2 = memfd_create(&(0x7f0000000880)='y\x105\xfb\xf7u\x83%\x1f\xe09@:\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f59\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xaefN\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\x94\xfe\xc59\a\x89.\xe4\x18\xc0!\x18E\xe20\x9d\xf7\x9a6\xf3\xfah\x14\xad\x12d\xd9\x9a\xc9\x03\'\xedF\x98n\x18IW\x17E\x15U\xa9\x01\xbf6=\n\xb3\xe9F\xc9\x92\xc9\xe2xp-k\x9ct\xa9\x9f=\xab\xdeu\x81G\x93\x06?-S\xea\x7f\xe8\x94\xc1g&\xeb\xa8\x19\x00\xfa$(\xfc\x98\xc3\xb5q\x8f\xad\x9d^%\xcfj\x86\x92a:\xae\xb5\x8d\xdf\xc7\x16\x8b\xe0\x92\xccP\xd5\x91\xaa\x89-Id^m]v\xea+\xb0M\xec\xd7\xce\xc6\xda\r\x9a\xdcN\x99*|\xb2\xddX\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00[\x113$\xce1y\xef\xafP`\xe9{m\xef\xac\xe6\xdc\x04\xe7\xc4\xb6\x9e\xec\xe7\a%\xce\xc3\x83\xd3\xf6\xcb\xc4\xf6\xbd\xa2\xbb\xdb\x95', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r1, 0x409, 0x3) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000002c0)={r2, 0x1, 0x1000000, 0x2000}) poll(&(0x7f0000000300)=[{r3, 0x200c}], 0x1, 0x5) syz_clone(0x120400, &(0x7f0000000340)="676afbb0730f37121ece7eab924b26c9710fba119ae72e7691209609c6488ff8e694fa7aed73e32a763140460cfc0ad3bdf7b2f57abd227f590e7d9aacfe2b6113314e418e7cd50446c1c397ba5a7a9c5ed13fb0386e672f4e202ec26987fbcd5df6e3d9e7af2036e6d7dbe87773e1c56edd5f13f9b2d550f0605efacd0337383b6404e6811503361a3091d4840f1484893fccfbf2d1439f039501bd5de4e92c56d67e8a5d092de5c66280baf90a23ccb95cc156ff44df6c7488bbf6e1307bf1ff188f05934aa2ca529254fc09d2a5233806", 0xd2, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="7feb457bc7c5065e4d4fa6a0e237247fd2b6838a12b0f84ac50607f7847928f2eac1ea43d917a93c8b27b2d6f3fa3e3c0d62269dbd4fd648554737979e60264cb5cfa869fc907b1da852e95423b9364c330e79288b16e842da83cb07e0f922313491bbe2be22a39a40d8028aa1815b3322bc53cac2d857eb49") r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f00000001c0)={0x7, 0x0, [{0x368, 0x0, 0x7}, {0x2a, 0x0, 0x200000000000000}, {0xa4f, 0x0, 0xa}, {0x833, 0x0, 0x400}, {0xb66, 0x0, 0x8}, {0x199, 0x0, 0x40005}, {0x3a2, 0x0, 0x2}]}) (async) ioctl$KVM_CREATE_VM(r4, 0xae03, 0xc3) inotify_init() (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x24) mprotect(0x0, 0x1000, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) program crashed: INFO: task hung in kvm_swap_active_memslots testing program (duration=5m26.735537484s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mount$fuse-ioctl$FUSE_DEV_IOC_BACKING_OPEN-prlimit64-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-poll-syz_clone-openat$kvm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_GET_MSRS_cpu-ioctl$KVM_CREATE_VM-inotify_init-mmap$IORING_OFF_SQ_RING-mprotect-syz_kvm_setup_syzos_vm$x86 detailed listing: executing program 0: r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000700)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x87) (async) mount$fuse(0x0, 0x0, &(0x7f00000007c0), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="1d02004a00"]) (async) ioctl$FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080)={0x0, 0x100}, 0x0) (async) r2 = memfd_create(&(0x7f0000000880)='y\x105\xfb\xf7u\x83%\x1f\xe09@:\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f59\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xaefN\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\x94\xfe\xc59\a\x89.\xe4\x18\xc0!\x18E\xe20\x9d\xf7\x9a6\xf3\xfah\x14\xad\x12d\xd9\x9a\xc9\x03\'\xedF\x98n\x18IW\x17E\x15U\xa9\x01\xbf6=\n\xb3\xe9F\xc9\x92\xc9\xe2xp-k\x9ct\xa9\x9f=\xab\xdeu\x81G\x93\x06?-S\xea\x7f\xe8\x94\xc1g&\xeb\xa8\x19\x00\xfa$(\xfc\x98\xc3\xb5q\x8f\xad\x9d^%\xcfj\x86\x92a:\xae\xb5\x8d\xdf\xc7\x16\x8b\xe0\x92\xccP\xd5\x91\xaa\x89-Id^m]v\xea+\xb0M\xec\xd7\xce\xc6\xda\r\x9a\xdcN\x99*|\xb2\xddX\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00[\x113$\xce1y\xef\xafP`\xe9{m\xef\xac\xe6\xdc\x04\xe7\xc4\xb6\x9e\xec\xe7\a%\xce\xc3\x83\xd3\xf6\xcb\xc4\xf6\xbd\xa2\xbb\xdb\x95', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r1, 0x409, 0x3) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000002c0)={r2, 0x1, 0x1000000, 0x2000}) poll(&(0x7f0000000300)=[{r3, 0x200c}], 0x1, 0x5) syz_clone(0x120400, &(0x7f0000000340)="676afbb0730f37121ece7eab924b26c9710fba119ae72e7691209609c6488ff8e694fa7aed73e32a763140460cfc0ad3bdf7b2f57abd227f590e7d9aacfe2b6113314e418e7cd50446c1c397ba5a7a9c5ed13fb0386e672f4e202ec26987fbcd5df6e3d9e7af2036e6d7dbe87773e1c56edd5f13f9b2d550f0605efacd0337383b6404e6811503361a3091d4840f1484893fccfbf2d1439f039501bd5de4e92c56d67e8a5d092de5c66280baf90a23ccb95cc156ff44df6c7488bbf6e1307bf1ff188f05934aa2ca529254fc09d2a5233806", 0xd2, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="7feb457bc7c5065e4d4fa6a0e237247fd2b6838a12b0f84ac50607f7847928f2eac1ea43d917a93c8b27b2d6f3fa3e3c0d62269dbd4fd648554737979e60264cb5cfa869fc907b1da852e95423b9364c330e79288b16e842da83cb07e0f922313491bbe2be22a39a40d8028aa1815b3322bc53cac2d857eb49") r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f00000001c0)={0x7, 0x0, [{0x368, 0x0, 0x7}, {0x2a, 0x0, 0x200000000000000}, {0xa4f, 0x0, 0xa}, {0x833, 0x0, 0x400}, {0xb66, 0x0, 0x8}, {0x199, 0x0, 0x40005}, {0x3a2, 0x0, 0x2}]}) (async) ioctl$KVM_CREATE_VM(r4, 0xae03, 0xc3) inotify_init() (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mprotect(0x0, 0x1000, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) program crashed: INFO: task hung in kvm_swap_active_memslots suppressed program crash: INFO: task hung in kvm_swap_active_memslots testing program (duration=5m26.735537484s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mount$fuse-ioctl$FUSE_DEV_IOC_BACKING_OPEN-prlimit64-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-poll-syz_clone-openat$kvm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_GET_MSRS_cpu-ioctl$KVM_CREATE_VM-inotify_init-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 detailed listing: executing program 0: r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000700)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x87) (async) mount$fuse(0x0, 0x0, &(0x7f00000007c0), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="1d02004a00"]) (async) ioctl$FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080)={0x0, 0x100}, 0x0) (async) r2 = memfd_create(&(0x7f0000000880)='y\x105\xfb\xf7u\x83%\x1f\xe09@:\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f59\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xaefN\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\x94\xfe\xc59\a\x89.\xe4\x18\xc0!\x18E\xe20\x9d\xf7\x9a6\xf3\xfah\x14\xad\x12d\xd9\x9a\xc9\x03\'\xedF\x98n\x18IW\x17E\x15U\xa9\x01\xbf6=\n\xb3\xe9F\xc9\x92\xc9\xe2xp-k\x9ct\xa9\x9f=\xab\xdeu\x81G\x93\x06?-S\xea\x7f\xe8\x94\xc1g&\xeb\xa8\x19\x00\xfa$(\xfc\x98\xc3\xb5q\x8f\xad\x9d^%\xcfj\x86\x92a:\xae\xb5\x8d\xdf\xc7\x16\x8b\xe0\x92\xccP\xd5\x91\xaa\x89-Id^m]v\xea+\xb0M\xec\xd7\xce\xc6\xda\r\x9a\xdcN\x99*|\xb2\xddX\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00[\x113$\xce1y\xef\xafP`\xe9{m\xef\xac\xe6\xdc\x04\xe7\xc4\xb6\x9e\xec\xe7\a%\xce\xc3\x83\xd3\xf6\xcb\xc4\xf6\xbd\xa2\xbb\xdb\x95', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r1, 0x409, 0x3) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000002c0)={r2, 0x1, 0x1000000, 0x2000}) poll(&(0x7f0000000300)=[{r3, 0x200c}], 0x1, 0x5) syz_clone(0x120400, &(0x7f0000000340)="676afbb0730f37121ece7eab924b26c9710fba119ae72e7691209609c6488ff8e694fa7aed73e32a763140460cfc0ad3bdf7b2f57abd227f590e7d9aacfe2b6113314e418e7cd50446c1c397ba5a7a9c5ed13fb0386e672f4e202ec26987fbcd5df6e3d9e7af2036e6d7dbe87773e1c56edd5f13f9b2d550f0605efacd0337383b6404e6811503361a3091d4840f1484893fccfbf2d1439f039501bd5de4e92c56d67e8a5d092de5c66280baf90a23ccb95cc156ff44df6c7488bbf6e1307bf1ff188f05934aa2ca529254fc09d2a5233806", 0xd2, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="7feb457bc7c5065e4d4fa6a0e237247fd2b6838a12b0f84ac50607f7847928f2eac1ea43d917a93c8b27b2d6f3fa3e3c0d62269dbd4fd648554737979e60264cb5cfa869fc907b1da852e95423b9364c330e79288b16e842da83cb07e0f922313491bbe2be22a39a40d8028aa1815b3322bc53cac2d857eb49") r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f00000001c0)={0x7, 0x0, [{0x368, 0x0, 0x7}, {0x2a, 0x0, 0x200000000000000}, {0xa4f, 0x0, 0xa}, {0x833, 0x0, 0x400}, {0xb66, 0x0, 0x8}, {0x199, 0x0, 0x40005}, {0x3a2, 0x0, 0x2}]}) (async) ioctl$KVM_CREATE_VM(r4, 0xae03, 0xc3) inotify_init() (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x24) mprotect(0x0, 0x1000, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) program crashed: INFO: task hung in kvm_swap_active_memslots testing program (duration=5m26.735537484s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mount$fuse-ioctl$FUSE_DEV_IOC_BACKING_OPEN-prlimit64-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-poll-syz_clone-openat$kvm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_GET_MSRS_cpu-ioctl$KVM_CREATE_VM-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 detailed listing: executing program 0: r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000700)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x87) (async) mount$fuse(0x0, 0x0, &(0x7f00000007c0), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="1d02004a00"]) (async) ioctl$FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080)={0x0, 0x100}, 0x0) (async) r2 = memfd_create(&(0x7f0000000880)='y\x105\xfb\xf7u\x83%\x1f\xe09@:\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f59\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xaefN\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\x94\xfe\xc59\a\x89.\xe4\x18\xc0!\x18E\xe20\x9d\xf7\x9a6\xf3\xfah\x14\xad\x12d\xd9\x9a\xc9\x03\'\xedF\x98n\x18IW\x17E\x15U\xa9\x01\xbf6=\n\xb3\xe9F\xc9\x92\xc9\xe2xp-k\x9ct\xa9\x9f=\xab\xdeu\x81G\x93\x06?-S\xea\x7f\xe8\x94\xc1g&\xeb\xa8\x19\x00\xfa$(\xfc\x98\xc3\xb5q\x8f\xad\x9d^%\xcfj\x86\x92a:\xae\xb5\x8d\xdf\xc7\x16\x8b\xe0\x92\xccP\xd5\x91\xaa\x89-Id^m]v\xea+\xb0M\xec\xd7\xce\xc6\xda\r\x9a\xdcN\x99*|\xb2\xddX\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00[\x113$\xce1y\xef\xafP`\xe9{m\xef\xac\xe6\xdc\x04\xe7\xc4\xb6\x9e\xec\xe7\a%\xce\xc3\x83\xd3\xf6\xcb\xc4\xf6\xbd\xa2\xbb\xdb\x95', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r1, 0x409, 0x3) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000002c0)={r2, 0x1, 0x1000000, 0x2000}) poll(&(0x7f0000000300)=[{r3, 0x200c}], 0x1, 0x5) syz_clone(0x120400, &(0x7f0000000340)="676afbb0730f37121ece7eab924b26c9710fba119ae72e7691209609c6488ff8e694fa7aed73e32a763140460cfc0ad3bdf7b2f57abd227f590e7d9aacfe2b6113314e418e7cd50446c1c397ba5a7a9c5ed13fb0386e672f4e202ec26987fbcd5df6e3d9e7af2036e6d7dbe87773e1c56edd5f13f9b2d550f0605efacd0337383b6404e6811503361a3091d4840f1484893fccfbf2d1439f039501bd5de4e92c56d67e8a5d092de5c66280baf90a23ccb95cc156ff44df6c7488bbf6e1307bf1ff188f05934aa2ca529254fc09d2a5233806", 0xd2, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="7feb457bc7c5065e4d4fa6a0e237247fd2b6838a12b0f84ac50607f7847928f2eac1ea43d917a93c8b27b2d6f3fa3e3c0d62269dbd4fd648554737979e60264cb5cfa869fc907b1da852e95423b9364c330e79288b16e842da83cb07e0f922313491bbe2be22a39a40d8028aa1815b3322bc53cac2d857eb49") r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f00000001c0)={0x7, 0x0, [{0x368, 0x0, 0x7}, {0x2a, 0x0, 0x200000000000000}, {0xa4f, 0x0, 0xa}, {0x833, 0x0, 0x400}, {0xb66, 0x0, 0x8}, {0x199, 0x0, 0x40005}, {0x3a2, 0x0, 0x2}]}) (async) ioctl$KVM_CREATE_VM(r4, 0xae03, 0xc3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x24) mprotect(0x0, 0x1000, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) program crashed: INFO: task hung in kvm_swap_active_memslots testing program (duration=5m26.735537484s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mount$fuse-ioctl$FUSE_DEV_IOC_BACKING_OPEN-prlimit64-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-poll-syz_clone-openat$kvm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_GET_MSRS_cpu-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 detailed listing: executing program 0: r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000700)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x87) (async) mount$fuse(0x0, 0x0, &(0x7f00000007c0), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="1d02004a00"]) (async) ioctl$FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080)={0x0, 0x100}, 0x0) (async) r2 = memfd_create(&(0x7f0000000880)='y\x105\xfb\xf7u\x83%\x1f\xe09@:\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f59\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xaefN\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\x94\xfe\xc59\a\x89.\xe4\x18\xc0!\x18E\xe20\x9d\xf7\x9a6\xf3\xfah\x14\xad\x12d\xd9\x9a\xc9\x03\'\xedF\x98n\x18IW\x17E\x15U\xa9\x01\xbf6=\n\xb3\xe9F\xc9\x92\xc9\xe2xp-k\x9ct\xa9\x9f=\xab\xdeu\x81G\x93\x06?-S\xea\x7f\xe8\x94\xc1g&\xeb\xa8\x19\x00\xfa$(\xfc\x98\xc3\xb5q\x8f\xad\x9d^%\xcfj\x86\x92a:\xae\xb5\x8d\xdf\xc7\x16\x8b\xe0\x92\xccP\xd5\x91\xaa\x89-Id^m]v\xea+\xb0M\xec\xd7\xce\xc6\xda\r\x9a\xdcN\x99*|\xb2\xddX\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00[\x113$\xce1y\xef\xafP`\xe9{m\xef\xac\xe6\xdc\x04\xe7\xc4\xb6\x9e\xec\xe7\a%\xce\xc3\x83\xd3\xf6\xcb\xc4\xf6\xbd\xa2\xbb\xdb\x95', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r1, 0x409, 0x3) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000002c0)={r2, 0x1, 0x1000000, 0x2000}) poll(&(0x7f0000000300)=[{r3, 0x200c}], 0x1, 0x5) syz_clone(0x120400, &(0x7f0000000340)="676afbb0730f37121ece7eab924b26c9710fba119ae72e7691209609c6488ff8e694fa7aed73e32a763140460cfc0ad3bdf7b2f57abd227f590e7d9aacfe2b6113314e418e7cd50446c1c397ba5a7a9c5ed13fb0386e672f4e202ec26987fbcd5df6e3d9e7af2036e6d7dbe87773e1c56edd5f13f9b2d550f0605efacd0337383b6404e6811503361a3091d4840f1484893fccfbf2d1439f039501bd5de4e92c56d67e8a5d092de5c66280baf90a23ccb95cc156ff44df6c7488bbf6e1307bf1ff188f05934aa2ca529254fc09d2a5233806", 0xd2, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="7feb457bc7c5065e4d4fa6a0e237247fd2b6838a12b0f84ac50607f7847928f2eac1ea43d917a93c8b27b2d6f3fa3e3c0d62269dbd4fd648554737979e60264cb5cfa869fc907b1da852e95423b9364c330e79288b16e842da83cb07e0f922313491bbe2be22a39a40d8028aa1815b3322bc53cac2d857eb49") openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f00000001c0)={0x7, 0x0, [{0x368, 0x0, 0x7}, {0x2a, 0x0, 0x200000000000000}, {0xa4f, 0x0, 0xa}, {0x833, 0x0, 0x400}, {0xb66, 0x0, 0x8}, {0x199, 0x0, 0x40005}, {0x3a2, 0x0, 0x2}]}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x24) mprotect(0x0, 0x1000, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) program crashed: INFO: task hung in kvm_swap_active_memslots testing program (duration=5m26.735537484s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mount$fuse-ioctl$FUSE_DEV_IOC_BACKING_OPEN-prlimit64-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-poll-syz_clone-openat$kvm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 detailed listing: executing program 0: r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000700)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x87) (async) mount$fuse(0x0, 0x0, &(0x7f00000007c0), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="1d02004a00"]) (async) ioctl$FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080)={0x0, 0x100}, 0x0) (async) r2 = memfd_create(&(0x7f0000000880)='y\x105\xfb\xf7u\x83%\x1f\xe09@:\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f59\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xaefN\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\x94\xfe\xc59\a\x89.\xe4\x18\xc0!\x18E\xe20\x9d\xf7\x9a6\xf3\xfah\x14\xad\x12d\xd9\x9a\xc9\x03\'\xedF\x98n\x18IW\x17E\x15U\xa9\x01\xbf6=\n\xb3\xe9F\xc9\x92\xc9\xe2xp-k\x9ct\xa9\x9f=\xab\xdeu\x81G\x93\x06?-S\xea\x7f\xe8\x94\xc1g&\xeb\xa8\x19\x00\xfa$(\xfc\x98\xc3\xb5q\x8f\xad\x9d^%\xcfj\x86\x92a:\xae\xb5\x8d\xdf\xc7\x16\x8b\xe0\x92\xccP\xd5\x91\xaa\x89-Id^m]v\xea+\xb0M\xec\xd7\xce\xc6\xda\r\x9a\xdcN\x99*|\xb2\xddX\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00[\x113$\xce1y\xef\xafP`\xe9{m\xef\xac\xe6\xdc\x04\xe7\xc4\xb6\x9e\xec\xe7\a%\xce\xc3\x83\xd3\xf6\xcb\xc4\xf6\xbd\xa2\xbb\xdb\x95', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r1, 0x409, 0x3) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000002c0)={r2, 0x1, 0x1000000, 0x2000}) poll(&(0x7f0000000300)=[{r3, 0x200c}], 0x1, 0x5) syz_clone(0x120400, &(0x7f0000000340)="676afbb0730f37121ece7eab924b26c9710fba119ae72e7691209609c6488ff8e694fa7aed73e32a763140460cfc0ad3bdf7b2f57abd227f590e7d9aacfe2b6113314e418e7cd50446c1c397ba5a7a9c5ed13fb0386e672f4e202ec26987fbcd5df6e3d9e7af2036e6d7dbe87773e1c56edd5f13f9b2d550f0605efacd0337383b6404e6811503361a3091d4840f1484893fccfbf2d1439f039501bd5de4e92c56d67e8a5d092de5c66280baf90a23ccb95cc156ff44df6c7488bbf6e1307bf1ff188f05934aa2ca529254fc09d2a5233806", 0xd2, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="7feb457bc7c5065e4d4fa6a0e237247fd2b6838a12b0f84ac50607f7847928f2eac1ea43d917a93c8b27b2d6f3fa3e3c0d62269dbd4fd648554737979e60264cb5cfa869fc907b1da852e95423b9364c330e79288b16e842da83cb07e0f922313491bbe2be22a39a40d8028aa1815b3322bc53cac2d857eb49") openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x24) mprotect(0x0, 0x1000, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) program crashed: INFO: task hung in kvm_swap_active_memslots testing program (duration=5m26.735537484s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mount$fuse-ioctl$FUSE_DEV_IOC_BACKING_OPEN-prlimit64-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-poll-syz_clone-openat$kvm-openat$kvm-ioctl$KVM_CREATE_VM-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 detailed listing: executing program 0: r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000700)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x87) (async) mount$fuse(0x0, 0x0, &(0x7f00000007c0), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="1d02004a00"]) (async) ioctl$FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080)={0x0, 0x100}, 0x0) (async) r2 = memfd_create(&(0x7f0000000880)='y\x105\xfb\xf7u\x83%\x1f\xe09@:\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f59\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xaefN\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\x94\xfe\xc59\a\x89.\xe4\x18\xc0!\x18E\xe20\x9d\xf7\x9a6\xf3\xfah\x14\xad\x12d\xd9\x9a\xc9\x03\'\xedF\x98n\x18IW\x17E\x15U\xa9\x01\xbf6=\n\xb3\xe9F\xc9\x92\xc9\xe2xp-k\x9ct\xa9\x9f=\xab\xdeu\x81G\x93\x06?-S\xea\x7f\xe8\x94\xc1g&\xeb\xa8\x19\x00\xfa$(\xfc\x98\xc3\xb5q\x8f\xad\x9d^%\xcfj\x86\x92a:\xae\xb5\x8d\xdf\xc7\x16\x8b\xe0\x92\xccP\xd5\x91\xaa\x89-Id^m]v\xea+\xb0M\xec\xd7\xce\xc6\xda\r\x9a\xdcN\x99*|\xb2\xddX\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00[\x113$\xce1y\xef\xafP`\xe9{m\xef\xac\xe6\xdc\x04\xe7\xc4\xb6\x9e\xec\xe7\a%\xce\xc3\x83\xd3\xf6\xcb\xc4\xf6\xbd\xa2\xbb\xdb\x95', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r1, 0x409, 0x3) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000002c0)={r2, 0x1, 0x1000000, 0x2000}) poll(&(0x7f0000000300)=[{r3, 0x200c}], 0x1, 0x5) syz_clone(0x120400, &(0x7f0000000340)="676afbb0730f37121ece7eab924b26c9710fba119ae72e7691209609c6488ff8e694fa7aed73e32a763140460cfc0ad3bdf7b2f57abd227f590e7d9aacfe2b6113314e418e7cd50446c1c397ba5a7a9c5ed13fb0386e672f4e202ec26987fbcd5df6e3d9e7af2036e6d7dbe87773e1c56edd5f13f9b2d550f0605efacd0337383b6404e6811503361a3091d4840f1484893fccfbf2d1439f039501bd5de4e92c56d67e8a5d092de5c66280baf90a23ccb95cc156ff44df6c7488bbf6e1307bf1ff188f05934aa2ca529254fc09d2a5233806", 0xd2, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="7feb457bc7c5065e4d4fa6a0e237247fd2b6838a12b0f84ac50607f7847928f2eac1ea43d917a93c8b27b2d6f3fa3e3c0d62269dbd4fd648554737979e60264cb5cfa869fc907b1da852e95423b9364c330e79288b16e842da83cb07e0f922313491bbe2be22a39a40d8028aa1815b3322bc53cac2d857eb49") openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x24) mprotect(0x0, 0x1000, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) program crashed: INFO: task hung in kvm_swap_active_memslots testing program (duration=5m26.735537484s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mount$fuse-ioctl$FUSE_DEV_IOC_BACKING_OPEN-prlimit64-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-poll-syz_clone-openat$kvm-openat$kvm-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 detailed listing: executing program 0: r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000700)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x87) (async) mount$fuse(0x0, 0x0, &(0x7f00000007c0), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="1d02004a00"]) (async) ioctl$FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080)={0x0, 0x100}, 0x0) (async) r2 = memfd_create(&(0x7f0000000880)='y\x105\xfb\xf7u\x83%\x1f\xe09@:\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f59\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xaefN\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\x94\xfe\xc59\a\x89.\xe4\x18\xc0!\x18E\xe20\x9d\xf7\x9a6\xf3\xfah\x14\xad\x12d\xd9\x9a\xc9\x03\'\xedF\x98n\x18IW\x17E\x15U\xa9\x01\xbf6=\n\xb3\xe9F\xc9\x92\xc9\xe2xp-k\x9ct\xa9\x9f=\xab\xdeu\x81G\x93\x06?-S\xea\x7f\xe8\x94\xc1g&\xeb\xa8\x19\x00\xfa$(\xfc\x98\xc3\xb5q\x8f\xad\x9d^%\xcfj\x86\x92a:\xae\xb5\x8d\xdf\xc7\x16\x8b\xe0\x92\xccP\xd5\x91\xaa\x89-Id^m]v\xea+\xb0M\xec\xd7\xce\xc6\xda\r\x9a\xdcN\x99*|\xb2\xddX\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00[\x113$\xce1y\xef\xafP`\xe9{m\xef\xac\xe6\xdc\x04\xe7\xc4\xb6\x9e\xec\xe7\a%\xce\xc3\x83\xd3\xf6\xcb\xc4\xf6\xbd\xa2\xbb\xdb\x95', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r1, 0x409, 0x3) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000002c0)={r2, 0x1, 0x1000000, 0x2000}) poll(&(0x7f0000000300)=[{r3, 0x200c}], 0x1, 0x5) syz_clone(0x120400, &(0x7f0000000340)="676afbb0730f37121ece7eab924b26c9710fba119ae72e7691209609c6488ff8e694fa7aed73e32a763140460cfc0ad3bdf7b2f57abd227f590e7d9aacfe2b6113314e418e7cd50446c1c397ba5a7a9c5ed13fb0386e672f4e202ec26987fbcd5df6e3d9e7af2036e6d7dbe87773e1c56edd5f13f9b2d550f0605efacd0337383b6404e6811503361a3091d4840f1484893fccfbf2d1439f039501bd5de4e92c56d67e8a5d092de5c66280baf90a23ccb95cc156ff44df6c7488bbf6e1307bf1ff188f05934aa2ca529254fc09d2a5233806", 0xd2, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="7feb457bc7c5065e4d4fa6a0e237247fd2b6838a12b0f84ac50607f7847928f2eac1ea43d917a93c8b27b2d6f3fa3e3c0d62269dbd4fd648554737979e60264cb5cfa869fc907b1da852e95423b9364c330e79288b16e842da83cb07e0f922313491bbe2be22a39a40d8028aa1815b3322bc53cac2d857eb49") openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x24) mprotect(0x0, 0x1000, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) program crashed: INFO: task hung in kvm_swap_active_memslots testing program (duration=5m26.735537484s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mount$fuse-ioctl$FUSE_DEV_IOC_BACKING_OPEN-prlimit64-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-poll-syz_clone-openat$kvm-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 detailed listing: executing program 0: r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000700)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x87) (async) mount$fuse(0x0, 0x0, &(0x7f00000007c0), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="1d02004a00"]) (async) ioctl$FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080)={0x0, 0x100}, 0x0) (async) r2 = memfd_create(&(0x7f0000000880)='y\x105\xfb\xf7u\x83%\x1f\xe09@:\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f59\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xaefN\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\x94\xfe\xc59\a\x89.\xe4\x18\xc0!\x18E\xe20\x9d\xf7\x9a6\xf3\xfah\x14\xad\x12d\xd9\x9a\xc9\x03\'\xedF\x98n\x18IW\x17E\x15U\xa9\x01\xbf6=\n\xb3\xe9F\xc9\x92\xc9\xe2xp-k\x9ct\xa9\x9f=\xab\xdeu\x81G\x93\x06?-S\xea\x7f\xe8\x94\xc1g&\xeb\xa8\x19\x00\xfa$(\xfc\x98\xc3\xb5q\x8f\xad\x9d^%\xcfj\x86\x92a:\xae\xb5\x8d\xdf\xc7\x16\x8b\xe0\x92\xccP\xd5\x91\xaa\x89-Id^m]v\xea+\xb0M\xec\xd7\xce\xc6\xda\r\x9a\xdcN\x99*|\xb2\xddX\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00[\x113$\xce1y\xef\xafP`\xe9{m\xef\xac\xe6\xdc\x04\xe7\xc4\xb6\x9e\xec\xe7\a%\xce\xc3\x83\xd3\xf6\xcb\xc4\xf6\xbd\xa2\xbb\xdb\x95', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r1, 0x409, 0x3) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000002c0)={r2, 0x1, 0x1000000, 0x2000}) poll(&(0x7f0000000300)=[{r3, 0x200c}], 0x1, 0x5) syz_clone(0x120400, &(0x7f0000000340)="676afbb0730f37121ece7eab924b26c9710fba119ae72e7691209609c6488ff8e694fa7aed73e32a763140460cfc0ad3bdf7b2f57abd227f590e7d9aacfe2b6113314e418e7cd50446c1c397ba5a7a9c5ed13fb0386e672f4e202ec26987fbcd5df6e3d9e7af2036e6d7dbe87773e1c56edd5f13f9b2d550f0605efacd0337383b6404e6811503361a3091d4840f1484893fccfbf2d1439f039501bd5de4e92c56d67e8a5d092de5c66280baf90a23ccb95cc156ff44df6c7488bbf6e1307bf1ff188f05934aa2ca529254fc09d2a5233806", 0xd2, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="7feb457bc7c5065e4d4fa6a0e237247fd2b6838a12b0f84ac50607f7847928f2eac1ea43d917a93c8b27b2d6f3fa3e3c0d62269dbd4fd648554737979e60264cb5cfa869fc907b1da852e95423b9364c330e79288b16e842da83cb07e0f922313491bbe2be22a39a40d8028aa1815b3322bc53cac2d857eb49") openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x24) mprotect(0x0, 0x1000, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) program crashed: INFO: task hung in kvm_swap_active_memslots testing program (duration=5m26.735537484s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mount$fuse-ioctl$FUSE_DEV_IOC_BACKING_OPEN-prlimit64-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-poll-syz_clone-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 detailed listing: executing program 0: r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000700)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x87) (async) mount$fuse(0x0, 0x0, &(0x7f00000007c0), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="1d02004a00"]) (async) ioctl$FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080)={0x0, 0x100}, 0x0) (async) r2 = memfd_create(&(0x7f0000000880)='y\x105\xfb\xf7u\x83%\x1f\xe09@:\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f59\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xaefN\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\x94\xfe\xc59\a\x89.\xe4\x18\xc0!\x18E\xe20\x9d\xf7\x9a6\xf3\xfah\x14\xad\x12d\xd9\x9a\xc9\x03\'\xedF\x98n\x18IW\x17E\x15U\xa9\x01\xbf6=\n\xb3\xe9F\xc9\x92\xc9\xe2xp-k\x9ct\xa9\x9f=\xab\xdeu\x81G\x93\x06?-S\xea\x7f\xe8\x94\xc1g&\xeb\xa8\x19\x00\xfa$(\xfc\x98\xc3\xb5q\x8f\xad\x9d^%\xcfj\x86\x92a:\xae\xb5\x8d\xdf\xc7\x16\x8b\xe0\x92\xccP\xd5\x91\xaa\x89-Id^m]v\xea+\xb0M\xec\xd7\xce\xc6\xda\r\x9a\xdcN\x99*|\xb2\xddX\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00[\x113$\xce1y\xef\xafP`\xe9{m\xef\xac\xe6\xdc\x04\xe7\xc4\xb6\x9e\xec\xe7\a%\xce\xc3\x83\xd3\xf6\xcb\xc4\xf6\xbd\xa2\xbb\xdb\x95', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r1, 0x409, 0x3) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000002c0)={r2, 0x1, 0x1000000, 0x2000}) poll(&(0x7f0000000300)=[{r3, 0x200c}], 0x1, 0x5) syz_clone(0x120400, &(0x7f0000000340)="676afbb0730f37121ece7eab924b26c9710fba119ae72e7691209609c6488ff8e694fa7aed73e32a763140460cfc0ad3bdf7b2f57abd227f590e7d9aacfe2b6113314e418e7cd50446c1c397ba5a7a9c5ed13fb0386e672f4e202ec26987fbcd5df6e3d9e7af2036e6d7dbe87773e1c56edd5f13f9b2d550f0605efacd0337383b6404e6811503361a3091d4840f1484893fccfbf2d1439f039501bd5de4e92c56d67e8a5d092de5c66280baf90a23ccb95cc156ff44df6c7488bbf6e1307bf1ff188f05934aa2ca529254fc09d2a5233806", 0xd2, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="7feb457bc7c5065e4d4fa6a0e237247fd2b6838a12b0f84ac50607f7847928f2eac1ea43d917a93c8b27b2d6f3fa3e3c0d62269dbd4fd648554737979e60264cb5cfa869fc907b1da852e95423b9364c330e79288b16e842da83cb07e0f922313491bbe2be22a39a40d8028aa1815b3322bc53cac2d857eb49") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x24) mprotect(0x0, 0x1000, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) program crashed: INFO: task hung in kvm_swap_active_memslots testing program (duration=5m26.735537484s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mount$fuse-ioctl$FUSE_DEV_IOC_BACKING_OPEN-prlimit64-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-poll-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 detailed listing: executing program 0: r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000700)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x87) (async) mount$fuse(0x0, 0x0, &(0x7f00000007c0), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="1d02004a00"]) (async) ioctl$FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080)={0x0, 0x100}, 0x0) (async) r2 = memfd_create(&(0x7f0000000880)='y\x105\xfb\xf7u\x83%\x1f\xe09@:\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f59\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xaefN\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\x94\xfe\xc59\a\x89.\xe4\x18\xc0!\x18E\xe20\x9d\xf7\x9a6\xf3\xfah\x14\xad\x12d\xd9\x9a\xc9\x03\'\xedF\x98n\x18IW\x17E\x15U\xa9\x01\xbf6=\n\xb3\xe9F\xc9\x92\xc9\xe2xp-k\x9ct\xa9\x9f=\xab\xdeu\x81G\x93\x06?-S\xea\x7f\xe8\x94\xc1g&\xeb\xa8\x19\x00\xfa$(\xfc\x98\xc3\xb5q\x8f\xad\x9d^%\xcfj\x86\x92a:\xae\xb5\x8d\xdf\xc7\x16\x8b\xe0\x92\xccP\xd5\x91\xaa\x89-Id^m]v\xea+\xb0M\xec\xd7\xce\xc6\xda\r\x9a\xdcN\x99*|\xb2\xddX\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00[\x113$\xce1y\xef\xafP`\xe9{m\xef\xac\xe6\xdc\x04\xe7\xc4\xb6\x9e\xec\xe7\a%\xce\xc3\x83\xd3\xf6\xcb\xc4\xf6\xbd\xa2\xbb\xdb\x95', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r1, 0x409, 0x3) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000002c0)={r2, 0x1, 0x1000000, 0x2000}) poll(&(0x7f0000000300)=[{r3, 0x200c}], 0x1, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x24) mprotect(0x0, 0x1000, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) program crashed: INFO: task hung in kvm_swap_active_memslots testing program (duration=5m26.735537484s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mount$fuse-ioctl$FUSE_DEV_IOC_BACKING_OPEN-prlimit64-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 detailed listing: executing program 0: r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000700)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x87) (async) mount$fuse(0x0, 0x0, &(0x7f00000007c0), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="1d02004a00"]) (async) ioctl$FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080)={0x0, 0x100}, 0x0) (async) r2 = memfd_create(&(0x7f0000000880)='y\x105\xfb\xf7u\x83%\x1f\xe09@:\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f59\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xaefN\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\x94\xfe\xc59\a\x89.\xe4\x18\xc0!\x18E\xe20\x9d\xf7\x9a6\xf3\xfah\x14\xad\x12d\xd9\x9a\xc9\x03\'\xedF\x98n\x18IW\x17E\x15U\xa9\x01\xbf6=\n\xb3\xe9F\xc9\x92\xc9\xe2xp-k\x9ct\xa9\x9f=\xab\xdeu\x81G\x93\x06?-S\xea\x7f\xe8\x94\xc1g&\xeb\xa8\x19\x00\xfa$(\xfc\x98\xc3\xb5q\x8f\xad\x9d^%\xcfj\x86\x92a:\xae\xb5\x8d\xdf\xc7\x16\x8b\xe0\x92\xccP\xd5\x91\xaa\x89-Id^m]v\xea+\xb0M\xec\xd7\xce\xc6\xda\r\x9a\xdcN\x99*|\xb2\xddX\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00[\x113$\xce1y\xef\xafP`\xe9{m\xef\xac\xe6\xdc\x04\xe7\xc4\xb6\x9e\xec\xe7\a%\xce\xc3\x83\xd3\xf6\xcb\xc4\xf6\xbd\xa2\xbb\xdb\x95', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r1, 0x409, 0x3) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000002c0)={r2, 0x1, 0x1000000, 0x2000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x24) mprotect(0x0, 0x1000, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) program crashed: INFO: task hung in kvm_swap_active_memslots testing program (duration=5m26.735537484s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mount$fuse-ioctl$FUSE_DEV_IOC_BACKING_OPEN-prlimit64-memfd_create-ftruncate-fcntl$addseals-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 detailed listing: executing program 0: r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000700)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x87) (async) mount$fuse(0x0, 0x0, &(0x7f00000007c0), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="1d02004a00"]) (async) ioctl$FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080)={0x0, 0x100}, 0x0) (async) r2 = memfd_create(&(0x7f0000000880)='y\x105\xfb\xf7u\x83%\x1f\xe09@:\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f59\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xaefN\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\x94\xfe\xc59\a\x89.\xe4\x18\xc0!\x18E\xe20\x9d\xf7\x9a6\xf3\xfah\x14\xad\x12d\xd9\x9a\xc9\x03\'\xedF\x98n\x18IW\x17E\x15U\xa9\x01\xbf6=\n\xb3\xe9F\xc9\x92\xc9\xe2xp-k\x9ct\xa9\x9f=\xab\xdeu\x81G\x93\x06?-S\xea\x7f\xe8\x94\xc1g&\xeb\xa8\x19\x00\xfa$(\xfc\x98\xc3\xb5q\x8f\xad\x9d^%\xcfj\x86\x92a:\xae\xb5\x8d\xdf\xc7\x16\x8b\xe0\x92\xccP\xd5\x91\xaa\x89-Id^m]v\xea+\xb0M\xec\xd7\xce\xc6\xda\r\x9a\xdcN\x99*|\xb2\xddX\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00[\x113$\xce1y\xef\xafP`\xe9{m\xef\xac\xe6\xdc\x04\xe7\xc4\xb6\x9e\xec\xe7\a%\xce\xc3\x83\xd3\xf6\xcb\xc4\xf6\xbd\xa2\xbb\xdb\x95', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r1, 0x409, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x24) mprotect(0x0, 0x1000, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) program crashed: INFO: task hung in kvm_swap_active_memslots testing program (duration=5m26.735537484s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mount$fuse-ioctl$FUSE_DEV_IOC_BACKING_OPEN-prlimit64-memfd_create-ftruncate-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 detailed listing: executing program 0: r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000700)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x87) (async) mount$fuse(0x0, 0x0, &(0x7f00000007c0), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="1d02004a00"]) (async) ioctl$FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080)={0x0, 0x100}, 0x0) (async) r2 = memfd_create(&(0x7f0000000880)='y\x105\xfb\xf7u\x83%\x1f\xe09@:\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f59\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xaefN\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\x94\xfe\xc59\a\x89.\xe4\x18\xc0!\x18E\xe20\x9d\xf7\x9a6\xf3\xfah\x14\xad\x12d\xd9\x9a\xc9\x03\'\xedF\x98n\x18IW\x17E\x15U\xa9\x01\xbf6=\n\xb3\xe9F\xc9\x92\xc9\xe2xp-k\x9ct\xa9\x9f=\xab\xdeu\x81G\x93\x06?-S\xea\x7f\xe8\x94\xc1g&\xeb\xa8\x19\x00\xfa$(\xfc\x98\xc3\xb5q\x8f\xad\x9d^%\xcfj\x86\x92a:\xae\xb5\x8d\xdf\xc7\x16\x8b\xe0\x92\xccP\xd5\x91\xaa\x89-Id^m]v\xea+\xb0M\xec\xd7\xce\xc6\xda\r\x9a\xdcN\x99*|\xb2\xddX\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00[\x113$\xce1y\xef\xafP`\xe9{m\xef\xac\xe6\xdc\x04\xe7\xc4\xb6\x9e\xec\xe7\a%\xce\xc3\x83\xd3\xf6\xcb\xc4\xf6\xbd\xa2\xbb\xdb\x95', 0x2) ftruncate(r2, 0xffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x24) mprotect(0x0, 0x1000, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) program crashed: INFO: task hung in kvm_swap_active_memslots testing program (duration=5m26.735537484s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mount$fuse-ioctl$FUSE_DEV_IOC_BACKING_OPEN-prlimit64-memfd_create-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 detailed listing: executing program 0: r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000700)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x87) (async) mount$fuse(0x0, 0x0, &(0x7f00000007c0), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="1d02004a00"]) (async) ioctl$FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080)={0x0, 0x100}, 0x0) (async) memfd_create(&(0x7f0000000880)='y\x105\xfb\xf7u\x83%\x1f\xe09@:\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f59\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xaefN\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\x94\xfe\xc59\a\x89.\xe4\x18\xc0!\x18E\xe20\x9d\xf7\x9a6\xf3\xfah\x14\xad\x12d\xd9\x9a\xc9\x03\'\xedF\x98n\x18IW\x17E\x15U\xa9\x01\xbf6=\n\xb3\xe9F\xc9\x92\xc9\xe2xp-k\x9ct\xa9\x9f=\xab\xdeu\x81G\x93\x06?-S\xea\x7f\xe8\x94\xc1g&\xeb\xa8\x19\x00\xfa$(\xfc\x98\xc3\xb5q\x8f\xad\x9d^%\xcfj\x86\x92a:\xae\xb5\x8d\xdf\xc7\x16\x8b\xe0\x92\xccP\xd5\x91\xaa\x89-Id^m]v\xea+\xb0M\xec\xd7\xce\xc6\xda\r\x9a\xdcN\x99*|\xb2\xddX\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00[\x113$\xce1y\xef\xafP`\xe9{m\xef\xac\xe6\xdc\x04\xe7\xc4\xb6\x9e\xec\xe7\a%\xce\xc3\x83\xd3\xf6\xcb\xc4\xf6\xbd\xa2\xbb\xdb\x95', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x24) mprotect(0x0, 0x1000, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) program crashed: INFO: task hung in kvm_swap_active_memslots testing program (duration=5m26.735537484s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mount$fuse-ioctl$FUSE_DEV_IOC_BACKING_OPEN-prlimit64-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 detailed listing: executing program 0: r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000700)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x87) (async) mount$fuse(0x0, 0x0, &(0x7f00000007c0), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="1d02004a00"]) (async) ioctl$FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080)={0x0, 0x100}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x24) mprotect(0x0, 0x1000, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) program crashed: INFO: task hung in kvm_swap_active_memslots testing program (duration=5m26.735537484s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mount$fuse-ioctl$FUSE_DEV_IOC_BACKING_OPEN-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 detailed listing: executing program 0: r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000700)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x87) (async) mount$fuse(0x0, 0x0, &(0x7f00000007c0), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="1d02004a00"]) (async) ioctl$FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x24) mprotect(0x0, 0x1000, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) program crashed: INFO: task hung in kvm_swap_active_memslots testing program (duration=5m26.735537484s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mount$fuse-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 detailed listing: executing program 0: r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000700)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x87) (async) mount$fuse(0x0, 0x0, &(0x7f00000007c0), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="1d02004a00"]) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x24) mprotect(0x0, 0x1000, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) program crashed: INFO: task hung in kvm_swap_active_memslots testing program (duration=5m26.735537484s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 detailed listing: executing program 0: r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000700)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x87) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x24) mprotect(0x0, 0x1000, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) program crashed: INFO: task hung in kvm_swap_active_memslots testing program (duration=5m26.735537484s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 detailed listing: executing program 0: r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000700)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x24) mprotect(0x0, 0x1000, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) program crashed: INFO: task hung in kvm_swap_active_memslots testing program (duration=5m26.735537484s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 detailed listing: executing program 0: r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x24) mprotect(0x0, 0x1000, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) program did not crash testing program (duration=5m26.735537484s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-syz_ublk_add_dev-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 detailed listing: executing program 0: r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000700)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x24) mprotect(0x0, 0x1000, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) program did not crash testing program (duration=5m26.735537484s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 detailed listing: executing program 0: openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000700)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x24) mprotect(0x0, 0x1000, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) program did not crash testing program (duration=5m26.735537484s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 detailed listing: executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000700)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x24) mprotect(0x0, 0x1000, 0x0) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000c00000/0x400000)=nil) (async) program did not crash testing program (duration=5m26.735537484s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 detailed listing: executing program 0: r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000700)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x24) mprotect(0x0, 0x1000, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) program crashed: INFO: task hung in kvm_swap_active_memslots testing program (duration=5m26.735537484s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 detailed listing: executing program 0: r0 = openat$kvm(0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000700)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x24) mprotect(0x0, 0x1000, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) program did not crash testing program (duration=5m26.735537484s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 detailed listing: executing program 0: r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x24) mprotect(0x0, 0x1000, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) program crashed: INFO: task hung in kvm_swap_active_memslots testing program (duration=5m26.735537484s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 detailed listing: executing program 0: r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x24) mprotect(0x0, 0x1000, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) program crashed: INFO: task hung in kvm_swap_active_memslots testing program (duration=5m26.735537484s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 detailed listing: executing program 0: r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x24) mprotect(0x0, 0x1000, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) program crashed: INFO: task hung in kvm_swap_active_memslots extracting C reproducer testing compiled C program (duration=5m26.735537484s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 program crashed: INFO: task hung in kvm_swap_active_memslots simplifying C reproducer testing compiled C program (duration=5m26.735537484s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 program crashed: INFO: task hung in kvm_swap_active_memslots testing compiled C program (duration=5m26.735537484s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 program crashed: INFO: task hung in kvm_swap_active_memslots testing compiled C program (duration=5m26.735537484s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 program crashed: INFO: task hung in kvm_swap_active_memslots testing compiled C program (duration=5m26.735537484s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 program crashed: INFO: task hung in kvm_swap_active_memslots testing compiled C program (duration=5m26.735537484s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 program crashed: INFO: task hung in kvm_swap_active_memslots testing compiled C program (duration=5m26.735537484s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 program crashed: INFO: task hung in kvm_swap_active_memslots testing program (duration=5m26.735537484s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 detailed listing: executing program 0: r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x24) mprotect(0x0, 0x1000, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) program crashed: INFO: task hung in kvm_swap_active_memslots validation run: crashed=true testing program (duration=5m26.735537484s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 detailed listing: executing program 0: r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x24) mprotect(0x0, 0x1000, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) program crashed: INFO: task hung in kvm_swap_active_memslots validation run: crashed=true testing program (duration=5m26.735537484s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-mkdirat-mprotect-syz_kvm_setup_syzos_vm$x86 detailed listing: executing program 0: r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x24) mprotect(0x0, 0x1000, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) program crashed: INFO: task hung in kvm_swap_active_memslots validation run: crashed=true reproducing took 5h49m25.079864781s repro crashed as (corrupted=false): INFO: task syz.2.17:380 blocked for more than 122 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.17 state:D stack:0 pid:380 tgid:380 ppid:375 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:6068 [inline] __schedule+0x16fe/0x23d0 kernel/sched/core.c:7888 __schedule_loop kernel/sched/core.c:7965 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7980 kvm_swap_active_memslots+0x235/0x450 virt/kvm/kvm_main.c:1622 kvm_activate_memslot virt/kvm/kvm_main.c:1766 [inline] kvm_create_memslot virt/kvm/kvm_main.c:1832 [inline] kvm_set_memslot+0x6b9/0x13a0 virt/kvm/kvm_main.c:1944 __kvm_set_memory_region+0x7f7/0xb40 virt/kvm/kvm_main.c:2098 kvm_set_memory_region+0x2f/0x50 virt/kvm/kvm_main.c:2119 kvm_vm_ioctl_set_memory_region virt/kvm/kvm_main.c:2131 [inline] kvm_vm_ioctl+0xb01/0xc40 virt/kvm/kvm_main.c:5248 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:906 [inline] __se_sys_ioctl+0x126/0x1b0 fs/ioctl.c:892 __x64_sys_ioctl+0x7f/0xa0 fs/ioctl.c:892 x64_sys_call+0x1878/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:17 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7ff279d9f1eb RSP: 002b:00007ffdae69ce30 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff279d9f1eb RDX: 00007ffdae69cef0 RSI: 000000004020ae46 RDI: 0000000000000004 RBP: 00007ff279e56840 R08: 0000000000000000 R09: 0000000000000004 R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000c00000 R13: 0000000000000000 R14: 0000000000000000 R15: 00000000003fa000 NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 Call Trace: __dump_stack+0x21/0x30 lib/dump_stack.c:94 dump_stack_lvl+0x140/0x1c0 lib/dump_stack.c:120 dump_stack+0x19/0x20 lib/dump_stack.c:129 nmi_cpu_backtrace+0x2ba/0x2d0 lib/nmi_backtrace.c:114 nmi_trigger_cpumask_backtrace+0x142/0x2c0 lib/nmi_backtrace.c:63 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:41 cpumask_backtrace+0x1f/0x30 lib/nmi_backtrace.c:127 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:267 [inline] watchdog+0xe45/0xf90 kernel/hung_task.c:423 kthread+0x2c7/0x360 kernel/kthread.c:389 ret_from_fork+0x67/0xa0 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 RIP: 0010:pv_native_safe_halt+0x13/0x20 arch/x86/kernel/paravirt.c:116 Code: cc cc cc cc cc cc cc b8 39 27 01 d6 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 d9 3e 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 RSP: 0018:ffffffff87c07da0 EFLAGS: 000002c2 RAX: ffff8881f6c00000 RBX: ffffffff87c156c0 RCX: ffffffff85a8853d RDX: 0000000000000001 RSI: 0000000000000004 RDI: 00000000000375dc RBP: ffffffff87c07da0 R08: ffff8881f6c396fb R09: 1ffff1103ed872df R10: dffffc0000000000 R11: ffffed103ed872e0 R12: 0000000000000000 R13: 1ffffffff0f82ad8 R14: dffffc0000000000 R15: ffffffff886da7e8 FS: 0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555593e664e8 CR3: 000000010db80000 CR4: 00000000003526b0 Call Trace: arch_safe_halt arch/x86/include/asm/paravirt.h:-1 [inline] default_idle+0x17/0x30 arch/x86/kernel/process.c:754 arch_cpu_idle+0xd/0x20 arch/x86/kernel/process.c:791 default_idle_call+0x3e/0x80 kernel/sched/idle.c:117 cpuidle_idle_call kernel/sched/idle.c:193 [inline] do_idle+0x1df/0x570 kernel/sched/idle.c:346 cpu_startup_entry+0x47/0x60 kernel/sched/idle.c:445 rest_init+0x10b/0x130 init/main.c:760 start_kernel+0x462/0x4bb init/main.c:1242 x86_64_start_reservations+0x2e/0x30 arch/x86/kernel/head64.c:507 x86_64_start_kernel+0x6a/0x7b arch/x86/kernel/head64.c:488 common_startup_64+0x13b/0x157 final repro crashed as (corrupted=false): INFO: task syz.2.17:380 blocked for more than 122 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.17 state:D stack:0 pid:380 tgid:380 ppid:375 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:6068 [inline] __schedule+0x16fe/0x23d0 kernel/sched/core.c:7888 __schedule_loop kernel/sched/core.c:7965 [inline] schedule+0xc5/0x240 kernel/sched/core.c:7980 kvm_swap_active_memslots+0x235/0x450 virt/kvm/kvm_main.c:1622 kvm_activate_memslot virt/kvm/kvm_main.c:1766 [inline] kvm_create_memslot virt/kvm/kvm_main.c:1832 [inline] kvm_set_memslot+0x6b9/0x13a0 virt/kvm/kvm_main.c:1944 __kvm_set_memory_region+0x7f7/0xb40 virt/kvm/kvm_main.c:2098 kvm_set_memory_region+0x2f/0x50 virt/kvm/kvm_main.c:2119 kvm_vm_ioctl_set_memory_region virt/kvm/kvm_main.c:2131 [inline] kvm_vm_ioctl+0xb01/0xc40 virt/kvm/kvm_main.c:5248 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:906 [inline] __se_sys_ioctl+0x126/0x1b0 fs/ioctl.c:892 __x64_sys_ioctl+0x7f/0xa0 fs/ioctl.c:892 x64_sys_call+0x1878/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:17 do_syscall_x64 arch/x86/entry/common.c:47 [inline] do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7ff279d9f1eb RSP: 002b:00007ffdae69ce30 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff279d9f1eb RDX: 00007ffdae69cef0 RSI: 000000004020ae46 RDI: 0000000000000004 RBP: 00007ff279e56840 R08: 0000000000000000 R09: 0000000000000004 R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000c00000 R13: 0000000000000000 R14: 0000000000000000 R15: 00000000003fa000 NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 Call Trace: __dump_stack+0x21/0x30 lib/dump_stack.c:94 dump_stack_lvl+0x140/0x1c0 lib/dump_stack.c:120 dump_stack+0x19/0x20 lib/dump_stack.c:129 nmi_cpu_backtrace+0x2ba/0x2d0 lib/nmi_backtrace.c:114 nmi_trigger_cpumask_backtrace+0x142/0x2c0 lib/nmi_backtrace.c:63 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:41 cpumask_backtrace+0x1f/0x30 lib/nmi_backtrace.c:127 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:267 [inline] watchdog+0xe45/0xf90 kernel/hung_task.c:423 kthread+0x2c7/0x360 kernel/kthread.c:389 ret_from_fork+0x67/0xa0 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 RIP: 0010:pv_native_safe_halt+0x13/0x20 arch/x86/kernel/paravirt.c:116 Code: cc cc cc cc cc cc cc b8 39 27 01 d6 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 d9 3e 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 RSP: 0018:ffffffff87c07da0 EFLAGS: 000002c2 RAX: ffff8881f6c00000 RBX: ffffffff87c156c0 RCX: ffffffff85a8853d RDX: 0000000000000001 RSI: 0000000000000004 RDI: 00000000000375dc RBP: ffffffff87c07da0 R08: ffff8881f6c396fb R09: 1ffff1103ed872df R10: dffffc0000000000 R11: ffffed103ed872e0 R12: 0000000000000000 R13: 1ffffffff0f82ad8 R14: dffffc0000000000 R15: ffffffff886da7e8 FS: 0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555593e664e8 CR3: 000000010db80000 CR4: 00000000003526b0 Call Trace: arch_safe_halt arch/x86/include/asm/paravirt.h:-1 [inline] default_idle+0x17/0x30 arch/x86/kernel/process.c:754 arch_cpu_idle+0xd/0x20 arch/x86/kernel/process.c:791 default_idle_call+0x3e/0x80 kernel/sched/idle.c:117 cpuidle_idle_call kernel/sched/idle.c:193 [inline] do_idle+0x1df/0x570 kernel/sched/idle.c:346 cpu_startup_entry+0x47/0x60 kernel/sched/idle.c:445 rest_init+0x10b/0x130 init/main.c:760 start_kernel+0x462/0x4bb init/main.c:1242 x86_64_start_reservations+0x2e/0x30 arch/x86/kernel/head64.c:507 x86_64_start_kernel+0x6a/0x7b arch/x86/kernel/head64.c:488 common_startup_64+0x13b/0x157