Extracting prog: 39m18.077986426s
Minimizing prog: 1h1m6.756861976s
Simplifying prog options: 4m10.881415575s
Extracting C: 58.828442302s
Simplifying C: 0s


extracting reproducer from 38 programs
testing a last program of every proc
single: executing 8 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-socket$inet6-socket$nl_generic-socket$inet-socket$nl_generic-mmap$IORING_OFF_SQ_RING-sendmsg$inet-socketpair$unix-sendmsg$inet-recvmsg$unix-socketpair$unix-syz_ublk_add_dev-socket$inet6_tcp-dup-syz_ublk_setup_queues
detailed listing:
executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x80001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-syz_open_dev$video4linux-ioctl$BTRFS_IOC_TREE_SEARCH_V2-madvise-prctl$PR_SET_SECCOMP-geteuid-openat-write-close-ioctl$VT_OPENQRY
detailed listing:
executing program 0:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x9, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000000c0)={{0x0, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x4, 0x1, 0x9, 0xb, 0x9, 0x0, 0x2ba6, 0x4, 0x2, 0x9}, 0x10, [0x0, 0x0]})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x7, 0x4, 0x1, 0x50}]})
geteuid()
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='0\n', 0x2)
close(r1)
ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000140))

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-ioctl$ifreq_SIOCGIFINDEX_batadv_mesh-sendto$packet
detailed listing:
executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000000)="114353012008ba000000375186dd", 0xe, 0x24008081, &(0x7f00000000c0)={0x11, 0xe5, r1, 0x1, 0x7, 0x6, @random="0b42e3e24e7e"}, 0x14)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-syz_usb_connect-openat$cgroup_devices-syz_emit_vhci
detailed listing:
executing program 0:
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c0320904000002"], 0x0)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-socket$inet-sendmsg$inet-socketpair$unix-syz_open_procfs-mkdirat-mount-process_madvise-openat-socket$packet-socket$inet6_tcp-socket$igmp6-epoll_create1-socketpair$unix-connect$unix-sendmmsg$unix-epoll_pwait-recvmmsg-socket$nl_route-socket$nl_netfilter-syz_emit_vhci-openat$tun
detailed listing:
executing program 0:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000480), 0x0, &(0x7f0000001780)=[@ip_ttl={{0x14, 0x0, 0x34}}], 0x18}, 0xc8c4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
r1 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00')
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, 0x0, 0x0, 0x225834, 0x0)
process_madvise(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="1df424f55bd7093482c17d4470c405adc8e46b2bf5a1bd973b4cd14067b20448ad0bf758e214f6313a7d5ea2e61f53b2f7d7738e8c1c8168bc1c97774fb377bc812f26aacfd84659564be98d10c9981c728a86f4184659551233db5a4006301b917651e425e6210c340f1acde8fe7b7cbada8538ad847170cb5ec2ff9a484f9328e156b39e6deda77214a69a6c3d1447254d42e727fd2b4f285c237056d2feff34970033395d1150c7951b19a2685b88b65e191bdd3c2f88d39f5c77537a6533", 0xc0}, {&(0x7f0000000280)="383c0a4c67a3c3d47b7fd7517b9a5e618da6a644457f09b39134e0abdc1fce99b9132dfb2afcb7a9de3b8d9d540f50a6d033417463a947c92e7d57aa5d70ccfdcc76af531da35936fef12a9d30e42ebc8a5c41dabb64676568b9cf84c7ccd5cf8b6af41606da45dc37adfa5347603b5c", 0x70}], 0x2, 0x64, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r2 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
epoll_pwait(r2, &(0x7f0000000140), 0x0, 0x2d516fb6, 0x0, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="040504", @ANYRES16=r5], 0x7)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-socket$inet-sendmsg$inet-socketpair$unix-syz_open_procfs-mkdirat-mount-process_madvise-openat-socket$packet-socket$inet6_tcp-socket$igmp6-epoll_create1-socketpair$unix-connect$unix-sendmmsg$unix-epoll_pwait-recvmmsg-socket$nl_route-socket$nl_netfilter-syz_emit_vhci-openat$tun
detailed listing:
executing program 0:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000480), 0x0, &(0x7f0000001780)=[@ip_ttl={{0x14, 0x0, 0x34}}], 0x18}, 0xc8c4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
r1 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00')
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, 0x0, 0x0, 0x225834, 0x0)
process_madvise(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="1df424f55bd7093482c17d4470c405adc8e46b2bf5a1bd973b4cd14067b20448ad0bf758e214f6313a7d5ea2e61f53b2f7d7738e8c1c8168bc1c97774fb377bc812f26aacfd84659564be98d10c9981c728a86f4184659551233db5a4006301b917651e425e6210c340f1acde8fe7b7cbada8538ad847170cb5ec2ff9a484f9328e156b39e6deda77214a69a6c3d1447254d42e727fd2b4f285c237056d2feff34970033395d1150c7951b19a2685b88b65e191bdd3c2f88d39f5c77537a6533", 0xc0}, {&(0x7f0000000280)="383c0a4c67a3c3d47b7fd7517b9a5e618da6a644457f09b39134e0abdc1fce99b9132dfb2afcb7a9de3b8d9d540f50a6d033417463a947c92e7d57aa5d70ccfdcc76af531da35936fef12a9d30e42ebc8a5c41dabb64676568b9cf84c7ccd5cf8b6af41606da45dc37adfa5347603b5c", 0x70}], 0x2, 0x64, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r2 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
epoll_pwait(r2, &(0x7f0000000140), 0x0, 0x2d516fb6, 0x0, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="040504", @ANYRES16=r5], 0x7)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MP_STATE-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-sendmsg$IPSET_CMD_CREATE-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-mount-openat-read$FUSE-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_REGS-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r5, &(0x7f0000000f80)={0x2020}, 0x2020)
read$FUSE(r5, &(0x7f0000009240)={0x2020}, 0x2020)
r6 = dup(r4)
write$cgroup_int(r6, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x100000008, 0x7f, 0x1, 0x0, 0x2, 0xfffffffffffff804, 0x0, 0x0, 0x0, 0x102000000000000, 0x7, 0x2, 0x1, 0x8], 0xeeef0000, 0x4fb40})
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MP_STATE-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-sendmsg$IPSET_CMD_CREATE-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-mount-openat-read$FUSE-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_REGS-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r5, &(0x7f0000000f80)={0x2020}, 0x2020)
read$FUSE(r5, &(0x7f0000009240)={0x2020}, 0x2020)
r6 = dup(r4)
write$cgroup_int(r6, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x100000008, 0x7f, 0x1, 0x0, 0x2, 0xfffffffffffff804, 0x0, 0x0, 0x0, 0x102000000000000, 0x7, 0x2, 0x1, 0x8], 0xeeef0000, 0x4fb40})
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 38 programs with base timeout 30s
testing program (duration=39s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 23, 16, 11, 19, 26, 26, 16, 30, 13, 6, 23, 23, 23, 10, 23, 30, 3, 15, 3, 15, 21, 5, 3, 17, 15, 21, 2, 3, 15, 4, 15, 3, 30, 15, 3, 10, 15]
detailed listing:
executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params]}, 0x28}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{0x18}]}]}, 0x40}}, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r5, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14)
sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)
executing program 1:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000480), 0x0, &(0x7f0000001780)=[@ip_ttl={{0x14, 0x0, 0x34}}], 0x18}, 0xc8c4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
r1 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00')
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, 0x0, 0x0, 0x225834, 0x0)
process_madvise(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="1df424f55bd7093482c17d4470c405adc8e46b2bf5a1bd973b4cd14067b20448ad0bf758e214f6313a7d5ea2e61f53b2f7d7738e8c1c8168bc1c97774fb377bc812f26aacfd84659564be98d10c9981c728a86f4184659551233db5a4006301b917651e425e6210c340f1acde8fe7b7cbada8538ad847170cb5ec2ff9a484f9328e156b39e6deda77214a69a6c3d1447254d42e727fd2b4f285c237056d2feff34970033395d1150c7951b19a2685b88b65e191bdd3c2f88d39f5c77537a6533", 0xc0}, {&(0x7f0000000280)="383c0a4c67a3c3d47b7fd7517b9a5e618da6a644457f09b39134e0abdc1fce99b9132dfb2afcb7a9de3b8d9d540f50a6d033417463a947c92e7d57aa5d70ccfdcc76af531da35936fef12a9d30e42ebc8a5c41dabb64676568b9cf84c7ccd5cf8b6af41606da45dc37adfa5347603b5c", 0x70}], 0x2, 0x64, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r2 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
epoll_pwait(r2, &(0x7f0000000140), 0x0, 0x2d516fb6, 0x0, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRES16=r5], 0x7)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
executing program 1:
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, &(0x7f0000000080))
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r1, &(0x7f0000000540)='dummy_udc.0', 0xb)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000080)=@nfc_llcp, 0x0)
socket$kcm(0x2d, 0x2, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xec}}, 0x0)
executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd700004ddfffb04000000080009"], 0x3c}}, 0x20)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x140, 0x7e}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4014)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)="31795a5bed737a109c592a611e779ebff20aeb34844508048029d4beed78a3c237e69bfaec87d12e6642e399b34d8e2ad0bb734dc01c8b703ce204c618620303bfd79d57c93771a3e6e85e2813bc49a548ad10e1d30bbff23324f94e2c93d28e7c4f517e972683158b883931c76b398728d6240f5af4923fdcc2a334f6f87c89a5ad43a38e2d275b398c5c5d1d59d95f33e28b33ebe4cd3f162e888e8db05f1ec86c409164cd2f", 0xa7)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = syz_clone(0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$pokeuser(0x6, r2, 0x358, 0xffff8880b840e000)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000100081046a81f782db44b904021d080b01000000e8fe55a118001500060014000300001208003c0043000000a8001600a400014020000900feffff7f3626feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8dcef52a9d7c7c0b7a196e6f66312c88a6bbace80177ccbec4c2ee5a7cef4090000001f3c29643a5ee4ce1b14d6d930dfe1d9d322d4acd9b575730d0080000000000000b5675025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee28a0", 0xd8}], 0x1}, 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x0, 0x0, 0x30314142, 0x0, 0x0, [{}, {}, {0xfffffffd}, {}, {}, {}, {}, {0x0, 0x10000000}], 0x0, 0x0, 0x2}})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x2, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x400)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600), 0x4)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x140a, 0x1, 0x70bd27, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x814}, 0x20000000)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe30, 0x0, @empty, 0x80002}, 0x1c)
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r5, &(0x7f0000000f80)={0x2020}, 0x2020)
read$FUSE(r5, &(0x7f0000009240)={0x2020}, 0x2020)
r6 = dup(r4)
write$cgroup_int(r6, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x100000008, 0x7f, 0x1, 0x0, 0x2, 0xfffffffffffff804, 0x0, 0x0, 0x0, 0x102000000000000, 0x7, 0x2, 0x1, 0x8], 0xeeef0000, 0x4fb40})
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 32:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r5, &(0x7f0000000f80)={0x2020}, 0x2020)
read$FUSE(r5, &(0x7f0000009240)={0x2020}, 0x2020)
r6 = dup(r4)
write$cgroup_int(r6, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x100000008, 0x7f, 0x1, 0x0, 0x2, 0xfffffffffffff804, 0x0, 0x0, 0x0, 0x102000000000000, 0x7, 0x2, 0x1, 0x8], 0xeeef0000, 0x4fb40})
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 3:
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, &(0x7f0000000080))
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r1, &(0x7f0000000540)='dummy_udc.0', 0xb)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000080)=@nfc_llcp, 0x0)
socket$kcm(0x2d, 0x2, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xec}}, 0x0)
executing program 3:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xd14]}, 0x8, 0x1000)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x13)
ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, &(0x7f0000000040)={0x4, 0x8c, 0x10001})
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x401)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
getresgid(&(0x7f00000001c0), &(0x7f0000000200)=<r5=>0x0, &(0x7f0000000240))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3, {r4, r5}}, './file0\x00'})
statfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=""/70)
r7 = open(&(0x7f0000000380)='./file0\x00', 0x2, 0x5)
syz_io_uring_setup(0x103d, &(0x7f00000003c0)={0x0, 0xdbfc, 0x20, 0x2, 0xf5}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=<r8=>0x0)
r9 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
ioctl$UBLK_U_CMD_START_DEV(r0, 0xc0207506, &(0x7f0000000540)={0x0, 0xffff, 0x0, 0x0, <r10=>0xffffffffffffffff})
syz_ublk_add_dev(r6, 0x0, 0x0, r8, &(0x7f0000000600)={0x2e, 0x8, 0x0, r9, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000005c0)=@new_dev={0x4, 0xb5c, 0x0, 0x0, 0x1000, 0xffffffff, r10, 0x0, 0x80}}}, &(0x7f0000000680))
write$char_usb(r0, &(0x7f00000006c0)="f24cc0d0eb93f6a175f79885623d8eacdb90ad603f1823a5078fcae7b472c3fed7ec64f022ff35b9b2d3fe7cf20967b5c8c4c85a38292a90769110eaf9c76b13e8f67e125327c48505b9fe9743c17f9f488b7e255306b95565c81f749579fb0126bf0b29d454370d7c077342d7f6842545ccc619aeeb767b0753c42646d2048f7175bbe04f09ed548f3d27ff4f35ad4307a5b7f2ca8c9fd5b37e4efe68a7dedad80c444095baf6557a915448b9a127e78d23984e43be606922b7a81f7d7888de385e3ee35d2784c28386c6aec9365be769377139b4004df72a24196997e6c17edd1a75fc4578", 0xe6)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000007c0)={<r11=>0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x4, 0x9, 0x8001, 0xbae, 0x0, 0x2, 0xe4}, &(0x7f0000000880)=0x9c)
setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000008c0)={r11, 0xc00}, 0x8)
ioctl$sock_ifreq(r7, 0x89b1, &(0x7f0000000940)={'ip6gretap0\x00', @ifru_data=&(0x7f0000000900)="d9c325876a8105e309100c74912aebe799e0e3ffee4c8530492e1f50f8e6dcf0"})
r12 = accept4$tipc(r3, &(0x7f0000000980)=@name, &(0x7f00000009c0)=0x10, 0x80000)
setsockopt$TIPC_DEST_DROPPABLE(r12, 0x10f, 0x81, &(0x7f0000000a00)=0x7, 0x4)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x4)
r13 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000a40), 0x800, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000a80))
sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, 0x3f7, 0x100, 0x70bd26, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24008040}, 0x1)
setpgid(0x0, r10)
getsockopt$MRT6(r7, 0x29, 0xcf, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000c40)={r7, 0x1, {0x0, 0x0, 0x0, 0x7, 0xc, 0x0, 0x9, 0x1, 0x10, "9f4ad032745c7062eb211298ff23aef61a9f57137a07df8b7964195873248963dccd5e23c6abe262d8556c98c1496d98fcbcc104f48d761258eddbc06bb9b290", "7a0f07bbb78bcea53b6408394ac667af585cd02fbb2c2c1ecf2e30fa7c057124b736ec311d0a2f482a90c74ea31783d002ac95190befa1d246ce88736f4bba4d", "91678ad8956b40b7136d062c0ada5e3eec78223d2bbf06f3a673ef454e7bf293", [0x6, 0x7]}})
recvmmsg(r12, &(0x7f00000031c0)=[{{&(0x7f0000000d80)=@ieee802154, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000e00)=""/89, 0x59}, {&(0x7f0000000e80)=""/82, 0x52}, {&(0x7f0000000f00)=""/90, 0x5a}], 0x3, &(0x7f0000000fc0)=""/225, 0xe1}, 0x3}, {{&(0x7f00000010c0)=@can, 0x80, &(0x7f00000022c0)=[{&(0x7f0000001140)=""/191, 0xbf}, {&(0x7f0000001200)=""/44, 0x2c}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/89, 0x59}], 0x4, &(0x7f0000002300)=""/97, 0x61}, 0xfffff645}, {{&(0x7f0000002380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002880)=[{&(0x7f0000002400)=""/7, 0x7}, {&(0x7f0000002440)=""/250, 0xfa}, {&(0x7f0000002540)=""/100, 0x64}, {&(0x7f00000025c0)=""/193, 0xc1}, {&(0x7f00000026c0)=""/49, 0x31}, {&(0x7f0000002700)=""/138, 0x8a}, {&(0x7f00000027c0)=""/146, 0x92}], 0x7, &(0x7f0000002900)=""/200, 0xc8}, 0x8}, {{&(0x7f0000002a00)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000002a80), 0x0, &(0x7f0000002ac0)=""/60, 0x3c}, 0x4}, {{&(0x7f0000002b00)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002b80)=""/201, 0xc9}, {&(0x7f0000002c80)=""/89, 0x59}, {&(0x7f0000002d00)=""/72, 0x48}, {&(0x7f0000002d80)=""/105, 0x69}, {&(0x7f0000002e00)}, {&(0x7f0000002e40)=""/18, 0x12}, {&(0x7f0000002e80)=""/34, 0x22}], 0x7, &(0x7f0000002f40)=""/26, 0x1a}, 0x2}, {{&(0x7f0000002f80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003080)=[{&(0x7f0000003000)=""/39, 0x27}, {&(0x7f0000003040)=""/56, 0x38}], 0x2, &(0x7f00000030c0)=""/250, 0xfa}, 0x8}], 0x6, 0x40010000, &(0x7f0000003340)={0x0, 0x989680})
ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000003380)={0x18, 0x30, 0xfff})
fcntl$setown(r13, 0x8, r10)
executing program 3:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000000), 0x4)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}}}, 0x104)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x5, <r2=>0xffffffffffffffff, 0x1})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"d98b6a3d95e34d3861d5a5dacd78f463", 0x0, <r3=>0x0, {0x4, 0x7}, {0x9e, 0x120fdfa0}, 0x9, [0x3, 0x7fff, 0x4, 0x95, 0xfffffffffffffc01, 0xe, 0x3d7b, 0x7, 0x7, 0x0, 0x1, 0xe465, 0x1, 0x2, 0x2, 0x8]})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001480)={<r4=>0x0, 0x1, 0x8001})
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000480)={{r2}, r3, 0x10, @unused=[0x9, 0x1, 0x2, 0x80000000], @devid=r4})
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1)
executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c)
recvmmsg(r0, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000002, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x64, @mcast2}, 0x1c)
sendto$inet6(r1, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000e000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xfffffffc, 0xc000, 0x800, 0xb4}, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000004300001108000100000000000000000000000087f170c726f1cab80a5a09a946cf8360ed27dcec1105d4379acd619bf96d7c21d4d5a8d81ddb540e77ebd79189a3485f1b8f65caf12e513bb079927599b9d591dcaf8e172924b093e3a74c97d7127986ef07d475"], 0x1c}}, 0x810)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x18410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./upper\x00', 0x1ff)
connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./work\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000340)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00')
lsetxattr$security_ima(&(0x7f0000000000)='./lower/file1\x00', &(0x7f0000000040), &(0x7f0000000500)=ANY=[@ANYBLOB="0413fbd221c22dc51bb0703a911afd4c4b469075dec53d09206f9b13fc30262ef5cbae8cb4e4ceda3e2102997f9a3bd7b8459fe1e776bafa2a084c79c15f05128180235d27aed3826e7909129fd3771b4f6a8f267481fb9d9723b12aea4cfced73641990624b0d2cf8ad9b42b4ce5068f7c2e9a810880a9ea54b213f7ca03cb650db5d557617b73f41cbe25d68d7757a0300000000000000bf1a9f6d91d7a119273d9840f946ad9eb4cac03f3fec98b902ff5a"], 0xc, 0x1)
r1 = socket$rds(0x15, 0x5, 0x0)
close(r1)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000180)={0xb, 0x29, 0x2, {0x67a}}, 0xb)
unlink(&(0x7f0000000240)='./lower/file1\x00')
unlinkat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt/file1\x00', 0x0)
executing program 3:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000480), 0x0, &(0x7f0000001780)=[@ip_ttl={{0x14, 0x0, 0x34}}], 0x18}, 0xc8c4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
r1 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00')
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, 0x0, 0x0, 0x225834, 0x0)
process_madvise(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="1df424f55bd7093482c17d4470c405adc8e46b2bf5a1bd973b4cd14067b20448ad0bf758e214f6313a7d5ea2e61f53b2f7d7738e8c1c8168bc1c97774fb377bc812f26aacfd84659564be98d10c9981c728a86f4184659551233db5a4006301b917651e425e6210c340f1acde8fe7b7cbada8538ad847170cb5ec2ff9a484f9328e156b39e6deda77214a69a6c3d1447254d42e727fd2b4f285c237056d2feff34970033395d1150c7951b19a2685b88b65e191bdd3c2f88d39f5c77537a6533", 0xc0}, {&(0x7f0000000280)="383c0a4c67a3c3d47b7fd7517b9a5e618da6a644457f09b39134e0abdc1fce99b9132dfb2afcb7a9de3b8d9d540f50a6d033417463a947c92e7d57aa5d70ccfdcc76af531da35936fef12a9d30e42ebc8a5c41dabb64676568b9cf84c7ccd5cf8b6af41606da45dc37adfa5347603b5c", 0x70}], 0x2, 0x64, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r2 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
epoll_pwait(r2, &(0x7f0000000140), 0x0, 0x2d516fb6, 0x0, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="040504", @ANYRES16=r5], 0x7)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
executing program 33:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000480), 0x0, &(0x7f0000001780)=[@ip_ttl={{0x14, 0x0, 0x34}}], 0x18}, 0xc8c4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
r1 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00')
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, 0x0, 0x0, 0x225834, 0x0)
process_madvise(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="1df424f55bd7093482c17d4470c405adc8e46b2bf5a1bd973b4cd14067b20448ad0bf758e214f6313a7d5ea2e61f53b2f7d7738e8c1c8168bc1c97774fb377bc812f26aacfd84659564be98d10c9981c728a86f4184659551233db5a4006301b917651e425e6210c340f1acde8fe7b7cbada8538ad847170cb5ec2ff9a484f9328e156b39e6deda77214a69a6c3d1447254d42e727fd2b4f285c237056d2feff34970033395d1150c7951b19a2685b88b65e191bdd3c2f88d39f5c77537a6533", 0xc0}, {&(0x7f0000000280)="383c0a4c67a3c3d47b7fd7517b9a5e618da6a644457f09b39134e0abdc1fce99b9132dfb2afcb7a9de3b8d9d540f50a6d033417463a947c92e7d57aa5d70ccfdcc76af531da35936fef12a9d30e42ebc8a5c41dabb64676568b9cf84c7ccd5cf8b6af41606da45dc37adfa5347603b5c", 0x70}], 0x2, 0x64, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r2 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
epoll_pwait(r2, &(0x7f0000000140), 0x0, 0x2d516fb6, 0x0, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="040504", @ANYRES16=r5], 0x7)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
executing program 2:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100154e108101e041840b4ed010203010902120001000000000904"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x74)
syz_usb_control_io$uac3(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000000)={0x40, 0x5, 0x95, {0x95, 0xe, "c4f9264be007208c19484d59c51225376976327c66e34b72a4197b629831b2bbad5bf90e680ff976e1fc396c6791c2cafc2d558ea76907f66160288a6fdcd3959a1a508359645372fed6df95ddd01d272ef42d00b3b9ccc55c7cb85ba34c7339d3ccdcd032887024c849afd8b702e7380049eb7dccc6356ebb11cf9666ddeae3f8d1264838da4a1d5b4c96c32f7f9612ba16a0"}}, &(0x7f00000000c0)={0x0, 0x3, 0xbd, @string={0xbd, 0x3, "6541b63c84759eb0da67490b89cad783eaa10a9293f34bc67ac2e71c4e94c71484e48491c17db0c70a30dae6dbf3141842f27b02855d5b0c3ddeb9d7537726cb4f89df87151fb2fc4515e4fd8041a2001200e0711ff1cd50ac32871c06877774f1695c1f1425cf2cfe0b03aca4a15d76ec4e8a5b14ff30fcc8469aa4e5f1ea642c70e68b5ee82bce221b1026aa1bc534d56c7814128c3ce5e91e4e91973abcc911a3060daba4ec1e960d1af1c6c24148374d8f5801ae049a1b0098"}}}, &(0x7f0000000440)={0x44, &(0x7f0000000200)={0x40, 0x1, 0x11, "5d62a0fa2079913753b52b206283517f91"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000300)={0x20, 0x81, 0x1, "fc"}, &(0x7f0000000340)={0x20, 0x82, 0x1, 'r'}, &(0x7f0000000380)={0x20, 0x83, 0x2, "8443"}, &(0x7f00000003c0)={0x20, 0x84, 0x2, "e8f7"}, &(0x7f0000000400)={0x20, 0x85, 0x3, "b0afe9"}})
syz_usb_connect$midi(0x2, 0xce, &(0x7f00000004c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x19b5, 0x21, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc, 0x1, 0x1, 0x88, 0x50, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2, [@midi_out_jack={0xd, 0x24, 0x3, 0x0, 0xa, 0x3, [{0x40, 0x6}, {0x4, 0xf1}, {0x4, 0xa}], 0x4}, @ms_header={0x7, 0x24, 0x1, 0x4, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x4d36, 0x7}, @midi_out_jack={0x19, 0x24, 0x3, 0x1, 0xfe, 0x9, [{0x4}, {0xee, 0x5}, {0x1, 0x36}, {0x4, 0x5}, {0x8, 0x5}, {0xd7, 0x40}, {0x5, 0x2}, {0x27}, {0xb}]}], [{{0x9, 0x5, 0x5, 0x8, 0x20, 0x9, 0x7, 0x4, {0xf, 0x25, 0x1, 0xb, "aaa6624ed47d53b454dc35"}}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x1, 0xa2, 0x4, {0x7, 0x25, 0x1, 0x3, "1efe2e"}}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0xc, 0x53, 0x8, {0x5, 0x25, 0x1, 0x1, "fd"}}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x1, 0x3, 0x0, {0x8, 0x25, 0x1, 0x4, "21cb4e84"}}}, {{0x9, 0x5, 0x0, 0x3, 0x440, 0x0, 0x8, 0x1, {0xe, 0x25, 0x1, 0xa, "8b64fd34aa95ebb8d420"}}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x1, 0x3, 0x2, {0xf, 0x25, 0x1, 0xb, "fbfefd6bfc263c680571b6"}}}]}}}}}]}}, 0xfffffffffffffffd)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, &(0x7f0000000a80), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)={0x40, 0x7, 0x2, 0xf7d0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
munmap(&(0x7f000045e000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
setns(0xc9, 0x0)
r1 = socket(0x2a, 0x2, 0x9)
timer_create(0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x891b, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, r2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = epoll_create(0xfff)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000280)={0x40000004})
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000000)={0xa0000006})
mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil)
mremap(&(0x7f0000366000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000d38000/0x1000)=nil)
socket$tipc(0x1e, 0x2, 0x0)
ioctl$KVM_GET_XSAVE2(r0, 0x9000aecf, &(0x7f00001a3000/0x1000)=nil)
executing program 2:
r0 = syz_usb_connect(0x3, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904", @ANYRES8=0x0], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
ptrace(0x10, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12011100b2074410ca160215901d01025bd109021b00010508200009048e0701cfbde009090501164061b23d6cb538113f0007030f"], 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="e504000011f401ea2ea5e57588ac65d23100000b000000"], 0x14}}, 0x4010)
socket$phonet_pipe(0x23, 0x5, 0x2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x8042, 0x85)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000300000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0)
read$FUSE(r4, &(0x7f0000006340)={0x2020, 0x0, <r5=>0x0, 0x0, <r6=>0x0}, 0x2020)
syz_fuse_handle_req(r4, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x130, 0x0, 0x6, {0x6, 0x6, 0x0, '\x00', {0x6fff, 0xad7, 0xf, 0x20000005, 0x0, r6, 0x8000, '\x00', 0xff7fffffffffffff, 0x7fffffff, 0xdd, 0x5, {0x73c0, 0x660}, {0x8, 0x29}, {0x209, 0x200007b1}, {0x5, 0x5710}, 0x8006, 0x6, 0x7, 0x80000000}}}})
write$FUSE_INIT(r4, &(0x7f0000001200)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x120a1101, 0x6, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8}}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/lo/dev_port\x00', 0x0, 0x0)
read(r7, &(0x7f0000000140)=""/64, 0x40)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0x5, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r3, &(0x7f0000000240)={@val={0x4000, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x10, 0x4, 0x3, 0x2, 0xf6c, 0x68, 0x2f, 0x5, 0x2e, 0x1, @remote, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x2c, 0xaf, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@broadcast, 0x7ff}, {@empty}, {@multicast1, 0x3}, {@private=0xa010102, 0x5}]}]}}}}}, 0x6a)
r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
getsockopt$PNPIPE_HANDLE(r9, 0x113, 0x3, 0x0, &(0x7f0000005280))
r10 = syz_usb_connect$hid(0xe4679acba61bf187, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x79, 0x1846, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x82, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x5, 0x7f, 0x1, {0x22, 0xaa}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfb, 0x4, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x38, 0x1, 0x5}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0xb, 0x9, 0x41, 0x10, 0x1}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0xc0, 0x7, 0x0, 0x1, 0xf9}]}, 0x8, [{0x5d, &(0x7f0000000200)=ANY=[@ANYBLOB="5d031452841e78b725ddb6c9b3326c3a58bbbcde5158f9860f563e433687a04454863e630ede969cdb409cdbdfcb5710956054f255b4b405d97a9cbf6fd6d4f9765cbf5a75975b6c47ea9adf1c5ff229d86e00647ce95edb0821ed4ab1"]}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x420}}, {0xc3, &(0x7f0000000600)=@string={0xc3, 0x3, "d412448e2700b78111defe0d607989054f27c6c1fc687dabe0be4f8c1aa09ff85abad8dbf40060f0fe54e662ecfa7fba592a011622c648b83d13dd45b256b2aa4b44bd1c8eacd834eb625b3e78dce6b897ddacec512aad3da39843572b64e2b9270b367d21a4f9cd1bbe20c6038258979b773044de9406a2d3154b4ab54a12fcb9a4cf41a70e36873a1f79f2c23f3ff405a1170dc2ab58670c485f78cbae0344982d6a2a4f6ebeda4b1ec4a1439def6f2c9f0a6cbe817f04b5b87622c225489174"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f00000003c0)=@lang_id={0x33, 0x3, 0x437}}]})
syz_usb_control_io$hid(r10, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
uname(&(0x7f0000000040)=""/123)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000000)="114353012008ba000000375186dd", 0xe, 0x24008081, &(0x7f00000000c0)={0x11, 0xe5, r1, 0x1, 0x7, 0x6, @random="0b42e3e24e7e"}, 0x14)
executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x80001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)
executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000000)="114353012008ba000000375186dd", 0xe, 0x24008081, &(0x7f00000000c0)={0x11, 0xe5, r1, 0x1, 0x7, 0x6, @random="0b42e3e24e7e"}, 0x14)
executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x80001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)
executing program 2:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='10000', 0x5)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3e, &(0x7f0000001000)=0x1, 0x4)
write(r2, &(0x7f0000000040)="a9", 0x1)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0xf)
r3 = fcntl$dupfd(r1, 0x0, r1)
pipe(0x0)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r4, r4)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000080)={0x4, 0x4}, 0x2)
write(r5, 0x0, 0x0)
lstat(0x0, 0x0)
statfs(0x0, 0x0)
read$dsp(r3, 0x0, 0x0)
executing program 0:
request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000340)='\\\\@}\x01\x00\x00@\xf5\xe2\xdb\x92\x12\x86B\xb1\xef\xef\xa5\xd5E\xc0\xf2\xaa\xe6\x00\x00\x00\x00\xf0\xff\xff\xcf\xa1B\x80\xd3\xcc\x06D\aN\x83+\xc2\xba\xdc\x88\xe3F\x00\xb0\xe7h\xd4\x82EKi/XA\x94\xaf\xa9\x13o\xf6\x1c,8\xd2X\xc4\x14\x05\xb8\x85\xe7B_Z\xab\xba\x87\x91S\x03EE|\x99\xdd\x0f\xc8R?g\x01#v+!\xeay\xcc7M\xf9Sf\xa6%\xf3\\\x9b\xf9\x96\x03{\x13\xa19\xc3K4\x8a\xfb\xe8&+j\x13\xce\xf9&O\xb7p\xf2O\xd8\xea', 0xfffffffffffffffe)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000002980)={0x2020}, 0x15be)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3b}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0xffffffffffffffff, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xa, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000000)="114353012008ba000000375186dd", 0xe, 0x24008081, &(0x7f00000000c0)={0x11, 0xe5, r1, 0x1, 0x7, 0x6, @random="0b42e3e24e7e"}, 0x14)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000140)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90b, 0x9, '\x00', @string=&(0x7f0000000300)=0xff}})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
futimesat(r0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0xea60}})
chroot(&(0x7f0000000180)='./file1/file0\x00')
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd)
r3 = dup(r1)
write$6lowpan_enable(r3, &(0x7f0000000200)='0', 0xff28)
ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000180))
chdir(&(0x7f00000001c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x80001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)
executing program 0:
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x8000)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x40, 0x4)
socket$nl_rdma(0x10, 0x3, 0x14)
fanotify_init(0x20, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r4 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000002c0))
fcntl$setstatus(r3, 0x4, 0x2400)
write$P9_RMKDIR(r3, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x8, 0x1, 0x1}}, 0x14)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYRES64=r3, @ANYRES16=r3, @ANYRESHEX=r3], 0x8)
syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x3f9}, {0x4, [{@none, 0xc, 0x4, "39b0cc", 0xff, 0x5, "e900e7af785f596482a367dbf0130ba9c37dbcbf7883bacee849708b2ae77935599d8f65c95ae46465331ee6f93f441553349527b388bacb95fa9ffd1f6b0191868fac6b449c898079205fb66e269dfba504afada8bbbeec8a1948f2d2618d21d4de0878e83dbfc9defd6ccb8d147d2a3f99b0de5d02c3ed49ccb951e24bb44a911aa3483ae23a0557cf8cf350651efad36c1e1f47fafca19adb848102aba994172fbebe4746b21bc5a0fc0fc4c8986821e2e1c99e754d1ff85560239d95d2a06492f0b3bbf4a53ebbac13ba284a16d015464bc1ac4152e1a42d11c59c035699d8ab42d77feefe210027e7acaf5a08d8"}, {@none, 0xc, 0x9, "059c39", 0x800, 0xf7, "3a295170073baa5cf61fd123b6bb9d8ddc1cce8a873a5387bfa38886ebd1db47ab30472819859a6ea0717a4f728e943e0c888fe0379080729668255fd750d7ef82adbadb0d6667dd5bca6a187eaf5f0155f5ea88be067ec0883d65892ad1540a68b8671c00a17b6839cfc0579079bf91c751fc97f705dd9b2089a44e704f318db7ae36beb02c70501a59595b695df6b12840c5b99e30178e077b845ce3290572047aa61eb3e6db6bdf272f51fd17658fdce8446c90e4911153f22087540267414a9089ed9766eda94c5e0d7d1185b0543a5898a253a1b4a5de2ff303dba5de0971bef8ef51dce1ee52b4db10c2b5809e"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5, 0x2, "48aead", 0x8, 0x9, "ab1b87daf610b92a70643bdb4d0d05704ff6987bed72c7d882d19d6c264f527ae6c746ea85fb53a93c7a1db924c0ceefd9cb60a93608a49509380e93b097c1f06a5c323a66caea81c3a55b2c8958237e11b5630b78d5670af8c98f70a407aea7f71e3076e505e19b58b5b997d48e13c65c79b01fb1d17296bf87c4b971e0b81d631a7a5a3aadea707a10c88207599cb5d7ee6d755d1da2a7506e56bd714ada510df38e5c72afba684cf2bc667a41a4298cc7a16f53d2dbdd0d4302d2094df85cedd8c4cfd26c4479d8515ee2308083c15978df9d4f424e8062b1f5ae8539f6382f7c403504f8a68e4fc39fd85b1da180"}, {@none, 0x7, 0xb1, "bbe752", 0x0, 0x2, "fe6cc8c82cd7b5e63c36013f32e7e6b1b2277586790f72efbf2f80f774fe33f32531c97913f355e4b1341acdb42a5d071c640519c0a1ea693e273fc32158d1ea42da646de5c3c10952e75b16c917353f4d9c3d9e5f00950a937fb4614cecb3deee2037b61153a55315a728482c139b9b563db0409f2467dbbb1f5e1591616365d73f27e0c21808b4db938e77e208ae91a060ac74f31da5e00dd99828117cb293b829f32fd8dbe98a28a38235260c08f52523bea74ceff365825bb451039604a793ab89f14022869dd234babbd9e1a8c386121610b5dd4aca04bf941eb4f73d70de4e3026116fd8cdbea1c1b73deafa8a"}]}}}, 0x3fc)
executing program 2:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
write(r0, &(0x7f0000000200)="580000001500010300000000000000001e000000ffffffff00"/88, 0x58)
executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000000)="114353012008ba000000375186dd", 0xe, 0x24008081, &(0x7f00000000c0)={0x11, 0xe5, r1, 0x1, 0x7, 0x6, @random="0b42e3e24e7e"}, 0x14)
executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x80001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)
executing program 2:
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c0320904000002"], 0x0)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8)
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
listen(r1, 0x214)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000030c0001800800014000000004440000000e0a01010000000000000000020000000900020073797a31000000000900010073797a30000000001800038014000080100001800c0001"], 0xf0}, 0x1, 0x0, 0x0, 0x40084}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002d00070105000000ffdbdf25097c0000080001800400060004000280"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r4)
sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r6, 0x800, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x44041)
executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000000)="114353012008ba000000375186dd", 0xe, 0x24008081, &(0x7f00000000c0)={0x11, 0xe5, r1, 0x1, 0x7, 0x6, @random="0b42e3e24e7e"}, 0x14)
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0xcd, 0x4)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @empty}, 0x4b)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000000000008001240000000000500050002000000050004000000000016000300686173683a6e65742c706f72742c6e6574", @ANYRES64=r0, @ANYRESHEX=r1, @ANYRES8=r1], 0x64}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
listen(r2, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0xa8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6, 0x1}, 0xe)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040eec070d04"], 0xd)
writev(0xffffffffffffffff, &(0x7f0000000800)=[{0x0}, {0x0}], 0x2)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x7, 0x0, @loopback, 0x8}, 0x20)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x300, 0x4, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1]})
r5 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r5, &(0x7f0000000040)={0xa, 0x7, 0x5464, @loopback, 0x800, 0x400000}, 0x20)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10)
r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$llc_int(r7, 0x10c, 0x2, &(0x7f0000000000)=0xffff23e9, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x82001, 0x0)
executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x80001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)
executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000000)="114353012008ba000000375186dd", 0xe, 0x24008081, &(0x7f00000000c0)={0x11, 0xe5, r1, 0x1, 0x7, 0x6, @random="0b42e3e24e7e"}, 0x14)
executing program 0:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x9, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000000c0)={{0x0, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x4, 0x1, 0x9, 0xb, 0x9, 0x0, 0x2ba6, 0x4, 0x2, 0x9}, 0x10, [0x0, 0x0]})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x7, 0x4, 0x1, 0x50}]})
geteuid()
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='0\n', 0x2)
close(r1)
ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000140))
executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x80001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 8 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-socket$inet6-socket$nl_generic-socket$inet-socket$nl_generic-mmap$IORING_OFF_SQ_RING-sendmsg$inet-socketpair$unix-sendmsg$inet-recvmsg$unix-socketpair$unix-syz_ublk_add_dev-socket$inet6_tcp-dup-syz_ublk_setup_queues
detailed listing:
executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x80001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-syz_open_dev$video4linux-ioctl$BTRFS_IOC_TREE_SEARCH_V2-madvise-prctl$PR_SET_SECCOMP-geteuid-openat-write-close-ioctl$VT_OPENQRY
detailed listing:
executing program 0:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x9, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000000c0)={{0x0, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x4, 0x1, 0x9, 0xb, 0x9, 0x0, 0x2ba6, 0x4, 0x2, 0x9}, 0x10, [0x0, 0x0]})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x7, 0x4, 0x1, 0x50}]})
geteuid()
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='0\n', 0x2)
close(r1)
ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000140))

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-ioctl$ifreq_SIOCGIFINDEX_batadv_mesh-sendto$packet
detailed listing:
executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000000)="114353012008ba000000375186dd", 0xe, 0x24008081, &(0x7f00000000c0)={0x11, 0xe5, r1, 0x1, 0x7, 0x6, @random="0b42e3e24e7e"}, 0x14)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-syz_usb_connect-openat$cgroup_devices-syz_emit_vhci
detailed listing:
executing program 0:
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c0320904000002"], 0x0)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-socket$inet-sendmsg$inet-socketpair$unix-syz_open_procfs-mkdirat-mount-process_madvise-openat-socket$packet-socket$inet6_tcp-socket$igmp6-epoll_create1-socketpair$unix-connect$unix-sendmmsg$unix-epoll_pwait-recvmmsg-socket$nl_route-socket$nl_netfilter-syz_emit_vhci-openat$tun
detailed listing:
executing program 0:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000480), 0x0, &(0x7f0000001780)=[@ip_ttl={{0x14, 0x0, 0x34}}], 0x18}, 0xc8c4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
r1 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00')
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, 0x0, 0x0, 0x225834, 0x0)
process_madvise(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="1df424f55bd7093482c17d4470c405adc8e46b2bf5a1bd973b4cd14067b20448ad0bf758e214f6313a7d5ea2e61f53b2f7d7738e8c1c8168bc1c97774fb377bc812f26aacfd84659564be98d10c9981c728a86f4184659551233db5a4006301b917651e425e6210c340f1acde8fe7b7cbada8538ad847170cb5ec2ff9a484f9328e156b39e6deda77214a69a6c3d1447254d42e727fd2b4f285c237056d2feff34970033395d1150c7951b19a2685b88b65e191bdd3c2f88d39f5c77537a6533", 0xc0}, {&(0x7f0000000280)="383c0a4c67a3c3d47b7fd7517b9a5e618da6a644457f09b39134e0abdc1fce99b9132dfb2afcb7a9de3b8d9d540f50a6d033417463a947c92e7d57aa5d70ccfdcc76af531da35936fef12a9d30e42ebc8a5c41dabb64676568b9cf84c7ccd5cf8b6af41606da45dc37adfa5347603b5c", 0x70}], 0x2, 0x64, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r2 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
epoll_pwait(r2, &(0x7f0000000140), 0x0, 0x2d516fb6, 0x0, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="040504", @ANYRES16=r5], 0x7)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-socket$inet-sendmsg$inet-socketpair$unix-syz_open_procfs-mkdirat-mount-process_madvise-openat-socket$packet-socket$inet6_tcp-socket$igmp6-epoll_create1-socketpair$unix-connect$unix-sendmmsg$unix-epoll_pwait-recvmmsg-socket$nl_route-socket$nl_netfilter-syz_emit_vhci-openat$tun
detailed listing:
executing program 0:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000480), 0x0, &(0x7f0000001780)=[@ip_ttl={{0x14, 0x0, 0x34}}], 0x18}, 0xc8c4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
r1 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00')
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, 0x0, 0x0, 0x225834, 0x0)
process_madvise(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="1df424f55bd7093482c17d4470c405adc8e46b2bf5a1bd973b4cd14067b20448ad0bf758e214f6313a7d5ea2e61f53b2f7d7738e8c1c8168bc1c97774fb377bc812f26aacfd84659564be98d10c9981c728a86f4184659551233db5a4006301b917651e425e6210c340f1acde8fe7b7cbada8538ad847170cb5ec2ff9a484f9328e156b39e6deda77214a69a6c3d1447254d42e727fd2b4f285c237056d2feff34970033395d1150c7951b19a2685b88b65e191bdd3c2f88d39f5c77537a6533", 0xc0}, {&(0x7f0000000280)="383c0a4c67a3c3d47b7fd7517b9a5e618da6a644457f09b39134e0abdc1fce99b9132dfb2afcb7a9de3b8d9d540f50a6d033417463a947c92e7d57aa5d70ccfdcc76af531da35936fef12a9d30e42ebc8a5c41dabb64676568b9cf84c7ccd5cf8b6af41606da45dc37adfa5347603b5c", 0x70}], 0x2, 0x64, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r2 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
epoll_pwait(r2, &(0x7f0000000140), 0x0, 0x2d516fb6, 0x0, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="040504", @ANYRES16=r5], 0x7)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MP_STATE-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-sendmsg$IPSET_CMD_CREATE-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-mount-openat-read$FUSE-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_REGS-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r5, &(0x7f0000000f80)={0x2020}, 0x2020)
read$FUSE(r5, &(0x7f0000009240)={0x2020}, 0x2020)
r6 = dup(r4)
write$cgroup_int(r6, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x100000008, 0x7f, 0x1, 0x0, 0x2, 0xfffffffffffff804, 0x0, 0x0, 0x0, 0x102000000000000, 0x7, 0x2, 0x1, 0x8], 0xeeef0000, 0x4fb40})
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program crashed: general protection fault in __bh_submit
single: successfully extracted reproducer
found reproducer with 26 syscalls
minimizing guilty program
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MP_STATE-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-sendmsg$IPSET_CMD_CREATE-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-mount-openat-read$FUSE-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_REGS-ioctl$KVM_SET_GUEST_DEBUG_x86
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r5, &(0x7f0000000f80)={0x2020}, 0x2020)
read$FUSE(r5, &(0x7f0000009240)={0x2020}, 0x2020)
r6 = dup(r4)
write$cgroup_int(r6, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x100000008, 0x7f, 0x1, 0x0, 0x2, 0xfffffffffffff804, 0x0, 0x0, 0x0, 0x102000000000000, 0x7, 0x2, 0x1, 0x8], 0xeeef0000, 0x4fb40})
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)

program did not crash
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MP_STATE-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-sendmsg$IPSET_CMD_CREATE-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-mount-openat-read$FUSE-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_REGS-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r5, &(0x7f0000000f80)={0x2020}, 0x2020)
read$FUSE(r5, &(0x7f0000009240)={0x2020}, 0x2020)
r6 = dup(r4)
write$cgroup_int(r6, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x100000008, 0x7f, 0x1, 0x0, 0x2, 0xfffffffffffff804, 0x0, 0x0, 0x0, 0x102000000000000, 0x7, 0x2, 0x1, 0x8], 0xeeef0000, 0x4fb40})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MP_STATE-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-sendmsg$IPSET_CMD_CREATE-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-mount-openat-read$FUSE-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r5, &(0x7f0000000f80)={0x2020}, 0x2020)
read$FUSE(r5, &(0x7f0000009240)={0x2020}, 0x2020)
r6 = dup(r4)
write$cgroup_int(r6, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program crashed: general protection fault in __bh_submit
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MP_STATE-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-sendmsg$IPSET_CMD_CREATE-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-mount-openat-read$FUSE-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r5, &(0x7f0000000f80)={0x2020}, 0x2020)
read$FUSE(r5, &(0x7f0000009240)={0x2020}, 0x2020)
r6 = dup(r4)
write$cgroup_int(r6, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MP_STATE-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-sendmsg$IPSET_CMD_CREATE-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-mount-openat-read$FUSE-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r5, &(0x7f0000000f80)={0x2020}, 0x2020)
read$FUSE(r5, &(0x7f0000009240)={0x2020}, 0x2020)
r6 = dup(r4)
write$cgroup_int(r6, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MP_STATE-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-sendmsg$IPSET_CMD_CREATE-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-mount-openat-read$FUSE-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r5, &(0x7f0000000f80)={0x2020}, 0x2020)
read$FUSE(r5, &(0x7f0000009240)={0x2020}, 0x2020)
r6 = dup(r4)
write$cgroup_int(r6, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MP_STATE-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-sendmsg$IPSET_CMD_CREATE-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-mount-openat-read$FUSE-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r5, &(0x7f0000000f80)={0x2020}, 0x2020)
read$FUSE(r5, &(0x7f0000009240)={0x2020}, 0x2020)
r6 = dup(r4)
write$cgroup_int(r6, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MP_STATE-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-sendmsg$IPSET_CMD_CREATE-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-mount-openat-read$FUSE-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r5, &(0x7f0000000f80)={0x2020}, 0x2020)
read$FUSE(r5, &(0x7f0000009240)={0x2020}, 0x2020)
r6 = dup(r4)
write$cgroup_int(r6, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MP_STATE-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-sendmsg$IPSET_CMD_CREATE-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-mount-openat-read$FUSE-read$FUSE-dup-write$cgroup_int-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r5, &(0x7f0000000f80)={0x2020}, 0x2020)
read$FUSE(r5, &(0x7f0000009240)={0x2020}, 0x2020)
r6 = dup(r4)
write$cgroup_int(r6, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MP_STATE-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-sendmsg$IPSET_CMD_CREATE-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-mount-openat-read$FUSE-read$FUSE-dup-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r5, &(0x7f0000000f80)={0x2020}, 0x2020)
read$FUSE(r5, &(0x7f0000009240)={0x2020}, 0x2020)
dup(r4)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MP_STATE-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-sendmsg$IPSET_CMD_CREATE-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-mount-openat-read$FUSE-read$FUSE-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r4, &(0x7f0000000f80)={0x2020}, 0x2020)
read$FUSE(r4, &(0x7f0000009240)={0x2020}, 0x2020)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r5, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MP_STATE-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-sendmsg$IPSET_CMD_CREATE-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-mount-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r5, &(0x7f0000000f80)={0x2020}, 0x2020)
r6 = dup(r4)
write$cgroup_int(r6, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MP_STATE-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-sendmsg$IPSET_CMD_CREATE-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-mount-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r5, &(0x7f0000009240)={0x2020}, 0x2020)
r6 = dup(r4)
write$cgroup_int(r6, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program crashed: general protection fault in __bh_submit
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MP_STATE-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-sendmsg$IPSET_CMD_CREATE-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-mount-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000009240)={0x2020}, 0x2020)
r5 = dup(r4)
write$cgroup_int(r5, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MP_STATE-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-sendmsg$IPSET_CMD_CREATE-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r5, &(0x7f0000009240)={0x2020}, 0x2020)
r6 = dup(r4)
write$cgroup_int(r6, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program crashed: general protection fault in __bh_submit
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MP_STATE-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-sendmsg$IPSET_CMD_CREATE-syz_usb_control_io$lan78xx-openat$sysctl-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r5, &(0x7f0000009240)={0x2020}, 0x2020)
r6 = dup(r4)
write$cgroup_int(r6, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MP_STATE-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-sendmsg$IPSET_CMD_CREATE-syz_usb_control_io$lan78xx-mkdir-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r4, &(0x7f0000009240)={0x2020}, 0x2020)
r5 = dup(0xffffffffffffffff)
write$cgroup_int(r5, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MP_STATE-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-sendmsg$IPSET_CMD_CREATE-openat$sysctl-mkdir-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r5, &(0x7f0000009240)={0x2020}, 0x2020)
r6 = dup(r4)
write$cgroup_int(r6, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MP_STATE-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r4, &(0x7f0000009240)={0x2020}, 0x2020)
r5 = dup(r3)
write$cgroup_int(r5, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program crashed: general protection fault in __bh_submit
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MP_STATE-mmap-socket$nl_netfilter-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r4, &(0x7f0000009240)={0x2020}, 0x2020)
r5 = dup(r3)
write$cgroup_int(r5, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MP_STATE-mmap-sendmsg$nl_xfrm-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r4, &(0x7f0000009240)={0x2020}, 0x2020)
r5 = dup(r3)
write$cgroup_int(r5, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MP_STATE-socket$nl_netfilter-sendmsg$nl_xfrm-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r4, &(0x7f0000009240)={0x2020}, 0x2020)
r5 = dup(r3)
write$cgroup_int(r5, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r4, &(0x7f0000009240)={0x2020}, 0x2020)
r5 = dup(r3)
write$cgroup_int(r5, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program crashed: general protection fault in __bh_submit
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r2, &(0x7f0000009240)={0x2020}, 0x2020)
r3 = dup(r1)
write$cgroup_int(r3, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

program did not crash
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VCPU-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r2, &(0x7f0000009240)={0x2020}, 0x2020)
r3 = dup(r1)
write$cgroup_int(r3, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r0, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

program did not crash
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r3, &(0x7f0000009240)={0x2020}, 0x2020)
r4 = dup(r2)
write$cgroup_int(r4, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r5, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r1, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

program did not crash
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r4, &(0x7f0000009240)={0x2020}, 0x2020)
r5 = dup(r3)
write$cgroup_int(r5, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r4, &(0x7f0000009240)={0x2020}, 0x2020)
r5 = dup(r3)
write$cgroup_int(r5, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r4, &(0x7f0000009240)={0x2020}, 0x2020)
r5 = dup(r3)
write$cgroup_int(r5, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r4, &(0x7f0000009240)={0x2020}, 0x2020)
r5 = dup(r3)
write$cgroup_int(r5, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(0x0, 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r4, &(0x7f0000009240)={0x2020}, 0x2020)
r5 = dup(r3)
write$cgroup_int(r5, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x183)
read$FUSE(r4, &(0x7f0000009240)={0x2020}, 0x2020)
r5 = dup(r3)
write$cgroup_int(r5, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r4, 0x0, 0x0)
r5 = dup(r3)
write$cgroup_int(r5, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r4, &(0x7f0000009240)={0x2020}, 0x2020)
r5 = dup(r3)
write$cgroup_int(r5, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r4, &(0x7f0000009240)={0x2020}, 0x2020)
r5 = dup(r3)
write$cgroup_int(r5, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r6, 0x1, 0x42, 0x0, &(0x7f0000000180))
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r4, &(0x7f0000009240)={0x2020}, 0x2020)
r5 = dup(r3)
write$cgroup_int(r5, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000000), 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
program did not crash
simplifying guilty program options
testing program (duration=43.008712776s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r4, &(0x7f0000009240)={0x2020}, 0x2020)
r5 = dup(r3)
write$cgroup_int(r5, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=43.008712776s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r4, &(0x7f0000009240)={0x2020}, 0x2020)
r5 = dup(r3)
write$cgroup_int(r5, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r4, &(0x7f0000009240)={0x2020}, 0x2020)
r5 = dup(r3)
write$cgroup_int(r5, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r4, &(0x7f0000009240)={0x2020}, 0x2020)
r5 = dup(r3)
write$cgroup_int(r5, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
validation run: crashed=false
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r4, &(0x7f0000009240)={0x2020}, 0x2020)
r5 = dup(r3)
write$cgroup_int(r5, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
validation run: crashed=false
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r4, &(0x7f0000009240)={0x2020}, 0x2020)
r5 = dup(r3)
write$cgroup_int(r5, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
validation run: crashed=false
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r4, &(0x7f0000009240)={0x2020}, 0x2020)
r5 = dup(r3)
write$cgroup_int(r5, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
validation run: crashed=false
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r4, &(0x7f0000009240)={0x2020}, 0x2020)
r5 = dup(r3)
write$cgroup_int(r5, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
validation run: crashed=false
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r4, &(0x7f0000009240)={0x2020}, 0x2020)
r5 = dup(r3)
write$cgroup_int(r5, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program crashed: general protection fault in __bh_submit
validation run: crashed=true
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r4, &(0x7f0000009240)={0x2020}, 0x2020)
r5 = dup(r3)
write$cgroup_int(r5, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program crashed: general protection fault in __bh_submit
validation run: crashed=true
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r4, &(0x7f0000009240)={0x2020}, 0x2020)
r5 = dup(r3)
write$cgroup_int(r5, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
validation run: crashed=false
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r4, &(0x7f0000009240)={0x2020}, 0x2020)
r5 = dup(r3)
write$cgroup_int(r5, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
validation run: crashed=false
testing program (duration=43.008712776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mmap-socket$nl_netfilter-sendmsg$nl_xfrm-syz_usb_control_io$lan78xx-openat$sysctl-mkdir-openat-read$FUSE-dup-write$cgroup_int-syz_usb_control_io$uac1-socket$inet_mptcp-getsockopt$sock_timeval-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io-ioctl$KVM_SET_GUEST_DEBUG_x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
read$FUSE(r4, &(0x7f0000009240)={0x2020}, 0x2020)
r5 = dup(r3)
write$cgroup_int(r5, &(0x7f0000000040)=0xfffffffffffffffe, 0x12)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
validation run: crashed=false
reproducing took 2h0m10.098589361s
repro crashed as (corrupted=false):
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI
KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
CPU: 0 UID: 0 PID: 4947 Comm: jbd2/sda1-8 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
RIP: 0010:const_folio_flags include/linux/page-flags.h:345 [inline]
RIP: 0010:folio_test_dropbehind include/linux/page-flags.h:600 [inline]
RIP: 0010:__bh_submit+0x22d/0x8d0 fs/buffer.c:1109
Code: c1 e8 03 48 89 44 24 18 42 80 3c 20 00 74 08 48 89 df e8 f6 e7 d7 ff 48 89 5c 24 28 48 8b 1b 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 d4 e7 d7 ff 4d 8b 3f 4c 89 fe 48
RSP: 0018:ffffc9000ea57868 EFLAGS: 00010202
RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff84b9d9a9
RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888025b877a0
RBP: 0000000000009801 R08: ffff888025b877ff R09: 1ffff11004b70eff
R10: dffffc0000000000 R11: ffffed1004b70f00 R12: dffffc0000000000
R13: ffff888025b87780 R14: ffff8880762357e0 R15: 0000000000000008
FS:  0000000000000000(0000) GS:ffff88812485b000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f6e68beec38 CR3: 000000003335a000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 jbd2_journal_commit_transaction+0x2285/0x5c80 fs/jbd2/commit.c:751
 kjournald2+0x3bc/0x740 fs/jbd2/journal.c:200
 kthread+0x38b/0x480 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:const_folio_flags include/linux/page-flags.h:345 [inline]
RIP: 0010:folio_test_dropbehind include/linux/page-flags.h:600 [inline]
RIP: 0010:__bh_submit+0x22d/0x8d0 fs/buffer.c:1109
Code: c1 e8 03 48 89 44 24 18 42 80 3c 20 00 74 08 48 89 df e8 f6 e7 d7 ff 48 89 5c 24 28 48 8b 1b 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 d4 e7 d7 ff 4d 8b 3f 4c 89 fe 48
RSP: 0018:ffffc9000ea57868 EFLAGS: 00010202
RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff84b9d9a9
RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888025b877a0
RBP: 0000000000009801 R08: ffff888025b877ff R09: 1ffff11004b70eff
R10: dffffc0000000000 R11: ffffed1004b70f00 R12: dffffc0000000000
R13: ffff888025b87780 R14: ffff8880762357e0 R15: 0000000000000008
FS:  0000000000000000(0000) GS:ffff88812485b000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f6e68beec38 CR3: 0000000073a1a000 CR4: 00000000003526f0
----------------
Code disassembly (best guess):
   0:	c1 e8 03             	shr    $0x3,%eax
   3:	48 89 44 24 18       	mov    %rax,0x18(%rsp)
   8:	42 80 3c 20 00       	cmpb   $0x0,(%rax,%r12,1)
   d:	74 08                	je     0x17
   f:	48 89 df             	mov    %rbx,%rdi
  12:	e8 f6 e7 d7 ff       	call   0xffd7e80d
  17:	48 89 5c 24 28       	mov    %rbx,0x28(%rsp)
  1c:	48 8b 1b             	mov    (%rbx),%rbx
  1f:	4c 8d 7b 08          	lea    0x8(%rbx),%r15
  23:	4c 89 f8             	mov    %r15,%rax
  26:	48 c1 e8 03          	shr    $0x3,%rax
* 2a:	42 80 3c 20 00       	cmpb   $0x0,(%rax,%r12,1) <-- trapping instruction
  2f:	74 08                	je     0x39
  31:	4c 89 ff             	mov    %r15,%rdi
  34:	e8 d4 e7 d7 ff       	call   0xffd7e80d
  39:	4d 8b 3f             	mov    (%r15),%r15
  3c:	4c 89 fe             	mov    %r15,%rsi
  3f:	48                   	rex.W

final repro crashed as (corrupted=false):
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI
KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
CPU: 0 UID: 0 PID: 4947 Comm: jbd2/sda1-8 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
RIP: 0010:const_folio_flags include/linux/page-flags.h:345 [inline]
RIP: 0010:folio_test_dropbehind include/linux/page-flags.h:600 [inline]
RIP: 0010:__bh_submit+0x22d/0x8d0 fs/buffer.c:1109
Code: c1 e8 03 48 89 44 24 18 42 80 3c 20 00 74 08 48 89 df e8 f6 e7 d7 ff 48 89 5c 24 28 48 8b 1b 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 d4 e7 d7 ff 4d 8b 3f 4c 89 fe 48
RSP: 0018:ffffc9000ea57868 EFLAGS: 00010202
RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff84b9d9a9
RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888025b877a0
RBP: 0000000000009801 R08: ffff888025b877ff R09: 1ffff11004b70eff
R10: dffffc0000000000 R11: ffffed1004b70f00 R12: dffffc0000000000
R13: ffff888025b87780 R14: ffff8880762357e0 R15: 0000000000000008
FS:  0000000000000000(0000) GS:ffff88812485b000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f6e68beec38 CR3: 000000003335a000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 jbd2_journal_commit_transaction+0x2285/0x5c80 fs/jbd2/commit.c:751
 kjournald2+0x3bc/0x740 fs/jbd2/journal.c:200
 kthread+0x38b/0x480 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:const_folio_flags include/linux/page-flags.h:345 [inline]
RIP: 0010:folio_test_dropbehind include/linux/page-flags.h:600 [inline]
RIP: 0010:__bh_submit+0x22d/0x8d0 fs/buffer.c:1109
Code: c1 e8 03 48 89 44 24 18 42 80 3c 20 00 74 08 48 89 df e8 f6 e7 d7 ff 48 89 5c 24 28 48 8b 1b 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 d4 e7 d7 ff 4d 8b 3f 4c 89 fe 48
RSP: 0018:ffffc9000ea57868 EFLAGS: 00010202
RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff84b9d9a9
RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888025b877a0
RBP: 0000000000009801 R08: ffff888025b877ff R09: 1ffff11004b70eff
R10: dffffc0000000000 R11: ffffed1004b70f00 R12: dffffc0000000000
R13: ffff888025b87780 R14: ffff8880762357e0 R15: 0000000000000008
FS:  0000000000000000(0000) GS:ffff88812485b000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f6e68beec38 CR3: 0000000073a1a000 CR4: 00000000003526f0
----------------
Code disassembly (best guess):
   0:	c1 e8 03             	shr    $0x3,%eax
   3:	48 89 44 24 18       	mov    %rax,0x18(%rsp)
   8:	42 80 3c 20 00       	cmpb   $0x0,(%rax,%r12,1)
   d:	74 08                	je     0x17
   f:	48 89 df             	mov    %rbx,%rdi
  12:	e8 f6 e7 d7 ff       	call   0xffd7e80d
  17:	48 89 5c 24 28       	mov    %rbx,0x28(%rsp)
  1c:	48 8b 1b             	mov    (%rbx),%rbx
  1f:	4c 8d 7b 08          	lea    0x8(%rbx),%r15
  23:	4c 89 f8             	mov    %r15,%rax
  26:	48 c1 e8 03          	shr    $0x3,%rax
* 2a:	42 80 3c 20 00       	cmpb   $0x0,(%rax,%r12,1) <-- trapping instruction
  2f:	74 08                	je     0x39
  31:	4c 89 ff             	mov    %r15,%rdi
  34:	e8 d4 e7 d7 ff       	call   0xffd7e80d
  39:	4d 8b 3f             	mov    (%r15),%r15
  3c:	4c 89 fe             	mov    %r15,%rsi
  3f:	48                   	rex.W